Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/fG2c-ssh28YO_ous3cLR_TiIhas.roa
File: fG2c-ssh28YO_ous3cLR_TiIhas.roa (raw, json)
Hash identifier: H7k+GPLTrY0YzHx4OkKAgmXz033WpobaWKygH9excMk=
Subject key identifier: 7C:6D:9C:FA:CB:21:DB:C6:0E:FE:8B:AC:DD:C2:D1:FD:38:88:85:AB
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019796755D113FFACCA87356343921F5AE69
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/fG2c-ssh28YO_ous3cLR_TiIhas.roa
Signing time: Sun 22 Jun 2025 07:06:03 +0000
ROA not before: Sun 22 Jun 2025 07:06:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.170.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jun 2025 10:23:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:96:75:5d:11:3f:fa:cc:a8:73:56:34:39:21:f5:ae:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 22 07:06:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c6d9cfacb21dbc60efe8bacddc2d1fd388885ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:0b:9d:db:89:d9:76:7a:a0:b4:d3:1b:71:
71:19:2c:78:f7:36:0c:7a:02:1f:19:e5:8f:8f:78:
da:c9:f6:34:f5:2e:8e:63:d9:ce:cc:3d:d0:56:42:
9c:ff:20:d0:bc:6f:71:15:da:4f:3d:20:3c:a8:74:
b2:a3:39:ac:eb:e5:4e:21:7a:7e:56:0b:33:54:9e:
1a:c3:36:13:28:ba:e2:dd:ab:ac:b5:a7:cb:dc:6c:
aa:7e:48:b2:6f:65:a8:6f:62:67:f8:99:bf:4a:61:
60:1c:ec:d4:d0:50:6e:52:c2:56:2b:8a:0d:76:8d:
9b:0e:00:c1:c5:3b:1d:cc:38:fa:7c:9b:6e:87:37:
9e:bf:1f:31:5a:0b:c5:1c:ce:81:81:52:ed:b3:92:
a4:c3:d6:0f:19:f1:ac:23:07:80:53:60:38:c5:ca:
99:87:3d:63:5e:e0:bb:92:68:78:d8:0b:0f:31:ce:
6c:6d:4e:f0:0c:9e:ae:88:f4:48:41:32:1c:03:46:
d3:98:ea:a8:29:a4:e3:ec:36:c9:2a:3e:3b:04:5c:
90:00:f2:0a:ce:ed:51:06:23:2d:02:12:e2:8d:81:
52:c2:f0:3c:22:7d:25:eb:bf:a5:99:e6:20:c9:42:
ab:b6:91:fe:d9:b4:37:42:cc:4b:d6:fd:88:86:0a:
f6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6D:9C:FA:CB:21:DB:C6:0E:FE:8B:AC:DD:C2:D1:FD:38:88:85:AB
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/fG2c-ssh28YO_ous3cLR_TiIhas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.170.0/24
81.21.2.0-81.21.7.255
176.57.51.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:26:62:ef:f7:19:c1:67:21:ce:9a:86:71:eb:6d:d2:e0:12:
39:fa:8f:c8:06:31:73:ee:4b:8f:ae:eb:f1:b4:e4:ed:f0:0b:
5b:fa:02:31:5f:38:2d:ef:69:d2:1a:db:c9:63:b6:be:40:1f:
6c:0a:f5:85:c8:3a:ae:10:aa:b6:73:f2:a3:a6:82:97:b3:f0:
b6:96:3d:9c:99:21:8a:de:a0:e0:cc:ac:48:50:0b:16:cd:a1:
66:7d:fb:c6:e4:75:de:c7:34:95:b7:26:19:a2:bf:55:d4:8e:
cf:04:8d:09:63:87:9b:47:38:0d:b6:6e:83:20:f4:13:2e:73:
02:1d:6d:e8:79:fa:e8:f9:16:02:a9:db:a3:52:f4:e8:6c:e2:
41:94:27:77:4e:00:c7:71:8f:6a:c9:d1:54:6f:3d:55:32:26:
24:72:e5:a9:a6:1e:06:f4:ca:28:a6:82:04:d5:68:c5:e6:6b:
63:a9:23:17:22:d3:f2:45:10:b9:27:b2:f2:8d:07:b1:69:9b:
31:ff:b4:0a:a0:fb:e2:bd:71:b1:9f:8b:fa:12:f4:85:11:ef:
06:e4:ed:d9:9c:a2:c0:b8:61:fe:7b:f5:35:6d:4e:3d:48:e5:
98:b3:b3:40:ea:f8:9d:72:c6:24:8e:23:87:d1:41:f6:cf:a3:
d7:43:6d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:12:17 2025 by rpki-client