Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/rr6MOgfgm6jxCSsqi6vyOdAkgNA.roa
File: rr6MOgfgm6jxCSsqi6vyOdAkgNA.roa (raw, json)
Hash identifier: jkLxqL00wzO8s2W1T28K9fKGPBLkNAuo09m7+y1HvRI=
Subject key identifier: AE:BE:8C:3A:07:E0:9B:A8:F1:09:2B:2A:8B:AB:F2:39:D0:24:80:D0
Certificate issuer: /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Certificate serial: 018CC8701EDC91355F900E987BE50467A9BB
Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/rr6MOgfgm6jxCSsqi6vyOdAkgNA.roa
Signing time: Tue 02 Jan 2024 04:30:40 +0000
ROA not before: Tue 02 Jan 2024 04:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31055
IP address blocks: 62.168.192.0/24 maxlen: 24
62.168.194.0/24 maxlen: 24
62.168.193.0/24 maxlen: 24
62.168.199.0/24 maxlen: 24
62.168.198.0/24 maxlen: 24
62.168.197.0/24 maxlen: 24
62.168.196.0/24 maxlen: 24
62.168.195.0/24 maxlen: 24
62.168.206.0/24 maxlen: 24
62.168.205.0/24 maxlen: 24
62.168.204.0/24 maxlen: 24
62.168.203.0/24 maxlen: 24
62.168.202.0/24 maxlen: 24
62.168.201.0/24 maxlen: 24
62.168.200.0/24 maxlen: 24
62.168.207.0/24 maxlen: 24
62.168.213.0/24 maxlen: 24
62.168.212.0/24 maxlen: 24
62.168.211.0/24 maxlen: 24
62.168.210.0/24 maxlen: 24
62.168.209.0/24 maxlen: 24
62.168.208.0/24 maxlen: 24
62.168.219.0/24 maxlen: 24
62.168.218.0/24 maxlen: 24
62.168.217.0/24 maxlen: 24
62.168.216.0/24 maxlen: 24
62.168.215.0/24 maxlen: 24
62.168.214.0/24 maxlen: 24
62.168.221.0/24 maxlen: 24
62.168.220.0/24 maxlen: 24
62.168.223.0/24 maxlen: 24
62.168.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:1e:dc:91:35:5f:90:0e:98:7b:e5:04:67:a9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Validity
Not Before: Jan 2 04:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aebe8c3a07e09ba8f1092b2a8babf239d02480d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:e5:9f:a4:d1:7f:69:6f:3f:97:5e:64:2a:
61:6f:b4:0d:9d:53:98:38:a7:47:7f:9f:ee:eb:1c:
38:24:e3:4f:ec:87:c8:7a:37:e6:54:c1:43:40:19:
5d:36:89:cd:7e:2d:31:10:89:4f:2e:cb:c5:51:4c:
64:0b:85:85:bc:ff:9c:fc:b2:4b:14:13:fe:42:82:
a0:fe:be:e5:a6:b1:a5:20:21:55:4b:5a:ce:dd:b1:
dd:5a:b1:ed:5e:87:64:b3:d9:0a:2d:d5:7f:a5:7e:
14:e3:fb:3e:77:a0:ec:2a:78:d4:11:87:30:33:7d:
30:94:b1:68:b5:36:84:80:aa:9b:f8:48:dc:64:b0:
6a:8c:c9:8e:2b:38:49:85:68:ec:58:2d:02:54:9e:
33:fa:85:6a:0c:f8:ef:3a:b4:04:45:90:75:a5:2c:
bc:b5:d8:2f:05:73:ab:c0:a2:01:b0:33:1b:ef:dc:
34:67:a7:ae:cd:cf:41:66:0f:0e:d4:cc:54:6f:fe:
10:e5:fe:6d:2a:fe:88:1f:40:f0:fa:fe:48:5b:65:
67:1e:85:e1:27:57:82:0d:c4:0b:94:b0:3d:d9:1c:
21:c0:ff:a9:39:cb:bb:a1:b0:81:79:41:1a:87:eb:
db:e0:74:18:e2:27:4d:82:09:49:b0:94:1d:80:0f:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BE:8C:3A:07:E0:9B:A8:F1:09:2B:2A:8B:AB:F2:39:D0:24:80:D0
