Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/SQ7OO0o5MS9jD_ZViC2J_7oci5A.roa
File: SQ7OO0o5MS9jD_ZViC2J_7oci5A.roa (raw, json)
Hash identifier: +85OTF+EaUYFPjCPrcrm8DCwC7BnUBT3VT2EO3J41x8=
Subject key identifier: 49:0E:CE:3B:4A:39:31:2F:63:0F:F6:55:88:2D:89:FF:BA:1C:8B:90
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019555C0992F1291A52B637487334A8A9432
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/SQ7OO0o5MS9jD_ZViC2J_7oci5A.roa
Signing time: Sun 02 Mar 2025 07:27:20 +0000
ROA not before: Sun 02 Mar 2025 07:27:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 62.72.173.0/24 maxlen: 24
62.72.180.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 08:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:55:c0:99:2f:12:91:a5:2b:63:74:87:33:4a:8a:94:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Mar 2 07:27:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=490ece3b4a39312f630ff655882d89ffba1c8b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:84:9c:0a:7d:30:7e:34:01:96:29:ef:30:f8:
62:91:d9:67:74:f9:c2:dc:14:ef:b6:b4:fe:ad:3d:
06:81:41:bf:61:5b:40:96:ef:b6:8d:ea:1b:3d:1a:
59:a4:4b:77:95:64:3d:4b:44:2e:96:26:77:f5:9a:
6a:82:07:3d:00:9d:c2:a0:e7:93:43:7f:ad:99:8c:
14:1e:02:64:57:f9:dd:42:bd:8f:dc:e8:dd:2f:42:
cd:76:db:1c:c8:c8:12:24:fb:74:94:3f:f8:e5:fc:
a6:97:64:be:5f:ff:0d:c0:60:ce:06:57:a8:29:7b:
c3:cc:d3:37:05:2e:f3:80:aa:42:2f:d0:76:ce:21:
84:91:c9:34:52:cf:32:ba:1d:84:0a:7b:9e:07:df:
f0:61:88:54:2b:b5:9d:5b:79:ef:c0:60:c6:0e:62:
17:10:a1:e3:43:23:56:7a:cf:96:90:f8:ea:29:53:
30:72:69:ef:38:95:18:57:67:f6:c3:1c:2e:b8:fa:
9f:d9:f6:33:ee:e5:fe:8d:6c:ad:85:1c:02:e5:ba:
a2:45:b4:52:3a:40:27:89:b9:0a:5a:e7:e1:0e:7c:
68:03:c0:d7:9d:d0:0a:e6:e9:e5:b6:1d:3b:58:50:
21:6b:f6:67:9a:a6:14:5f:db:cf:46:3a:33:6e:79:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0E:CE:3B:4A:39:31:2F:63:0F:F6:55:88:2D:89:FF:BA:1C:8B:90
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/SQ7OO0o5MS9jD_ZViC2J_7oci5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.173.0/24
62.72.180.0/24
176.57.53.0/24
Signature Algorithm: sha256WithRSAEncryption
36:fb:35:c6:53:50:a9:1f:e4:98:b1:59:c0:45:72:3e:5d:b3:
df:44:3d:72:0a:ea:8b:93:5f:fa:07:85:d2:b8:b7:b7:0f:d0:
ed:c0:c0:43:94:ad:ae:52:e8:59:f7:ba:f1:58:d2:ed:c4:12:
03:ae:e4:f7:6a:fd:a8:41:75:50:84:1f:47:4a:2f:6e:e7:94:
c5:33:4f:19:4c:ff:8c:13:1e:7b:22:a3:ee:62:f7:42:b0:52:
1c:b5:b8:4a:2d:7b:08:1e:82:b9:57:cd:d3:cc:47:3c:e7:fb:
dd:5c:16:63:98:be:39:b0:75:2f:ba:1b:ef:87:89:2e:1b:33:
61:51:2f:19:4a:fd:a3:fe:f9:21:53:16:d1:9b:22:29:30:51:
81:58:fc:b4:d3:f3:c9:62:a3:7f:bc:d6:a6:ce:2b:44:7a:bf:
9f:b3:f5:2b:73:d1:29:62:34:12:93:2a:40:a6:7e:55:cf:01:
ac:06:d0:5a:21:9d:71:da:07:86:16:5d:2e:4b:25:d1:ab:6e:
82:d3:cf:de:16:fa:79:85:4d:15:89:99:6c:8e:13:f3:7d:84:
78:b1:75:bb:a8:de:79:8c:98:ba:9f:61:52:81:c3:36:88:ef:
55:b9:14:de:97:98:78:29:91:6e:3b:a7:d5:a2:da:13:23:a7:
30:0d:22:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:30:56 2025 by rpki-client