Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/t_vVTs5zFoINPJAmQsCCcCHLX9I.roa
File: t_vVTs5zFoINPJAmQsCCcCHLX9I.roa (raw, json)
Hash identifier: XIv+pecXjksjuPjqfoodxXfYRx45BKTgbInfYdp+OCU=
Subject key identifier: B7:FB:D5:4E:CE:73:16:82:0D:3C:90:26:42:C0:82:70:21:CB:5F:D2
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 018FA5C94886A0F56387AE9BE332EB81D526
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/t_vVTs5zFoINPJAmQsCCcCHLX9I.roa
Signing time: Thu 23 May 2024 14:09:42 +0000
ROA not before: Thu 23 May 2024 14:09:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48571
IP address blocks: 185.62.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 15:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a5:c9:48:86:a0:f5:63:87:ae:9b:e3:32:eb:81:d5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: May 23 14:09:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7fbd54ece7316820d3c902642c0827021cb5fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:46:6b:ec:9d:ad:b4:a9:63:73:6d:2f:03:b0:
27:c3:05:8e:ad:81:ae:4f:12:12:71:df:3f:44:39:
a0:b2:bb:b6:aa:1c:6d:15:ad:62:b6:f7:cd:4d:d1:
e4:9e:9f:38:9a:c4:0b:48:c1:59:3d:98:1f:e1:94:
fe:82:6c:8f:83:02:e5:9b:5d:0f:b8:5a:08:a0:56:
8a:5b:fd:0a:dc:b1:88:8c:aa:ad:d6:c5:20:ca:c2:
42:8e:67:18:f5:36:87:a5:b6:58:2f:48:e0:22:13:
e3:b3:c3:82:1a:65:21:4b:17:1e:11:11:b7:34:9c:
3d:ae:64:1e:6f:63:47:7e:c1:02:81:4d:15:f8:42:
7b:f0:34:db:79:59:0a:f2:2d:87:2e:2e:a9:a2:9d:
20:91:c8:53:2c:e2:e2:f4:83:16:14:d4:2d:91:df:
88:a3:e4:fa:e5:18:83:3e:3e:da:b1:1c:ff:cf:3a:
17:92:23:56:d7:77:3b:b9:3a:3f:6e:21:7c:7c:e0:
6e:47:17:09:8e:cc:b1:24:17:33:7b:60:42:c6:ed:
81:2d:c9:ea:6a:cc:96:10:36:25:62:53:8a:50:6a:
6e:31:b4:ac:99:c4:4a:fb:cf:cf:b6:72:52:67:20:
0b:38:06:19:59:b2:9d:1a:b6:d8:86:a2:87:db:51:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FB:D5:4E:CE:73:16:82:0D:3C:90:26:42:C0:82:70:21:CB:5F:D2
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/t_vVTs5zFoINPJAmQsCCcCHLX9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.11.0/24
Signature Algorithm: sha256WithRSAEncryption
14:82:c1:a4:94:ee:2e:82:ad:2d:3e:0a:fe:4a:5d:72:08:3e:
5b:29:ba:3b:4d:cd:f6:70:36:0a:93:bf:3b:ef:78:5b:92:83:
76:73:a3:6c:b2:fb:08:eb:17:51:38:c3:1e:8e:99:64:ca:ac:
84:f3:5d:ed:7a:8c:73:ef:bd:4a:f9:cb:1b:5e:a3:4c:50:ed:
c1:fc:f1:e8:4e:dd:a9:96:b5:75:af:27:8b:ed:1d:5a:e8:6b:
8a:f4:23:c6:e5:60:73:cd:36:74:d1:34:31:96:3e:29:56:6a:
29:1c:fa:a8:0e:4b:40:70:9f:d9:de:30:3a:4f:93:af:f5:cc:
39:bc:ef:c5:34:ea:9a:45:55:da:a8:cf:cf:2b:ba:d0:a4:5a:
c6:dc:ef:4a:3f:22:4a:7e:94:9e:18:87:f3:53:5c:ec:0d:5d:
cd:5f:82:c7:5f:45:6e:28:6c:2c:92:f9:79:31:84:d3:9c:e1:
6d:4c:c1:91:87:28:21:78:dd:55:30:bb:6f:bc:14:f7:6d:b1:
79:4e:09:d4:03:d8:ca:5e:6f:bc:66:74:7f:67:5c:34:0d:00:
e3:5e:d1:21:35:0d:66:38:37:89:3e:8a:0d:35:9d:f5:4b:78:
dd:5f:4e:85:d7:f9:da:12:d0:95:c3:97:20:fc:b8:d0:e9:16:
e7:25:a1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:32 2025 by rpki-client