Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/YrC8Q2BSR-im-gLcltcn6Ry286A.roa
File: YrC8Q2BSR-im-gLcltcn6Ry286A.roa (raw, json)
Hash identifier: bwfLBcwGY0BY4GfrBXJlqCMOtrsnuqTYKPrXVlf56EI=
Subject key identifier: 62:B0:BC:43:60:52:47:E8:A6:FA:02:DC:96:D7:27:E9:1C:B6:F3:A0
Certificate issuer: /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Certificate serial: 019390C9950135D9FBB0DD2624D0DE5AEE8A
Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/YrC8Q2BSR-im-gLcltcn6Ry286A.roa
Signing time: Wed 04 Dec 2024 08:29:09 +0000
ROA not before: Wed 04 Dec 2024 08:29:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45010
IP address blocks: 62.220.224.0/22 maxlen: 22
93.90.48.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:90:c9:95:01:35:d9:fb:b0:dd:26:24:d0:de:5a:ee:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Validity
Not Before: Dec 4 08:29:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62b0bc43605247e8a6fa02dc96d727e91cb6f3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:29:4a:c9:f5:54:ef:93:ed:e9:c0:3f:dd:
15:bc:1f:45:86:b1:27:17:cf:a2:f9:ef:86:20:11:
a5:cb:a5:49:32:47:84:4c:db:a8:5a:d2:57:c5:41:
1a:73:8d:0b:28:2d:ef:a0:18:d1:70:5d:9b:23:ee:
77:a0:82:c4:58:70:45:66:a4:02:93:bd:84:3a:9c:
4d:95:67:67:41:99:f5:07:8f:55:df:61:42:30:90:
ae:72:ae:22:a3:60:b1:22:14:62:39:3a:49:28:8c:
b1:67:39:74:cb:0a:8c:46:0b:5f:8d:5f:55:1d:4f:
5a:d7:3f:06:93:c9:13:dc:68:ee:62:e9:42:b7:11:
10:6e:f3:74:4a:b1:b7:8d:40:45:fc:cb:bf:9f:b7:
44:28:0b:68:2f:b6:ba:c4:0d:33:ee:c9:74:7a:c8:
a8:d9:8f:64:71:d2:be:18:3a:49:c0:20:5a:cd:bc:
31:13:30:33:6f:3d:fb:84:9e:4e:24:53:bb:7d:06:
99:e8:c4:71:cd:93:d2:97:10:69:0f:40:f0:e0:cb:
42:f7:c4:14:a5:9e:fc:7f:dd:82:77:a8:c6:04:43:
73:b0:f6:46:44:51:0d:75:79:0d:bf:e9:be:bf:d3:
50:b7:56:4b:4e:12:af:b2:7d:56:74:72:cb:e2:53:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B0:BC:43:60:52:47:E8:A6:FA:02:DC:96:D7:27:E9:1C:B6:F3:A0
X509v3 Authority Key Identifier:
keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/YrC8Q2BSR-im-gLcltcn6Ry286A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.224.0/22
93.90.48.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:9a:b4:50:58:a8:0f:67:be:24:f7:71:f9:92:db:12:bd:11:
bf:f4:3d:b0:80:ff:1e:53:9e:7d:55:0b:bf:95:3f:79:76:0c:
3e:99:1d:dd:58:cc:23:02:e5:10:3d:62:6d:29:51:2f:cb:8d:
af:17:80:77:c9:81:ad:03:60:50:7a:1b:8e:ca:eb:0a:61:20:
a9:7e:0a:7c:7c:db:8c:a5:0a:9e:aa:e0:f9:a1:6e:48:ac:47:
30:72:92:3c:23:55:c1:7d:17:d3:05:9d:a4:48:1c:b7:48:a3:
f3:77:c5:db:82:c8:14:3d:79:77:e0:68:f3:7a:65:b9:f4:5e:
c7:99:7b:53:e0:2d:f7:56:b0:f3:3e:25:8c:4a:66:1e:41:53:
26:fc:92:3e:61:c1:d3:de:b5:2a:03:4d:fa:93:72:ec:a9:aa:
ed:a3:dd:86:bc:42:ff:38:db:5f:fc:4c:a8:42:36:8f:d3:66:
14:f2:bd:42:52:14:7f:25:c1:16:39:6e:06:f1:11:ff:78:a5:
b3:bf:03:59:89:4d:09:6f:ec:4a:6c:ff:b9:9b:4f:62:1d:4a:
c8:b9:15:46:13:40:ae:0a:62:aa:75:88:18:d8:98:65:a2:f1:
2f:ac:cb:a1:1d:ad:0d:b5:3c:21:a4:89:3f:93:23:f9:c2:33:
4b:a1:61:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:17:29 2025 by rpki-client