Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xZ4KKP_kRIhzXXdfG25rbHapTik.roa
File: xZ4KKP_kRIhzXXdfG25rbHapTik.roa (raw, json)
Hash identifier: 4iPCcIPOhfuZaZJviFApNQA6pyivqmrhCTkS1+B9qI4=
Subject key identifier: C5:9E:0A:28:FF:E4:44:88:73:5D:77:5F:1B:6E:6B:6C:76:A9:4E:29
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0195D78062A3C64BA716EE83528081F07116
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xZ4KKP_kRIhzXXdfG25rbHapTik.roa
Signing time: Thu 27 Mar 2025 12:07:50 +0000
ROA not before: Thu 27 Mar 2025 12:07:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60068
IP address blocks: 62.93.164.0/22 maxlen: 24
62.93.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 11:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:80:62:a3:c6:4b:a7:16:ee:83:52:80:81:f0:71:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Mar 27 12:07:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c59e0a28ffe44488735d775f1b6e6b6c76a94e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:f3:ec:f8:b0:a4:34:ea:ed:48:df:5f:d1:
79:71:7c:ca:0c:12:e5:2a:1e:c5:ff:d6:05:cf:bf:
f8:2c:56:86:cf:4b:56:c9:df:70:6f:ec:49:56:39:
27:b6:f7:ab:c2:a2:76:67:bc:7c:88:12:cc:ea:43:
6f:27:51:6b:06:67:fc:30:43:1f:f8:bd:00:86:e1:
51:55:54:68:76:9f:cd:a8:11:65:76:3e:12:5c:e3:
f7:75:c2:63:22:26:16:f2:a4:3c:9d:fd:7d:75:6f:
d9:47:cc:40:7f:12:2c:82:37:f4:64:e2:c7:d7:4a:
8b:ab:cd:ff:3f:16:23:49:fd:a3:fe:80:17:81:92:
ef:0e:ea:46:5d:2d:a9:c8:1c:00:87:89:27:44:ee:
ba:93:d3:0f:d4:7e:73:5f:81:d1:2b:51:cd:42:c9:
a3:19:cb:77:cc:5d:4b:b2:ea:14:29:75:a5:20:64:
de:2f:f3:b1:77:9e:53:fc:e4:7a:8e:2e:7d:48:bf:
bd:ec:d1:00:32:a2:b4:4d:4c:95:e3:47:ff:38:92:
f8:c9:38:a8:f6:c0:a1:4c:c2:6e:e0:fd:c5:ca:3d:
1a:7a:e1:6c:cf:79:1c:34:da:56:3e:fa:4b:82:13:
d5:e6:05:77:05:18:a5:57:34:9e:46:b4:fc:4a:91:
f6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9E:0A:28:FF:E4:44:88:73:5D:77:5F:1B:6E:6B:6C:76:A9:4E:29
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xZ4KKP_kRIhzXXdfG25rbHapTik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.164.0/22
62.93.176.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:33:14:5c:51:cf:d5:b3:0f:6e:9b:3a:72:58:05:87:87:58:
50:e9:50:80:67:00:b7:21:e0:c9:1c:20:e1:1a:06:03:3e:5e:
21:9e:bb:cb:52:dd:c7:4b:3e:d4:ca:c7:0f:ba:e5:29:f1:8d:
ba:4d:13:80:d8:37:9b:67:2e:a5:15:c3:73:fa:7b:4a:1f:65:
40:a4:83:3c:30:5c:e5:76:cf:51:42:15:39:a4:ad:ec:c4:40:
89:18:74:27:cd:99:62:66:49:2b:75:57:5a:65:2a:b4:96:c5:
13:3d:08:12:6f:b6:37:28:c6:0c:97:8c:e0:27:d1:c2:14:64:
cf:70:52:c5:f6:95:09:93:a5:05:b8:1d:80:08:24:e2:04:71:
de:28:46:83:8a:5b:94:21:8b:8f:75:d0:5a:7b:02:e6:50:6b:
ab:a0:1d:9f:a0:a3:1a:59:e2:1c:7d:c5:66:b5:a1:2b:02:6d:
4a:6b:ab:95:3f:d8:a0:53:f5:18:f2:a8:d3:fe:60:37:b4:7e:
d9:8f:66:eb:19:92:5c:17:73:37:76:9f:df:0c:be:9b:08:7a:
c2:2b:27:90:42:36:dc:99:72:50:65:37:be:91:61:3c:a1:8c:
62:3d:36:ac:2e:1b:9c:01:6f:7e:fb:cc:42:28:db:b2:74:92:
dd:85:40:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:42:08 2025 by rpki-client