Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/jK7cF-Liwa0K7Nspmeu8V7lwi0A.roa
File: jK7cF-Liwa0K7Nspmeu8V7lwi0A.roa (raw, json)
Hash identifier: iZQgBWG/V1BTAV47XQiUXfHfmCIBqEl1oBUV+abbmFI=
Subject key identifier: 8C:AE:DC:17:E2:E2:C1:AD:0A:EC:DB:29:99:EB:BC:57:B9:70:8B:40
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 01939C6F0868C81541FCBBDCD839C6B29A86
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/jK7cF-Liwa0K7Nspmeu8V7lwi0A.roa
Signing time: Fri 06 Dec 2024 14:45:42 +0000
ROA not before: Fri 06 Dec 2024 14:45:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49160
IP address blocks: 62.122.208.0/22 maxlen: 22
62.122.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9c:6f:08:68:c8:15:41:fc:bb:dc:d8:39:c6:b2:9a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Dec 6 14:45:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8caedc17e2e2c1ad0aecdb2999ebbc57b9708b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:70:a1:e2:77:a2:7b:d0:d4:f1:a7:b3:e4:
3b:78:34:08:14:bf:9c:2b:3b:e4:b2:b5:5b:04:42:
71:98:8b:8d:d6:60:d8:44:42:95:3c:b5:8e:7c:4d:
58:ee:6e:b8:34:22:40:19:58:9d:f6:c0:e3:05:72:
4d:6d:b7:24:d9:b1:20:4a:d7:00:bd:72:0d:64:84:
0a:4d:2e:9b:0c:ae:d2:d9:39:37:25:80:b3:b3:fd:
74:eb:f7:7e:31:70:21:d8:bc:29:a4:45:fd:35:cd:
0d:26:2f:d8:e3:65:bc:7d:e5:66:d5:ea:9f:90:98:
83:09:08:d8:2f:5d:3b:10:df:fe:f1:f9:c0:ae:88:
1b:c1:3b:13:bd:50:94:e4:1d:60:98:99:f6:d5:23:
f1:88:e5:82:6a:0a:aa:21:90:97:ca:a8:57:d8:f4:
20:4f:31:69:a8:da:1e:69:81:9d:1f:4f:16:1e:ac:
2a:aa:ec:38:25:be:95:b7:72:eb:7b:b8:53:ac:23:
35:de:f7:7c:91:8d:96:e8:8c:3a:7e:95:5a:12:df:
86:b2:f4:48:f3:e4:e0:0d:f7:b9:a3:03:61:22:c5:
a9:6d:0d:fd:2d:48:70:96:4a:87:74:07:48:fa:49:
7e:77:b6:71:09:42:1e:75:19:67:57:54:25:93:f3:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AE:DC:17:E2:E2:C1:AD:0A:EC:DB:29:99:EB:BC:57:B9:70:8B:40
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/jK7cF-Liwa0K7Nspmeu8V7lwi0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.208.0-62.122.212.255
Signature Algorithm: sha256WithRSAEncryption
51:f2:52:d3:16:7a:60:55:a5:50:e1:04:13:3d:df:23:ac:fc:
d2:20:b8:7c:9c:51:ed:9e:22:7c:82:bb:2f:74:3b:54:5d:11:
48:2e:c6:f8:23:35:74:c8:9d:5c:22:23:9e:59:c5:9a:43:86:
0d:bf:a6:e4:61:b1:07:03:2f:dd:96:dd:3b:2f:1f:99:aa:64:
74:62:c1:df:89:e9:35:97:7b:a7:da:4e:58:65:f7:cb:c5:99:
c5:9c:0e:9b:42:07:3b:18:15:73:c1:67:3a:d3:43:4c:11:25:
d3:1b:3d:58:f9:16:69:fa:62:3a:9c:8d:6e:44:d1:ef:35:42:
40:15:9b:98:92:5c:27:a3:d5:e7:fb:bf:83:0d:3d:74:c9:2f:
4d:79:48:8e:fd:94:51:f1:b4:90:86:78:8e:0c:a7:23:07:1d:
84:98:54:7e:ef:a8:56:58:71:7e:b0:16:7d:a3:57:3e:7b:e9:
68:30:37:73:60:e4:10:20:83:94:25:08:5f:5e:06:35:65:38:
48:ad:bc:17:84:ad:fb:e1:0d:23:ee:26:a4:97:ee:05:4f:01:
8e:af:5b:48:2b:87:54:e1:28:39:1a:7f:a6:95:01:06:fe:03:
4e:33:7a:ce:19:45:af:a3:0c:79:32:b1:bb:5b:6f:e3:9d:22:
37:d9:fa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:58:14 2025 by rpki-client