X509v3 Authority Key Identifier:
keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/rr6MOgfgm6jxCSsqi6vyOdAkgNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.168.192.0/19
Signature Algorithm: sha256WithRSAEncryption
89:bb:6d:51:ec:8c:a5:79:db:ab:89:e9:f6:35:d8:04:b1:06:
9e:a1:dc:5b:15:92:2c:23:87:bc:5f:32:05:89:1d:17:08:eb:
3b:e8:bc:93:3a:b0:14:86:91:62:17:2a:5e:c8:07:7b:71:83:
b4:03:b5:3d:61:bd:b8:90:63:51:ce:4c:15:8c:77:c9:9b:14:
f1:27:bd:0b:ea:7c:e7:e8:ff:f3:f7:19:50:49:01:05:23:b7:
b3:40:a4:db:5b:f7:76:a6:17:90:b4:7e:f2:c9:4e:b8:56:44:
d7:52:a8:46:5f:d6:2d:ad:4d:48:ba:31:f6:cb:9e:ee:17:21:
f5:64:e8:01:2a:89:f4:0b:9f:f0:b9:19:54:45:9a:82:6c:2f:
cb:82:ea:67:df:35:7b:be:85:e3:a8:8c:0f:62:53:d2:77:ad:
c8:db:7e:8b:85:dc:cb:09:fb:f3:67:4c:41:02:ab:4d:80:db:
b5:da:b2:6c:ad:8b:d0:be:27:b6:d3:75:2a:8c:03:21:03:b0:
d9:a4:a2:36:35:75:7f:ad:d1:7e:bb:d9:5c:3c:6a:31:9c:28:
a1:6a:68:2e:2d:56:c8:56:c1:53:71:27:d0:80:e1:42:be:d5:
4d:0a:77:b5:a0:15:0b:1e:94:f2:23:26:55:5f:b7:9d:41:d2:
d8:53:63:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIcB7ckTVfkA6Ye+UEZ6m7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZWJkYjY5YTMzZThmM2FmMzYzYWUxNDRmODUzNTM4ZTgw
MzFiNjMwHhcNMjQwMTAyMDQzMDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWJlOGMzYTA3ZTA5YmE4ZjEwOTJiMmE4YmFiZjIzOWQwMjQ4MGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRLln6TRf2lvP5deZCphb7QNnVOY
OKdHf5/u6xw4JONP7IfIejfmVMFDQBldNonNfi0xEIlPLsvFUUxkC4WFvP+c/LJL
FBP+QoKg/r7lprGlICFVS1rO3bHdWrHtXodks9kKLdV/pX4U4/s+d6DsKnjUEYcw
M30wlLFotTaEgKqb+EjcZLBqjMmOKzhJhWjsWC0CVJ4z+oVqDPjvOrQERZB1pSy8
tdgvBXOrwKIBsDMb79w0Z6euzc9BZg8O1MxUb/4Q5f5tKv6IH0Dw+v5IW2VnHoXh
J1eCDcQLlLA92RwhwP+pOcu7obCBeUEah+vb4HQY4idNgglJsJQdgA8u2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK6+jDoH4Juo8QkrKour8jnQJIDQMB8GA1UdIwQY
MBaAFODr22mjPo8682OuFE+FNTjoAxtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE92YmFhTS1qenJ6WTY0VVQ0VTFPT2dERzJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kOGM0YmEtMWM0OC00ODBiLWJiNTkt
ZDIzMTBiYmEwZTExLzEvcnI2TU9nZmdtNmp4Q1NzcWk2dnlPZEFrZ05BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9kOGM0YmEtMWM0OC00ODBiLWJiNTktZDIzMTBiYmEwZTEx
LzEvNE92YmFhTS1qenJ6WTY0VVQ0VTFPT2dERzJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPqjAMA0G
CSqGSIb3DQEBCwUAA4IBAQCJu21R7Iyledurien2NdgEsQaeodxbFZIsI4e8XzIF
iR0XCOs76LyTOrAUhpFiFypeyAd7cYO0A7U9Yb24kGNRzkwVjHfJmxTxJ70L6nzn
6P/z9xlQSQEFI7ezQKTbW/d2pheQtH7yyU64VkTXUqhGX9YtrU1IujH2y57uFyH1
ZOgBKon0C5/wuRlURZqCbC/Lgupn3zV7voXjqIwPYlPSd63I236LhdzLCfvzZ0xB
AqtNgNu12rJsrYvQvie203UqjAMhA7DZpKI2NXV/rdF+u9lcPGoxnCihamguLVbI
VsFTcSfQgOFCvtVNCne1oBULHpTyIyZVX7edQdLYU2MR
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:16 2025 by rpki-client