Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/fy_RqVMwfhYl0vtouKiR0QVmifI.roa
File: fy_RqVMwfhYl0vtouKiR0QVmifI.roa (raw, json)
Hash identifier: 5S7EqmNRrs4K+4gWdMXGQHxyDzrEJTn1sZ6LZCThy9c=
Subject key identifier: 7F:2F:D1:A9:53:30:7E:16:25:D2:FB:68:B8:A8:91:D1:05:66:89:F2
Certificate issuer: /CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
Certificate serial: 018CEC46A10404B9E521B4F734FF5F064400
Authority key identifier: 7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/fy_RqVMwfhYl0vtouKiR0QVmifI.roa
Signing time: Tue 09 Jan 2024 03:31:40 +0000
ROA not before: Tue 09 Jan 2024 03:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56373
IP address blocks: 62.122.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 03:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ec:46:a1:04:04:b9:e5:21:b4:f7:34:ff:5f:06:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
Validity
Not Before: Jan 9 03:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f2fd1a953307e1625d2fb68b8a891d1056689f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1b:38:ab:24:17:fc:7c:36:96:5f:62:bd:59:
1f:f6:b3:1f:b8:e5:76:60:fa:bd:b1:5b:6f:3d:9e:
3c:a7:42:3f:45:16:6d:8f:21:dd:b9:69:27:06:54:
19:8f:99:d4:3e:ce:b6:71:a9:54:72:a4:e7:94:9b:
6c:8b:df:c6:0e:9b:13:e9:07:93:6d:19:1b:9e:b6:
82:16:fb:e8:c8:c1:6d:25:a5:87:8b:fb:f7:20:76:
b9:55:92:d3:3a:71:e3:fe:72:1e:cd:b6:2a:1a:de:
ed:48:a1:6e:f0:91:76:91:ea:ec:76:c6:e7:d1:73:
ac:f5:bf:da:c5:c7:ca:30:6c:1b:c2:fa:f5:2d:0e:
a5:7b:01:9e:7f:dc:d9:fa:0e:7c:86:d0:b0:e4:95:
64:c1:df:b6:b3:5e:7d:62:42:7b:9b:f7:29:a2:1b:
5f:2e:be:93:81:32:ec:1d:3d:5d:c4:c6:6b:ab:db:
bd:ff:96:51:7e:fb:55:db:b9:a5:86:d3:e2:dc:54:
c6:36:6a:09:75:9b:e2:be:cd:12:b4:03:76:97:98:
2f:ff:dd:0d:17:e9:da:6f:37:09:a2:64:60:d1:62:
13:3c:7d:8c:13:df:96:12:41:6c:75:bb:74:83:38:
e4:f7:82:b4:8b:05:5f:44:0f:28:8c:ad:a0:56:4a:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2F:D1:A9:53:30:7E:16:25:D2:FB:68:B8:A8:91:D1:05:66:89:F2
X509v3 Authority Key Identifier:
keyid:7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/fy_RqVMwfhYl0vtouKiR0QVmifI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.126.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f2:d1:4c:ea:4c:37:51:60:a4:a0:23:5e:44:c3:68:3f:06:
e6:13:28:71:7a:dc:49:fd:a4:ab:5c:b3:0d:fd:aa:10:16:56:
f1:1d:11:39:5b:0f:39:73:1b:8b:e6:88:d7:51:af:6e:7a:b9:
2d:ec:09:9e:d0:d9:c3:f9:31:7f:e8:6b:32:e8:e7:01:7b:f0:
cf:21:5e:80:cf:15:d7:d3:4a:0e:43:5b:7d:b3:ac:07:f3:ac:
03:fe:0a:ab:6c:6e:e2:34:26:a0:95:f7:3a:c6:09:d5:8c:ee:
c1:86:fe:29:f9:38:f3:82:56:da:e3:a7:c5:6a:63:b6:de:6f:
c3:aa:8e:dc:50:4e:55:9c:15:08:6e:c1:51:e3:8b:5b:02:b5:
db:32:46:74:75:fc:bc:da:db:1b:f4:14:8f:04:58:3e:92:05:
16:21:b1:df:05:fb:54:6a:0f:82:00:d1:3e:a5:61:39:5d:de:
58:92:e9:4d:d3:63:ef:56:1a:95:c7:29:ca:5a:6b:46:83:cc:
0b:08:a4:14:c4:1c:42:9b:05:39:92:c7:66:45:49:fc:8b:0b:
a9:6f:0a:ea:0f:26:91:db:c2:21:8d:59:a0:91:25:f7:94:66:
81:d7:67:9b:f5:7a:e5:8d:83:5c:09:8e:a3:81:09:30:96:30:
39:a5:eb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:56:24 2025 by rpki-client