Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/tg8_vdKCX29l8t4uEdZrdTcAtcQ.roa
File: tg8_vdKCX29l8t4uEdZrdTcAtcQ.roa (raw, json)
Hash identifier: ZDexYHT+bxpgTUmisOr5sIKr/IhecUDH3/gtx/o3NFg=
Subject key identifier: B6:0F:3F:BD:D2:82:5F:6F:65:F2:DE:2E:11:D6:6B:75:37:00:B5:C4
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 018CC6B8DAF99817CE201B6D0F78EFED391E
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/tg8_vdKCX29l8t4uEdZrdTcAtcQ.roa
Signing time: Mon 01 Jan 2024 20:30:52 +0000
ROA not before: Mon 01 Jan 2024 20:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 62.193.24.0/22 maxlen: 22
62.193.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:da:f9:98:17:ce:20:1b:6d:0f:78:ef:ed:39:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Jan 1 20:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b60f3fbdd2825f6f65f2de2e11d66b753700b5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:69:9a:23:9b:d0:62:c9:ba:01:e6:7a:ce:b7:
6e:01:5d:db:ce:77:c6:c5:56:ab:a1:b3:39:06:ad:
9c:d0:15:b7:ce:9b:d7:7b:f0:f8:ae:58:79:f2:47:
3b:2c:12:12:f7:fe:eb:54:e3:a0:ee:6d:b5:94:41:
95:52:66:ad:cb:99:86:2e:e6:c8:99:e8:47:a8:ab:
e3:f0:66:50:c8:2e:de:28:69:b2:dd:36:2b:51:59:
12:ff:e6:57:06:90:82:24:92:3d:30:5f:06:f7:30:
97:b0:01:23:b6:96:7c:87:7d:94:53:ce:b3:ab:d1:
1a:5a:1d:d3:e1:ef:43:85:44:61:d2:b4:d0:7d:ba:
4d:da:a3:8a:da:c1:f5:99:d8:7e:2a:da:ba:28:87:
f3:06:99:86:86:0a:38:7d:ad:53:54:b8:25:70:26:
52:ff:d7:c0:01:78:4e:ed:1f:18:30:ba:92:e3:5a:
e7:81:11:25:d1:1b:0e:1e:78:ba:34:84:ba:76:ee:
73:0e:ea:94:a8:34:5a:a4:0c:10:98:c2:b7:a4:60:
9b:05:e8:1d:ef:7c:3d:35:11:0c:a3:bc:40:58:fe:
e4:84:8a:84:51:ff:4a:3d:e8:16:0e:67:be:8b:9b:
db:d2:12:c4:79:f7:bf:62:16:29:e6:0e:3e:c1:87:
8c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0F:3F:BD:D2:82:5F:6F:65:F2:DE:2E:11:D6:6B:75:37:00:B5:C4
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/tg8_vdKCX29l8t4uEdZrdTcAtcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.193.24.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:c0:32:6e:92:e7:f3:3e:a0:08:bd:46:ab:5c:c1:1c:94:e7:
3b:89:8f:5a:2c:5e:a1:7c:22:72:9c:b4:f8:4b:58:5b:b4:f4:
be:d4:42:09:92:26:77:1e:0b:8c:a7:bd:52:0f:5d:16:b3:e1:
50:fd:dc:96:d7:4f:fe:d4:c8:25:e7:d4:60:e4:c2:60:84:6c:
ce:39:4a:57:d7:2d:16:2a:00:98:80:20:db:4f:79:c7:22:bc:
7b:73:a1:f4:a9:a6:04:2b:35:f1:0b:8c:d4:ad:4e:f8:f4:8f:
95:a4:98:7c:93:ab:a2:60:e7:22:5a:6b:d2:bc:56:4e:a3:2c:
1e:d9:74:f3:75:68:d1:45:62:f5:30:99:92:14:02:62:7c:54:
02:c3:42:33:cb:0a:58:a5:14:80:73:ba:85:fb:b2:52:84:56:
f7:0e:41:ba:fc:83:ac:ae:90:a1:7f:c0:5b:3e:22:9a:e5:9c:
a0:96:d9:f6:73:9b:21:5a:69:73:20:08:fa:6d:5d:80:20:04:
02:23:d1:05:8d:5c:3a:e8:15:d3:ad:4f:2f:35:7c:4a:52:a2:
5e:19:b9:ba:c3:22:b3:e2:f9:b2:05:7f:57:cb:98:ea:23:2e:
6c:bf:92:4d:e4:41:68:c7:3b:2c:5c:27:7c:08:c7:fb:49:4d:
ef:92:9d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:04 2025 by rpki-client