Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/x28Ok06c-VfAUQF4VM5eic_JcBU.roa
File: x28Ok06c-VfAUQF4VM5eic_JcBU.roa (raw, json)
Hash identifier: K6Je6k+pLua7iopJnAtaNWRtFghrPGYbl/xKA5HSuWo=
Subject key identifier: C7:6F:0E:93:4E:9C:F9:57:C0:51:01:78:54:CE:5E:89:CF:C9:70:15
Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial: 018F4D87315970B6B519296DF78AD70205CB
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/x28Ok06c-VfAUQF4VM5eic_JcBU.roa
Signing time: Mon 06 May 2024 10:50:56 +0000
ROA not before: Mon 06 May 2024 10:50:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211381
IP address blocks: 62.233.53.0/24 maxlen: 24
109.107.157.0/24 maxlen: 24
185.237.165.0/24 maxlen: 24
185.241.61.0/24 maxlen: 24
193.3.168.0/24 maxlen: 24
194.26.232.0/24 maxlen: 24
194.62.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 09:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:87:31:59:70:b6:b5:19:29:6d:f7:8a:d7:02:05:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Validity
Not Before: May 6 10:50:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c76f0e934e9cf957c051017854ce5e89cfc97015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:06:63:3e:1e:39:bd:86:77:8c:1c:09:2e:
93:9c:5c:50:79:53:bf:65:f6:53:98:10:5f:10:b2:
f4:8a:d2:19:10:2a:de:4f:4a:8a:61:d6:7b:6e:f4:
f4:63:2a:c7:fd:4c:c1:6b:93:bd:11:c6:1e:30:d8:
48:8e:f2:e5:71:81:d9:4d:3f:63:27:09:bb:d2:51:
44:46:87:c8:7f:f0:f8:b4:8e:51:11:89:7f:fc:14:
17:4c:76:91:47:2c:20:5e:d1:e2:60:b8:77:e1:e2:
30:1e:b2:b1:3b:26:98:2d:ea:50:c2:d5:be:d2:b5:
98:f2:85:ba:4a:2c:11:b2:94:db:ea:26:c9:a2:0b:
6d:56:14:74:6c:11:b4:2f:5e:67:ed:92:da:9f:72:
c0:a1:4d:7f:ec:b0:3d:b3:f8:10:c6:5a:a9:3b:69:
e5:87:0a:83:88:40:2d:56:ea:f4:a3:33:fd:55:9e:
dc:0f:a1:ec:5c:fb:69:57:05:5e:ed:77:29:39:cc:
e8:b4:5c:ec:e7:0b:ca:b3:71:16:bf:92:f8:cd:2d:
e2:1f:e5:30:7b:78:f7:01:04:ac:94:0a:bc:8a:52:
2f:12:10:61:95:d9:28:23:19:e4:13:28:ca:f2:69:
6e:2c:4d:c4:8b:28:96:8d:33:8f:43:a1:b1:c3:4f:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6F:0E:93:4E:9C:F9:57:C0:51:01:78:54:CE:5E:89:CF:C9:70:15
X509v3 Authority Key Identifier:
keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/x28Ok06c-VfAUQF4VM5eic_JcBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.53.0/24
109.107.157.0/24
185.237.165.0/24
185.241.61.0/24
193.3.168.0/24
194.26.232.0/24
194.62.105.0/24
Signature Algorithm: sha256WithRSAEncryption
73:8d:b4:d5:97:6b:fb:5d:8f:fa:6d:bc:9f:03:f2:57:70:42:
9a:54:44:cd:9e:ae:7b:1d:a7:98:a4:0c:c8:3c:20:42:1a:e3:
fd:67:c7:0d:2f:3d:63:8a:29:2d:d5:6e:a3:6d:3a:cf:a2:a3:
b5:f4:67:a3:49:8d:c3:ca:f3:20:02:a0:a5:d6:7b:2a:9b:49:
2a:97:72:29:2d:c2:a0:10:33:ce:9e:c2:63:53:bc:b5:f7:0a:
eb:53:4f:00:38:cc:06:bf:9f:12:62:3f:71:f9:81:2e:57:88:
ae:1d:b2:c3:d4:18:f5:0a:ba:b3:3d:70:66:99:bd:18:63:f7:
b5:5f:4d:6e:76:d3:6e:27:6c:5f:9b:cf:7f:50:54:96:98:e6:
3e:95:9a:b9:30:e3:1a:b2:53:b7:39:f2:65:04:f6:87:6d:86:
31:0c:de:9a:47:07:91:47:b6:84:64:c7:41:d1:54:fe:4d:90:
9b:f7:30:30:98:37:6f:a7:f2:84:66:28:20:03:23:85:da:02:
38:97:99:2e:4c:2f:b7:62:6b:69:9e:88:6e:97:ba:a3:7d:13:
73:39:b7:46:d7:63:f7:76:1c:23:b4:74:4b:73:ef:92:ad:40:
d9:bc:ed:1e:0d:a8:c8:0b:83:fa:07:17:96:a7:d2:a9:37:06:
9b:68:3a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:00 2025 by rpki-client