Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/HWeEJ5BJLQjF-ZMz7RV-tcTycug.roa
File: HWeEJ5BJLQjF-ZMz7RV-tcTycug.roa (raw, json)
Hash identifier: odWDy/aR11NGN120NgsIPYaspxZ+SQmCFy5ypAPgZzU=
Subject key identifier: 1D:67:84:27:90:49:2D:08:C5:F9:93:33:ED:15:7E:B5:C4:F2:72:E8
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 01949D3AD894AD82BBEA5C8EDA5DDC51975D
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/HWeEJ5BJLQjF-ZMz7RV-tcTycug.roa
Signing time: Sat 25 Jan 2025 11:31:06 +0000
ROA not before: Sat 25 Jan 2025 11:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137897
IP address blocks: 62.233.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 06:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9d:3a:d8:94:ad:82:bb:ea:5c:8e:da:5d:dc:51:97:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 25 11:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d67842790492d08c5f99333ed157eb5c4f272e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:46:e9:64:69:9f:01:db:2e:ab:91:8c:7f:
d9:8a:12:7d:9e:c2:3f:c4:55:c5:3d:ef:75:d5:c4:
c8:10:be:07:ff:35:68:d0:48:1e:e4:5c:e5:ea:cc:
c3:63:6f:2b:31:60:70:63:95:a4:01:36:ca:f4:11:
80:86:a8:ec:82:0d:7e:05:97:41:95:b6:1f:18:c7:
66:d3:a5:e7:b4:52:76:20:57:4a:de:b5:52:01:f2:
16:2f:03:9f:dd:ba:d4:7b:b0:f2:aa:c2:bd:8e:18:
6e:79:13:8a:1b:91:24:fd:33:90:f4:a6:a2:73:81:
00:42:d6:04:93:e1:de:68:10:78:1d:55:61:e9:55:
54:da:b9:48:5e:1b:5b:1a:6f:67:e0:60:73:51:9d:
d6:56:44:88:d9:d3:14:fa:fd:e9:97:7d:14:39:2d:
0f:5f:2a:9e:2c:a1:2a:8d:90:f0:f6:14:aa:cb:a5:
98:d9:a2:73:da:14:02:fc:82:57:44:6a:f6:1f:04:
d7:5e:cf:fb:74:e7:ce:09:13:c6:42:93:89:99:41:
7d:82:8f:b6:83:53:9d:1e:7b:58:78:0d:01:1c:4c:
30:66:7d:8d:56:4f:6d:1a:35:ff:d1:7d:b8:41:5f:
a7:63:62:df:cf:9d:7c:90:e5:73:56:2b:70:c3:79:
b6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:67:84:27:90:49:2D:08:C5:F9:93:33:ED:15:7E:B5:C4:F2:72:E8
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/HWeEJ5BJLQjF-ZMz7RV-tcTycug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.59.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8d:77:b7:e4:5f:c9:6a:46:c2:47:2a:29:ff:48:d6:e8:00:
44:9a:bf:16:98:5f:29:22:79:52:eb:07:55:ef:ef:e4:07:15:
cc:93:b3:76:5f:99:1c:17:f3:5f:59:7b:db:60:48:12:81:78:
b4:01:cb:e7:24:14:e5:4b:b7:30:44:b9:8f:27:bd:0e:4c:15:
c4:44:18:e9:68:86:4b:7e:ec:0a:3f:ac:48:0c:89:ea:0b:22:
bb:a7:c8:12:54:05:c7:4f:e2:a8:48:76:52:3d:6a:6b:05:83:
d3:3b:18:83:10:61:58:ff:e2:49:76:5f:dd:a3:bc:7d:98:d2:
73:69:3a:90:43:88:3f:03:4b:b7:8b:bc:1e:f1:99:7b:e8:60:
68:37:25:f2:44:95:ab:f7:7e:6d:f2:31:47:eb:2b:e2:53:6f:
51:52:35:e4:ce:be:a0:97:db:72:d4:36:d0:3d:42:ae:75:61:
98:32:68:f4:13:66:7c:2e:16:d9:aa:bc:f6:34:62:70:3d:7e:
e4:74:88:c6:76:da:ef:d4:f0:43:cb:b4:1e:10:03:56:7d:72:
ff:b9:ab:8b:82:2f:55:68:c0:c9:b8:76:ef:9c:82:87:6e:5f:
10:6a:7c:ff:9f:f8:c4:62:fb:1a:a1:b2:fa:9a:00:53:89:e3:
43:93:39:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:52:56 2025 by rpki-client