Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/PL1yJ5oexwgFybIIwB-Fgdb_EtM.roa
File: PL1yJ5oexwgFybIIwB-Fgdb_EtM.roa (raw, json)
Hash identifier: OI7wxR8VMhT+UmatnPE8qX4C2OSKd/ftn0RiztURnU4=
Subject key identifier: 3C:BD:72:27:9A:1E:C7:08:05:C9:B2:08:C0:1F:85:81:D6:FF:12:D3
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 01949D39ED38372CA0F7BD2A228D2F37ED9C
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/PL1yJ5oexwgFybIIwB-Fgdb_EtM.roa
Signing time: Sat 25 Jan 2025 11:30:06 +0000
ROA not before: Sat 25 Jan 2025 11:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 62.233.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 06:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9d:39:ed:38:37:2c:a0:f7:bd:2a:22:8d:2f:37:ed:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 25 11:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cbd72279a1ec70805c9b208c01f8581d6ff12d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:45:4d:e2:8e:3b:f3:d8:cb:7e:df:40:fc:
ec:ae:3b:59:16:ed:76:61:91:2f:7a:74:6c:5f:5a:
f6:b0:fb:31:ec:24:3a:f1:eb:3e:76:9a:9e:75:19:
f3:08:d8:fd:f2:bd:76:2f:f0:ed:71:4c:57:93:b0:
0b:32:28:ff:75:4e:62:22:bd:9d:39:ee:1e:1c:cc:
28:63:82:aa:cb:99:dd:71:0f:d3:86:79:6e:a4:f3:
a2:89:37:2e:20:6c:57:0c:87:e8:b5:62:8b:3b:f9:
1a:eb:3e:e3:c8:cc:fd:26:9e:85:0b:37:92:b1:d5:
4c:4f:f8:dc:64:ad:cd:a0:f7:0c:6b:2c:af:de:7c:
4d:4d:e3:26:7b:62:88:55:9c:be:9d:35:94:4f:d9:
49:4e:09:65:7a:0c:ed:75:69:bd:12:6d:9b:04:af:
35:5f:03:c8:b4:4c:92:33:40:f1:e1:00:37:45:98:
8f:13:6c:cc:6b:a3:48:35:7d:bf:d7:80:ab:1a:97:
cb:19:c4:27:89:41:71:43:e5:c7:5a:57:ee:11:b7:
a9:22:15:33:86:04:32:6c:4f:fa:1d:ed:a6:ad:0c:
53:ca:d1:95:ea:5c:17:87:c8:1d:6b:ee:5a:3c:e3:
1a:20:d9:4e:22:42:54:7d:d7:2a:6a:b7:a2:fd:33:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BD:72:27:9A:1E:C7:08:05:C9:B2:08:C0:1F:85:81:D6:FF:12:D3
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/PL1yJ5oexwgFybIIwB-Fgdb_EtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.59.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ce:fc:1e:75:61:49:a4:f6:90:6f:4f:a0:58:78:0a:43:51:
a4:a5:09:aa:3c:04:c1:77:f3:f3:8c:48:34:d9:b3:11:c6:0c:
f8:49:79:1a:2f:21:a7:5c:1c:58:a7:93:1d:d1:97:3d:b3:98:
93:ac:9c:d2:bd:bc:d5:b3:c6:42:b5:c7:e9:0e:75:f1:ed:3d:
37:ba:1c:57:16:4e:b6:39:ed:d1:75:29:4c:6e:22:8d:11:9d:
1c:f8:53:65:f7:cf:e1:c9:b9:17:f3:a4:8b:87:8c:4a:80:16:
09:b3:24:ae:2b:6c:89:c7:c8:40:f7:34:a2:d5:df:bd:f3:f0:
57:e4:bc:48:3c:c5:a3:d6:72:22:66:4d:18:f9:9c:57:f2:ac:
e4:24:b0:87:6c:6b:f5:7d:de:5d:89:dd:de:f6:dd:8e:be:4c:
d3:79:25:63:55:71:fe:75:81:1a:63:8f:84:48:af:52:29:1a:
17:ea:df:5f:97:b9:c5:34:8e:5b:5a:a9:d5:07:c5:51:9d:4b:
4b:c5:ad:5a:4e:89:70:ad:2f:c9:a9:88:fc:83:c0:cc:3e:a1:
53:cb:c8:e0:1a:4f:78:40:99:38:a3:08:8e:e2:52:4a:70:c7:
3f:87:b6:f6:be:91:de:f1:42:39:59:8b:d4:c9:46:06:14:bf:
64:19:74:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSdOe04Nyyg970qIo0vN+2cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjUwMTI1MTEzMDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2JkNzIyNzlhMWVjNzA4MDVjOWIyMDhjMDFmODU4MWQ2ZmYxMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/5FTeKOO/PYy37fQPzsrjtZFu12
YZEvenRsX1r2sPsx7CQ68es+dpqedRnzCNj98r12L/DtcUxXk7ALMij/dU5iIr2d
Oe4eHMwoY4Kqy5ndcQ/ThnlupPOiiTcuIGxXDIfotWKLO/ka6z7jyMz9Jp6FCzeS
sdVMT/jcZK3NoPcMayyv3nxNTeMme2KIVZy+nTWUT9lJTgllegztdWm9Em2bBK81
XwPItEySM0Dx4QA3RZiPE2zMa6NINX2/14CrGpfLGcQniUFxQ+XHWlfuEbepIhUz
hgQybE/6He2mrQxTytGV6lwXh8gda+5aPOMaINlOIkJUfdcqarei/TPLnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDy9cieaHscIBcmyCMAfhYHW/xLTMB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvUEwxeUo1b2V4d2dGeWJJSXdCLUZnZGJfRXRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPuk7MA0G
CSqGSIb3DQEBCwUAA4IBAQAfzvwedWFJpPaQb0+gWHgKQ1GkpQmqPATBd/PzjEg0
2bMRxgz4SXkaLyGnXBxYp5Md0Zc9s5iTrJzSvbzVs8ZCtcfpDnXx7T03uhxXFk62
Oe3RdSlMbiKNEZ0c+FNl98/hybkX86SLh4xKgBYJsySuK2yJx8hA9zSi1d+98/BX
5LxIPMWj1nIiZk0Y+ZxX8qzkJLCHbGv1fd5did3e9t2OvkzTeSVjVXH+dYEaY4+E
SK9SKRoX6t9fl7nFNI5bWqnVB8VRnUtLxa1aTolwrS/JqYj8g8DMPqFTy8jgGk94
QJk4owiO4lJKcMc/h7b2vpHe8UI5WYvUyUYGFL9kGXSM
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:32:38 2025 by rpki-client