Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/Spzxi4iOcZwFhdvH4wK1bO6G2bk.roa
File: Spzxi4iOcZwFhdvH4wK1bO6G2bk.roa (raw, json)
Hash identifier: 1SwbvelvrGxbdwLN9yV9nKrTg3Bgap9Y+Lr0wUaNnxQ=
Subject key identifier: 4A:9C:F1:8B:88:8E:71:9C:05:85:DB:C7:E3:02:B5:6C:EE:86:D9:B9
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 01929EE0ACAB4E49F3F23644AEB926538A56
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/Spzxi4iOcZwFhdvH4wK1bO6G2bk.roa
Signing time: Fri 18 Oct 2024 09:06:17 +0000
ROA not before: Fri 18 Oct 2024 09:06:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205952
IP address blocks: 62.213.72.0/21 maxlen: 21
62.213.94.0/23 maxlen: 23
62.213.102.0/23 maxlen: 23
62.213.112.0/23 maxlen: 23
62.213.116.0/24 maxlen: 24
185.48.236.0/22 maxlen: 22
212.24.37.0/24 maxlen: 24
212.24.39.0/24 maxlen: 24
212.24.40.0/24 maxlen: 24
212.24.43.0/24 maxlen: 24
212.24.50.0/24 maxlen: 24
212.24.57.0/24 maxlen: 24
212.158.168.0/24 maxlen: 24
212.158.170.0/23 maxlen: 23
212.158.174.0/23 maxlen: 23
217.23.129.0/24 maxlen: 24
217.23.139.0/24 maxlen: 24
217.23.152.0/21 maxlen: 21
2a01:9860::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9e:e0:ac:ab:4e:49:f3:f2:36:44:ae:b9:26:53:8a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Oct 18 09:06:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a9cf18b888e719c0585dbc7e302b56cee86d9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f6:cc:69:dd:6d:6e:2a:3b:54:83:8e:53:80:
f5:00:8b:1d:6b:b7:2f:d1:9d:20:9b:42:c2:91:f5:
f9:bf:e3:43:00:3d:db:e4:92:a1:4d:05:86:77:ef:
e2:eb:59:16:c3:51:5e:c4:fc:af:85:f9:71:55:42:
2f:fb:75:e6:e9:ae:1a:b9:9c:62:1c:f0:65:46:14:
52:79:5b:f2:2f:53:c9:f4:c8:5f:7f:36:9a:e4:ee:
47:c8:50:77:45:02:4a:b4:b9:16:15:ba:9c:bc:8c:
1d:1f:fc:34:53:e9:04:da:93:e0:8a:56:f3:47:61:
b4:bb:3c:46:20:4e:2e:f8:b2:c4:79:b7:8e:1e:e7:
76:92:18:18:37:ce:2b:64:15:eb:34:66:3b:34:2c:
32:3f:5c:3b:42:ab:90:88:cc:bb:b7:4f:7c:04:86:
73:36:d5:84:d3:fc:0c:63:80:ad:55:a4:39:2c:d3:
9d:e7:d0:87:f6:d0:db:b7:9f:1e:f7:c7:5d:a0:a6:
46:f1:2a:f4:2d:ab:d1:ef:32:4b:bc:6a:f8:f9:b9:
a8:54:84:8c:95:7a:01:27:5f:c3:8a:d9:96:4e:41:
a5:51:f7:ec:9a:1b:6c:02:2e:0b:d1:ab:5b:58:48:
6c:0c:53:5f:43:fa:38:f5:4f:96:f1:b2:83:b4:1c:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9C:F1:8B:88:8E:71:9C:05:85:DB:C7:E3:02:B5:6C:EE:86:D9:B9
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/Spzxi4iOcZwFhdvH4wK1bO6G2bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.213.72.0/21
62.213.94.0/23
62.213.102.0/23
62.213.112.0/23
62.213.116.0/24
185.48.236.0/22
212.24.37.0/24
212.24.39.0-212.24.40.255
212.24.43.0/24
212.24.50.0/24
212.24.57.0/24
212.158.168.0/24
212.158.170.0/23
212.158.174.0/23
217.23.129.0/24
217.23.139.0/24
217.23.152.0/21
IPv6:
2a01:9860::/32
Signature Algorithm: sha256WithRSAEncryption
b9:79:53:4c:68:30:81:0d:2d:28:08:9a:f0:3f:62:33:79:22:
5a:eb:f6:8e:f7:8e:20:ee:af:16:11:61:75:5b:10:d8:cc:2d:
6d:2b:e1:c7:cc:bd:ae:84:1c:09:ef:c5:f1:da:a3:22:de:3a:
83:1e:2b:96:c6:d2:71:99:a7:bf:15:30:4b:00:59:73:70:e8:
50:88:2c:8d:c6:07:36:5c:64:56:9a:00:b8:b4:fb:45:9d:3f:
33:b6:e2:31:fb:a3:21:ac:c8:07:ca:b4:ec:42:ab:94:39:ac:
27:e2:4e:a7:8c:6b:e4:cb:7d:cc:a4:cb:d1:e8:67:d6:02:75:
f5:6d:ea:40:08:9d:7a:9d:d5:52:b1:ca:b0:7d:51:46:3d:b4:
70:7d:43:c7:38:6f:94:e3:6b:09:9e:94:aa:c8:79:c1:e4:a8:
e4:7f:78:b1:56:e9:01:94:b6:09:11:c1:5b:f4:26:a8:83:c8:
e1:50:c9:fc:e0:c0:bd:ed:a0:0d:34:5d:ed:5c:ac:85:ce:c3:
18:cb:ea:5d:24:3d:25:35:63:67:65:5e:0a:df:f5:22:b6:ce:
d8:b7:6b:23:17:27:e4:b0:84:bd:3e:58:a8:d0:bb:1d:6d:34:
3e:8f:83:56:db:90:07:31:9a:47:9d:a6:b0:42:77:3e:31:6b:
74:1a:5f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:29 2025 by rpki-client