Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/CqR993Sxl8T8_xxFtdAQLARlWJ8.roa
File: CqR993Sxl8T8_xxFtdAQLARlWJ8.roa (raw, json)
Hash identifier: pLoqBN+RV3KzUQAn7YJ0i8rh2tkXVTjCWUT7auAZtPo=
Subject key identifier: 0A:A4:7D:F7:74:B1:97:C4:FC:FF:1C:45:B5:D0:10:2C:04:65:58:9F
Certificate issuer: /CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Certificate serial: 0194258F94CD6DEF0A7CE9A442DA5B9B51A7
Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/CqR993Sxl8T8_xxFtdAQLARlWJ8.roa
Signing time: Thu 02 Jan 2025 05:49:14 +0000
ROA not before: Thu 02 Jan 2025 05:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48137
IP address blocks: 62.145.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 09:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:94:cd:6d:ef:0a:7c:e9:a4:42:da:5b:9b:51:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Validity
Not Before: Jan 2 05:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0aa47df774b197c4fcff1c45b5d0102c0465589f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:87:69:88:37:4b:ad:91:dc:a4:0a:46:e5:
a7:61:8a:4c:eb:e6:93:28:df:02:40:42:7b:a8:e3:
bb:c9:f7:77:2f:ec:ca:b0:4e:46:4e:5c:5b:53:6a:
44:bb:7a:8d:77:c8:02:a7:cd:76:f6:db:57:0d:c7:
8d:7b:07:e9:0e:23:8e:ff:d6:27:0e:1c:a0:e0:44:
ed:a7:d7:4c:ea:c2:2f:19:90:0b:23:c4:03:81:b2:
06:97:1e:ce:1b:1f:8b:f4:e5:91:44:d2:d7:b4:67:
28:e1:ad:83:29:a5:86:96:5b:ff:67:34:c2:30:fb:
0b:ce:85:f5:5d:6f:5e:00:51:ff:41:85:f6:37:a7:
67:6e:a0:d1:29:ca:17:42:a9:42:0f:dc:d8:9b:a0:
a3:4a:28:01:ee:9d:a3:6a:c1:20:7d:ba:56:8b:aa:
e3:12:e1:00:f5:d0:1e:3f:52:f6:47:c8:cb:5c:1f:
06:47:fd:c5:50:79:00:fe:d1:97:27:34:a6:22:8a:
57:06:87:51:75:0c:4a:0c:fc:3a:03:d8:6d:c6:00:
38:e4:33:db:93:15:c7:67:e8:e9:bd:d8:58:c7:07:
a6:1a:62:41:a4:34:36:bb:31:de:27:b1:b9:65:d9:
d7:14:ee:15:82:2d:29:d0:0c:88:22:9f:54:9a:51:
cb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A4:7D:F7:74:B1:97:C4:FC:FF:1C:45:B5:D0:10:2C:04:65:58:9F
X509v3 Authority Key Identifier:
keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/CqR993Sxl8T8_xxFtdAQLARlWJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.145.97.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:dc:c6:3f:5d:6a:45:2d:be:fd:9f:d6:30:91:67:9b:f8:e3:
36:87:4c:85:95:ca:1e:35:e5:fe:c3:98:95:8c:d5:76:1a:53:
0e:fd:1c:48:0a:2c:1e:e1:de:8b:63:e6:48:16:9e:eb:34:15:
2e:c6:49:b9:5e:96:14:23:69:5d:3c:ae:97:0e:ec:4e:22:dc:
69:7e:12:9a:98:46:2e:b7:f6:9a:92:b7:d5:1a:ea:a3:f0:c0:
1c:48:e1:b6:29:ce:d8:37:d5:e4:d4:45:2d:7c:67:d9:d3:a3:
6b:91:08:d2:3f:32:dd:80:1b:d3:1a:ea:15:f1:52:7c:ac:31:
1f:bf:5d:28:a0:03:45:48:1c:6f:1d:4a:6d:55:25:d0:16:4e:
33:a2:dd:27:c0:ed:e3:b9:19:5a:2e:ff:f6:f1:55:c7:b2:69:
3a:c3:59:6c:9c:ca:94:ff:38:18:c6:03:3e:0c:3e:e6:cb:6e:
c5:c4:48:91:89:bc:70:77:40:e4:48:93:a2:5c:0d:a4:d9:98:
69:77:50:31:19:eb:5e:f0:d8:82:5b:ee:fe:11:78:d0:2a:7f:
d0:23:fa:43:43:37:6e:87:b7:3a:e2:bd:fb:c5:15:fa:6d:58:
24:2b:46:1c:b1:d5:8c:a8:70:4d:2d:f6:97:b4:16:ee:ac:38:
01:29:9b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:01:04 2025 by rpki-client