Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Uc2vex1-TWx-Q9hE_rYxVqz4Aqc.roa
File: Uc2vex1-TWx-Q9hE_rYxVqz4Aqc.roa (raw, json)
Hash identifier: H+K3qM2muoCphL6UpFfaON682Qhz7yUgLuIr7UKI2Qk=
Subject key identifier: 51:CD:AF:7B:1D:7E:4D:6C:7E:43:D8:44:FE:B6:31:56:AC:F8:02:A7
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D84C45C32FF6857CC24BC459B4E0C51A8
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Uc2vex1-TWx-Q9hE_rYxVqz4Aqc.roa
Signing time: Wed 07 Feb 2024 18:11:17 +0000
ROA not before: Wed 07 Feb 2024 18:11:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64433
IP address blocks: 62.233.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:c4:5c:32:ff:68:57:cc:24:bc:45:9b:4e:0c:51:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 7 18:11:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51cdaf7b1d7e4d6c7e43d844feb63156acf802a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:ac:42:d7:ed:3a:29:b1:38:76:36:45:c9:
6c:8f:fc:9c:28:c9:f6:a3:53:5d:e5:7c:0e:c8:a1:
e4:5f:7c:77:26:91:45:40:e3:62:93:09:0f:80:3b:
96:d3:d6:f8:4c:27:12:3f:0c:99:ae:32:9c:bc:72:
56:1d:20:d2:05:41:59:29:cf:26:5a:3f:a6:5a:fb:
86:96:a2:44:fe:eb:95:d1:5c:6d:b0:cd:39:8a:4f:
e6:1c:90:56:78:e9:4a:2a:cd:a9:eb:98:33:6f:75:
00:df:1d:c3:55:3e:83:55:23:b5:02:b0:86:e2:17:
40:28:2a:ac:4a:a8:c1:63:32:8f:29:e2:19:f8:e7:
4b:70:a8:fd:28:a5:bf:48:eb:5f:2a:b2:e0:db:9b:
4d:fb:2b:3a:aa:1e:72:03:65:69:b6:dc:b2:cf:b4:
dd:ae:13:a3:e9:b1:4d:3f:d0:02:33:c3:0a:2b:1b:
cd:03:66:1d:a0:ca:d8:a1:08:01:bd:35:7d:1b:7e:
b0:6f:e4:68:9b:51:43:2b:22:33:5f:dd:25:35:50:
5d:94:7b:01:6d:7f:37:e5:3f:6f:0e:ab:78:97:79:
3b:07:7f:35:e2:d7:b3:fd:37:73:4d:21:68:35:2b:
1b:5c:20:79:81:b3:12:0b:d6:57:95:af:3d:17:e9:
a9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CD:AF:7B:1D:7E:4D:6C:7E:43:D8:44:FE:B6:31:56:AC:F8:02:A7
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Uc2vex1-TWx-Q9hE_rYxVqz4Aqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.47.0/24
Signature Algorithm: sha256WithRSAEncryption
75:0a:34:7f:76:0d:4c:3d:c4:88:33:b3:36:39:04:6b:33:54:
a0:0d:75:f1:c9:cf:66:dd:88:86:cc:23:a5:9f:88:36:21:dc:
e0:70:fb:14:2f:aa:db:0c:e4:c7:08:9b:be:0f:69:dd:48:58:
63:e3:2b:03:42:a6:52:26:4f:06:ee:5a:72:7f:be:53:2f:4d:
9e:4c:f1:e0:ac:73:65:b0:f5:bf:dd:ac:2b:69:5f:dc:8a:f7:
f7:86:ad:8e:d9:67:1f:72:05:dc:e5:4e:8c:bf:d4:54:57:48:
02:b4:6e:52:32:df:e4:b0:d7:2e:15:7f:2f:08:ea:2f:82:2c:
7c:7e:95:a3:bd:51:de:f0:03:7e:e7:fd:54:0e:46:0d:34:79:
db:11:a3:e7:59:e7:42:8e:57:97:34:9b:79:cf:22:d5:e0:67:
7c:ea:df:4c:99:a7:1b:6c:73:42:dd:a5:1f:32:48:b2:be:f7:
b3:29:bc:32:76:c7:a5:d7:1c:20:91:35:6b:d4:3e:e9:21:00:
5a:ec:1f:6f:48:af:6e:c2:07:77:82:b2:31:b0:cd:e5:64:0f:
09:de:fb:3e:40:7f:62:c6:ad:85:19:60:05:91:d4:39:1e:12:
17:87:31:4c:65:52:58:f2:c1:03:9e:89:77:30:84:5d:a5:ae:
ff:12:0f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:39:46 2025 by rpki-client