Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/x4kT0ZNFxeBKvADQDuJA-dAQne8.roa
File: x4kT0ZNFxeBKvADQDuJA-dAQne8.roa (raw, json)
Hash identifier: F99+fK6v8wendOiyZLeynEpsEltmGADUsl1WmjhZGXk=
Subject key identifier: C7:89:13:D1:93:45:C5:E0:4A:BC:00:D0:0E:E2:40:F9:D0:10:9D:EF
Certificate issuer: /CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Certificate serial: 01936CF97C5400E910C7B80D3260EED50475
Authority key identifier: 65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/x4kT0ZNFxeBKvADQDuJA-dAQne8.roa
Signing time: Wed 27 Nov 2024 09:35:09 +0000
ROA not before: Wed 27 Nov 2024 09:35:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56874
IP address blocks: 185.62.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:f9:7c:54:00:e9:10:c7:b8:0d:32:60:ee:d5:04:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Validity
Not Before: Nov 27 09:35:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c78913d19345c5e04abc00d00ee240f9d0109def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:f7:3f:30:8b:0c:8f:b9:08:59:e6:0f:e4:
2c:2f:14:93:36:53:04:fa:23:5b:dc:87:b1:67:8a:
85:40:27:1f:84:9f:d1:2e:b4:61:be:6a:d1:78:06:
7c:38:b6:88:53:5a:d0:1c:94:7c:42:3c:b3:92:84:
ed:f9:70:98:7b:58:07:45:55:ca:d6:ad:d8:88:19:
59:f7:d5:ac:13:b0:fb:4b:99:67:24:b5:18:17:ae:
d9:bc:74:07:a6:07:c7:2d:15:23:f1:85:bd:94:c0:
36:0b:15:4f:00:63:d1:22:5b:5c:f6:0e:11:64:a2:
cf:0e:45:70:34:17:d1:e9:9a:6d:9c:63:ed:ce:80:
89:57:0c:9f:82:22:93:54:c0:36:e5:a6:ef:94:4a:
84:c0:77:0a:38:89:c0:cb:36:68:bc:24:4c:3c:68:
10:cf:91:63:e6:0f:26:0d:bf:c9:bf:bc:ac:fe:25:
a8:38:f2:3c:14:64:1c:7e:05:a8:da:c7:81:d2:b1:
ff:9c:60:f5:19:6f:c2:aa:e0:af:3e:d8:bf:15:40:
6f:78:ae:4e:83:9a:bd:5c:fc:9a:6e:4e:97:39:bb:
01:49:7a:a2:20:b3:e7:11:67:ff:3e:ab:e2:15:fa:
e3:e9:3c:bd:76:8b:aa:10:dd:24:e7:14:bb:d7:02:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:89:13:D1:93:45:C5:E0:4A:BC:00:D0:0E:E2:40:F9:D0:10:9D:EF
X509v3 Authority Key Identifier:
keyid:65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/x4kT0ZNFxeBKvADQDuJA-dAQne8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.229.0/24
Signature Algorithm: sha256WithRSAEncryption
83:5b:a6:52:ec:f9:9c:f4:fa:6c:49:04:2e:b3:fc:74:7b:90:
22:f3:64:dc:0c:22:ae:1e:8d:a3:2a:89:aa:6d:c7:14:37:67:
c5:20:d4:e7:5d:d0:77:62:11:96:66:83:34:72:dd:b3:27:bd:
73:1b:64:fd:7c:8c:88:83:40:ab:a5:ad:54:d1:e1:74:2c:4e:
01:4c:08:51:ba:fb:c1:44:ac:b7:1f:36:35:b0:63:73:4b:f1:
c6:c4:f2:68:45:b5:9e:14:d7:93:f2:55:97:8c:c0:7d:10:7d:
65:35:e0:7e:46:ef:25:86:41:ad:58:39:67:73:98:4b:40:3b:
3e:5a:be:a5:13:18:22:5c:7f:ac:17:9b:ed:07:b0:d1:aa:ba:
cb:3b:51:6a:34:27:6f:cc:74:5a:8a:6a:88:81:f5:bd:c9:33:
9c:14:e2:7d:2c:c8:a4:f0:9e:43:1d:18:45:c2:89:17:a6:d1:
cc:0b:09:e5:6f:a4:02:a6:52:ee:74:7f:9c:37:51:38:05:6a:
6a:97:af:ac:2a:24:7a:74:56:bb:db:0c:a9:85:5d:72:bb:eb:
de:f8:40:72:4a:53:0e:e2:a2:ef:1c:0c:fc:79:dc:b1:92:6b:
5f:75:2d:4f:c0:6c:8f:3e:3b:65:6c:cc:b9:c2:67:fb:ef:2e:
93:89:25:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:57:59 2025 by rpki-client