Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/E1AIyhJYbkRCBfmzu7Mk8fq-RMQ.roa
File: E1AIyhJYbkRCBfmzu7Mk8fq-RMQ.roa (raw, json)
Hash identifier: 3jP/6U5MKBmJEezS2LzbPMv4VbZm5smc03oPWMcZGcQ=
Subject key identifier: 13:50:08:CA:12:58:6E:44:42:05:F9:B3:BB:B3:24:F1:FA:BE:44:C4
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 01949D3AD82D03C30512D0A348B0B9AAE28C
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/E1AIyhJYbkRCBfmzu7Mk8fq-RMQ.roa
Signing time: Sat 25 Jan 2025 11:31:06 +0000
ROA not before: Sat 25 Jan 2025 11:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4515
IP address blocks: 62.233.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 06:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9d:3a:d8:2d:03:c3:05:12:d0:a3:48:b0:b9:aa:e2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 25 11:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=135008ca12586e444205f9b3bbb324f1fabe44c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:bb:0b:8f:27:c0:ee:66:3b:69:57:63:23:
08:a2:82:ee:f0:73:a6:a1:58:92:0a:93:33:a4:01:
0f:77:c2:a5:6e:6a:e9:93:5b:a1:88:d4:82:cb:9d:
25:f1:8a:1e:1c:c2:b7:5c:68:e8:68:85:84:ea:9c:
d7:cd:e4:bf:42:dd:0e:13:55:21:42:68:08:73:d3:
81:e2:01:3a:db:09:25:de:21:ec:8e:0d:2f:60:11:
38:dc:dc:3c:22:c8:8a:49:01:c2:e9:cc:9d:e8:bf:
ee:4b:2e:e3:d0:59:ae:2a:d7:92:49:8b:a4:3d:83:
1e:6c:9c:d4:9d:94:4e:15:0e:c0:a9:d9:d6:45:6f:
6a:7c:c9:86:7e:f4:62:43:a6:5f:77:73:9f:15:e1:
ec:c0:36:4d:65:d6:91:38:c6:41:a7:0e:01:e6:8f:
dd:dc:1c:0c:25:96:77:32:aa:16:92:d6:52:83:64:
bc:0d:46:27:e8:7a:d1:89:d6:24:34:92:b1:6c:ec:
3a:d4:52:d7:21:35:e1:97:57:50:85:ee:64:55:de:
7a:dc:29:ce:1d:95:1f:5e:8c:74:af:67:e4:12:4f:
7c:24:1a:ad:c1:a0:41:74:7f:61:95:c2:78:ec:fe:
2b:5d:d0:14:fd:26:ce:8f:6d:26:1f:10:9f:97:9e:
b7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:50:08:CA:12:58:6E:44:42:05:F9:B3:BB:B3:24:F1:FA:BE:44:C4
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/E1AIyhJYbkRCBfmzu7Mk8fq-RMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.59.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d6:4f:5f:26:b3:a4:5d:8e:98:91:dd:5c:2c:e4:52:7d:1a:
97:9b:fe:9e:1a:5e:f2:71:83:67:f1:23:94:7a:89:86:4b:b9:
ec:9e:03:4a:0f:3a:70:10:4f:05:e6:08:07:3b:bb:af:9f:68:
f4:80:64:63:91:01:bb:14:fd:84:e3:ed:a1:f7:07:8c:73:0d:
3c:09:14:20:89:42:34:a2:1e:7d:07:a8:c6:ca:64:0f:55:e3:
68:e5:02:d8:6b:a4:95:05:9e:ee:37:51:9a:6a:a2:51:95:9d:
93:2d:49:15:a1:3f:55:49:2b:e6:27:70:33:f7:73:08:a1:2f:
b1:ca:fd:66:2d:07:6f:57:e2:03:7e:54:14:d7:c1:bd:3e:ed:
45:8c:cc:0e:d2:03:90:04:ce:89:fc:51:7a:08:ba:cc:f0:7e:
cf:1d:cc:03:0c:9d:fd:62:57:3a:5e:0a:96:ea:9d:86:22:d5:
32:1c:b6:83:2b:06:b0:1f:bb:66:b9:6e:27:e7:85:b6:97:e5:
28:67:fc:91:2f:e3:6e:91:21:2f:89:96:91:2e:a3:64:56:0b:
72:d9:ff:f4:e8:42:4f:93:33:75:d7:e8:ec:0c:71:fe:ef:44:
48:1b:4f:28:80:e6:a5:f0:b1:29:27:88:ee:6a:74:a8:66:e7:
f7:d3:81:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:53:11 2025 by rpki-client