Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/7_-ZRK26I3SkH6cA9URP3_y5GqU.roa
File: 7_-ZRK26I3SkH6cA9URP3_y5GqU.roa (raw, json)
Hash identifier: 03gurc6Ezex/8p4Bak6oabaFdW7kzIXxPQyvwUiP6VI=
Subject key identifier: EF:FF:99:44:AD:BA:23:74:A4:1F:A7:00:F5:44:4F:DF:FC:B9:1A:A5
Certificate issuer: /CN=6e9a558ad546dcc9abc0b8a131067af02e407007
Certificate serial: 018CC79574A75CE375EE9030ED2C3C323090
Authority key identifier: 6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/7_-ZRK26I3SkH6cA9URP3_y5GqU.roa
Signing time: Tue 02 Jan 2024 00:31:49 +0000
ROA not before: Tue 02 Jan 2024 00:31:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201849
IP address blocks: 185.62.63.0/24 maxlen: 24
2a06:d700:4444::/48 maxlen: 64
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:74:a7:5c:e3:75:ee:90:30:ed:2c:3c:32:30:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e9a558ad546dcc9abc0b8a131067af02e407007
Validity
Not Before: Jan 2 00:31:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efff9944adba2374a41fa700f5444fdffcb91aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:11:c9:a7:18:b1:64:f1:df:31:3a:f0:14:
18:a9:c3:b8:ce:cb:a9:fd:ee:01:3d:c9:57:75:9f:
0b:4a:37:98:f0:66:4c:01:b0:e5:83:70:cb:13:35:
b5:cc:31:82:eb:c2:d6:b5:91:b1:37:4e:e7:8e:62:
08:60:45:72:82:08:80:17:76:02:05:b3:a4:fe:9d:
da:9a:37:c1:7e:30:53:4e:a5:0a:fa:8c:cf:04:c0:
cc:f0:f5:6e:0b:4f:d7:44:7d:36:81:1a:63:12:5d:
4b:1c:2a:82:aa:a5:a9:e1:36:22:ac:41:aa:e0:2f:
53:d7:3a:e4:c4:a9:06:8d:d1:da:2f:22:8c:d1:ce:
40:d8:bf:f4:d1:3d:c8:5b:b5:1a:ac:d6:0e:29:21:
d4:c2:44:d4:42:63:ee:25:07:d3:79:3b:5c:73:1b:
a3:ff:10:05:f0:31:17:c7:7a:bd:0b:46:ce:ba:4d:
e5:72:f3:db:cc:9f:42:d4:4c:65:09:9c:8a:d1:48:
53:b8:7f:cd:6e:c3:e8:7c:ac:8d:0d:d9:5e:8a:ca:
18:5c:ed:1f:88:72:0d:d0:c7:2b:ec:5a:f4:4d:f6:
8d:04:82:a5:3d:ce:77:e5:11:e2:42:df:47:01:f9:
4a:ad:05:ac:99:27:49:76:67:9e:80:6f:92:2e:f5:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FF:99:44:AD:BA:23:74:A4:1F:A7:00:F5:44:4F:DF:FC:B9:1A:A5
X509v3 Authority Key Identifier:
keyid:6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/7_-ZRK26I3SkH6cA9URP3_y5GqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.63.0/24
IPv6:
2a06:d700:4444::/48
Signature Algorithm: sha256WithRSAEncryption
5b:ee:7a:3d:3b:6d:f0:ef:4b:ec:f6:ed:f3:1c:3e:21:28:fd:
71:1c:48:47:60:3b:f0:11:59:20:36:01:4b:a3:e4:66:7f:d8:
b3:79:41:bd:04:5a:d8:75:93:90:52:82:b0:56:1f:4b:3d:83:
26:23:53:65:06:13:84:2c:59:f5:d4:55:56:69:c1:b2:2c:b6:
5d:cc:21:87:35:43:75:9c:b1:3e:46:18:cf:16:36:08:8d:14:
7a:7d:88:37:99:fd:48:4b:39:ae:a7:67:d3:29:26:12:42:1f:
71:8c:4a:92:36:25:7b:9d:7c:af:f6:3c:e8:27:5e:41:fc:5e:
2f:4b:84:86:ac:8a:36:1b:6d:fc:bc:05:b3:c6:43:49:e5:43:
99:aa:f0:c5:2b:1e:bc:0f:44:00:e3:05:ab:bb:11:92:89:dc:
03:1c:18:53:6e:55:d1:c9:d0:b1:ef:b5:9a:80:2b:78:04:49:
96:27:d2:a2:b4:b0:e5:82:0e:20:57:84:04:25:91:0e:00:77:
27:89:b9:be:be:47:92:8f:25:b7:be:fc:7c:59:0a:e2:b5:b2:
32:18:73:8a:19:81:f9:50:5a:1b:d6:d4:31:c9:2b:8f:9a:b7:
86:a7:0f:fe:c9:8c:6f:a6:09:2e:8c:f5:38:34:2e:d5:4a:db:
c1:76:49:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:33 2025 by rpki-client