Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ixvo8qI4wtpxvvD_5hqJFJDfU70.roa
File: ixvo8qI4wtpxvvD_5hqJFJDfU70.roa (raw, json)
Hash identifier: 7Scp62ClpFgEaypp+xgIMy7m92b6CszYj/Y+UXQEZL8=
Subject key identifier: 8B:1B:E8:F2:A2:38:C2:DA:71:BE:F0:FF:E6:1A:89:14:90:DF:53:BD
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B72D47F37FA84954499CF334CDEF6C
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ixvo8qI4wtpxvvD_5hqJFJDfU70.roa
Signing time: Mon 01 Jan 2024 06:30:10 +0000
ROA not before: Mon 01 Jan 2024 06:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8908
IP address blocks: 62.160.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2d:47:f3:7f:a8:49:54:49:9c:f3:34:cd:ef:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b1be8f2a238c2da71bef0ffe61a891490df53bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:30:ae:92:af:b0:a4:7e:bb:22:ae:38:d8:
f6:6a:2e:f0:0f:62:bc:bc:64:be:63:aa:c9:58:01:
04:80:2a:9e:74:9f:99:fd:15:94:b3:a7:1c:87:27:
50:31:25:48:c3:18:32:97:47:69:4c:ce:21:7e:13:
65:76:01:a3:eb:2f:4a:6b:a4:37:3d:74:82:bc:93:
60:9a:3d:6f:87:38:b5:51:eb:4d:75:e4:b5:99:da:
40:99:9e:57:45:44:6d:15:58:73:f2:94:82:91:bb:
e1:b2:a9:e6:9c:54:af:a2:75:7c:bc:24:f9:3d:63:
2c:44:55:e7:6d:c9:42:54:02:b3:6d:2a:82:c3:18:
20:0b:45:2e:78:52:3b:3d:59:df:31:e5:52:ad:0a:
61:d0:29:98:e1:f4:74:fe:c1:00:3f:2d:47:a3:ba:
fc:e3:f3:ce:91:e7:15:1b:f2:7c:17:20:64:34:15:
54:8a:98:43:80:46:0f:b3:d6:62:b3:46:ef:d0:21:
02:db:46:66:8c:78:df:33:e3:13:dc:56:ef:89:af:
ff:3d:67:67:66:c2:2d:87:3a:32:b7:c0:e0:f5:71:
91:b7:60:fb:29:e1:65:3f:d0:18:45:a5:43:2a:a0:
72:26:94:26:bb:87:df:fb:91:30:7f:24:3b:85:ef:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1B:E8:F2:A2:38:C2:DA:71:BE:F0:FF:E6:1A:89:14:90:DF:53:BD
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ixvo8qI4wtpxvvD_5hqJFJDfU70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.160.27.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ef:f8:19:18:de:d4:29:51:91:8e:6a:46:59:63:7b:67:d1:
66:d1:41:61:95:c5:f5:52:6c:72:df:2c:74:0e:32:64:09:e1:
4a:5d:96:de:de:3f:36:4c:19:af:6b:45:4b:31:15:e5:2d:7a:
1c:71:15:cf:1e:23:9f:e2:b7:c7:bd:96:63:36:f0:00:0c:be:
3a:78:33:c0:43:30:d5:09:c8:43:14:4f:58:24:bd:ee:b7:70:
e9:4d:1c:1f:48:e8:cd:75:15:b3:1e:ff:1f:2c:c6:34:f2:02:
4d:b6:60:9d:c3:ca:dc:38:22:f1:bd:57:81:d3:85:29:6e:cd:
36:bd:1c:8e:40:c0:e6:9c:f7:09:7b:2b:c8:4c:19:bc:60:6b:
80:48:3a:73:78:a7:5d:1b:f0:f8:3b:02:15:8c:9e:f6:02:99:
08:c3:92:f3:59:87:f9:f8:29:3d:b3:81:95:c4:83:58:e2:13:
2e:5a:c9:27:a3:68:f7:5e:1b:05:6d:15:25:ec:1d:85:82:32:
b6:5f:02:69:e8:21:6f:94:20:2d:0f:84:73:71:e0:7b:2d:ab:
5f:91:fe:d7:77:9b:ca:e4:03:21:5c:c2:b5:3e:b7:d6:73:46:
87:31:ef:1d:44:72:5d:af:4f:38:61:b4:1f:04:20:ce:78:6b:
b3:80:22:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:52:27 2025 by rpki-client