Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/1qYVLxR7cW6hLPqlPhP2CCTtV88.roa
File: 1qYVLxR7cW6hLPqlPhP2CCTtV88.roa (raw, json)
Hash identifier: jZ1Q3rLwolCPAFADdV3G0S75x8CvMTsTd5Llv82phFc=
Subject key identifier: D6:A6:15:2F:14:7B:71:6E:A1:2C:FA:A5:3E:13:F6:08:24:ED:57:CF
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 018CC8DF2E585F704232AF365C701A0582EA
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/1qYVLxR7cW6hLPqlPhP2CCTtV88.roa
Signing time: Tue 02 Jan 2024 06:31:58 +0000
ROA not before: Tue 02 Jan 2024 06:31:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56804
IP address blocks: 62.0.4.0/24 maxlen: 24
147.234.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:2e:58:5f:70:42:32:af:36:5c:70:1a:05:82:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 06:31:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6a6152f147b716ea12cfaa53e13f60824ed57cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:06:40:1b:36:1e:48:6e:4a:a0:73:45:d9:18:
8f:a3:78:c1:9e:40:87:8c:2d:e6:dd:2d:e1:d7:84:
32:ef:91:ec:f5:2d:c6:5f:0e:60:65:4b:47:b7:c0:
a8:52:b6:11:91:f0:ed:c8:a2:15:ed:df:eb:cc:fc:
74:69:bd:a7:3e:b1:0f:4b:54:77:12:8b:1b:be:df:
5e:58:bc:c6:42:d3:42:e3:11:4f:98:3b:7f:de:5e:
71:22:ee:1b:f1:1c:b4:68:47:70:7a:b1:27:77:38:
bf:53:ec:4c:04:36:af:5c:c5:08:c6:73:18:68:d0:
fd:ab:0b:22:ca:be:d9:ae:6a:12:7e:be:29:2c:2e:
4f:ed:1d:22:13:2a:bd:c1:ce:89:9f:74:aa:7f:64:
a5:72:97:55:c7:49:0e:27:4f:59:46:de:82:47:e3:
2f:ed:6a:42:fe:70:48:83:7f:93:fa:a7:4d:7c:1a:
dc:9e:6e:bf:c6:88:ec:e0:d9:25:6a:5e:89:d1:43:
a0:bc:39:37:67:8a:26:a1:ea:d6:78:5e:df:17:4f:
09:14:c1:4c:8f:cb:35:5d:91:73:f9:87:18:df:16:
2a:23:fb:11:f2:d3:5c:08:56:3c:f5:f0:f1:59:44:
52:d2:2d:04:50:33:e6:3e:5a:94:30:55:c3:94:45:
14:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A6:15:2F:14:7B:71:6E:A1:2C:FA:A5:3E:13:F6:08:24:ED:57:CF
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/1qYVLxR7cW6hLPqlPhP2CCTtV88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.0.4.0/24
147.234.42.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f5:10:45:93:e9:7e:7e:3f:32:d4:a6:e1:0a:34:25:cb:cc:
36:32:69:56:35:06:88:c9:b6:c6:d0:c0:76:bb:a7:bf:70:3d:
d3:4c:9c:79:f6:a5:fd:05:cd:d0:c2:a6:5d:e2:bf:f4:8f:2e:
49:e8:44:ad:da:60:4e:b5:a8:28:3f:af:df:90:3a:81:2b:7d:
4a:72:06:2e:82:c6:49:07:6d:d7:b9:2e:8a:20:d3:fb:4b:65:
25:08:fa:e8:11:c5:b8:5c:1e:aa:39:24:23:be:c8:a1:32:39:
ac:5a:0d:f8:22:32:3c:0c:c2:98:dd:77:38:86:37:76:07:34:
47:37:51:60:4e:11:7f:e5:45:b4:b4:bc:b9:70:2b:eb:ec:90:
aa:e0:ff:6c:39:7a:0c:aa:60:2a:61:d0:37:47:bb:f9:2f:6f:
b3:d5:7f:a7:e0:1f:b7:22:2a:e1:8b:27:d8:be:f5:a7:95:8e:
0c:83:88:c8:12:5d:a8:f8:0a:b6:4b:14:7d:6f:48:d3:58:cc:
2b:b9:6e:17:0d:8c:5c:f5:a6:72:61:cb:7c:7d:66:c9:a6:44:
da:65:da:72:85:2f:e0:92:df:48:4a:d4:ca:b5:97:43:ea:8c:
25:d4:61:20:68:d9:c2:4c:53:a3:77:9d:64:51:d4:8c:03:74:
32:91:18:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:33 2025 by rpki-client