Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oaIvJxFBKT6geFfldWpfnQzpJ60.roa
File: oaIvJxFBKT6geFfldWpfnQzpJ60.roa (raw, json)
Hash identifier: 9BUOFMB1K7vMoCS0bxE9Zv0DHvXUFzKwirE/gHT9flY=
Subject key identifier: A1:A2:2F:27:11:41:29:3E:A0:78:57:E5:75:6A:5F:9D:0C:E9:27:AD
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018CC94E307D4A413C7FCEF79B85AA7CA860
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oaIvJxFBKT6geFfldWpfnQzpJ60.roa
Signing time: Tue 02 Jan 2024 08:33:13 +0000
ROA not before: Tue 02 Jan 2024 08:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29322
IP address blocks: 62.39.100.0/24 maxlen: 24
62.39.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:30:7d:4a:41:3c:7f:ce:f7:9b:85:aa:7c:a8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 08:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1a22f271141293ea07857e5756a5f9d0ce927ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:be:f5:5e:b2:4e:57:43:5d:e0:76:c1:01:
2f:99:17:da:6a:be:28:63:5e:9b:61:1e:81:dc:b4:
53:ae:1a:ad:29:3a:f5:01:43:83:ef:af:6d:8a:ae:
63:89:de:5f:59:99:78:81:75:60:db:21:aa:6b:a2:
54:1e:5c:86:2d:ac:6c:c6:a3:1d:e1:5d:7f:82:27:
f0:1d:15:65:39:e9:70:3e:5f:39:c5:3a:d8:f6:a4:
5d:a9:3a:9b:b1:d1:95:eb:65:3a:57:33:17:a8:22:
08:d1:89:e2:6f:40:c2:b5:67:6e:f0:20:78:27:35:
d7:15:cc:d2:90:d4:30:d3:68:fd:56:39:28:37:63:
4c:1f:0b:61:f1:0f:58:5a:4c:56:58:d7:d0:e7:9a:
ee:bf:63:ad:0e:6a:d4:8a:61:d7:c7:58:be:1a:e2:
66:55:fe:4e:be:e8:e0:58:dd:a0:8b:d3:58:36:eb:
20:d7:56:55:d3:db:49:48:ca:6f:a1:08:23:51:15:
62:b1:1e:0c:40:eb:45:36:a2:40:9f:a9:00:b8:4e:
78:1f:a6:b6:4e:8b:f1:71:c8:59:5f:ca:b5:6f:8a:
d0:e4:c1:07:36:35:74:05:6c:04:01:e9:71:47:ee:
4b:7d:c6:01:40:e3:e3:b7:ec:f4:53:c0:56:5f:d5:
18:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A2:2F:27:11:41:29:3E:A0:78:57:E5:75:6A:5F:9D:0C:E9:27:AD
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oaIvJxFBKT6geFfldWpfnQzpJ60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.39.77.0/24
62.39.100.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:bf:27:a7:af:60:2f:2f:0f:44:e4:a0:89:45:e8:9e:e5:d7:
80:d2:81:c7:ab:ef:7f:29:c3:5a:31:19:2a:3c:1c:f7:69:bb:
50:e6:f2:5a:c0:ae:c5:2c:a9:5d:64:31:3f:d0:e7:ca:86:06:
94:6f:d1:18:f3:d6:6d:51:98:e9:2d:b2:ba:63:0d:40:dc:bc:
a3:55:bd:63:d1:9a:ba:11:19:d7:c7:35:87:64:15:05:8f:45:
bd:90:83:60:90:4e:cc:8a:3e:92:59:d8:ad:b1:26:27:8c:ae:
9c:8b:f3:4d:5d:bb:5d:6b:16:8e:b7:c7:9e:d8:45:a8:8a:77:
33:38:93:0b:8a:a6:c7:28:89:47:5b:9b:93:88:e2:2c:58:9c:
02:34:9e:00:5a:ec:d1:6b:13:52:4c:21:90:66:d7:af:55:b5:
1a:14:fb:fe:1a:11:2d:ad:7b:97:d4:8d:2d:18:3c:af:77:f7:
72:5f:c4:77:33:51:e9:e8:9f:69:e9:1a:cc:0a:4a:7b:1e:7d:
13:6a:80:94:b1:15:ae:10:bc:6f:92:b3:8f:7f:00:ce:50:fc:
85:ba:ad:d4:76:4c:56:40:9c:69:e6:80:69:6a:88:ba:c1:00:
7f:06:28:6b:97:37:7f:3b:5b:d5:e1:6a:46:41:de:39:69:50:
f7:1c:d8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:16:54 2025 by rpki-client