Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/YQ-xVKfQD1jRgteCva10HYMl0Qw.roa
File: YQ-xVKfQD1jRgteCva10HYMl0Qw.roa (raw, json)
Hash identifier: /S2yB3AYoCcoSyXbvsXMrsoHpSOp+RYr9HyXeDw2tsY=
Subject key identifier: 61:0F:B1:54:A7:D0:0F:58:D1:82:D7:82:BD:AD:74:1D:83:25:D1:0C
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 018E6C2B0F58D7FA6AC83789D1138900E89B
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/YQ-xVKfQD1jRgteCva10HYMl0Qw.roa
Signing time: Sat 23 Mar 2024 16:35:44 +0000
ROA not before: Sat 23 Mar 2024 16:35:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60919
IP address blocks: 62.181.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6c:2b:0f:58:d7:fa:6a:c8:37:89:d1:13:89:00:e8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Mar 23 16:35:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=610fb154a7d00f58d182d782bdad741d8325d10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:07:38:a2:91:79:08:12:fe:34:1d:7c:08:b8:
f3:aa:b9:d8:f1:97:23:c6:71:64:9e:e2:fd:a5:c6:
cb:d3:37:52:55:e5:6b:92:3b:f6:cc:99:83:7d:4f:
9a:79:2b:ee:fb:68:45:55:af:97:26:45:68:6f:29:
d4:d8:fa:28:c6:37:e5:5e:32:4b:fc:f0:87:53:f0:
58:07:2b:a1:4a:f5:4e:ac:72:27:53:ab:68:32:ab:
aa:f8:5a:f1:77:60:cd:85:a2:ad:ae:79:c8:de:ab:
6e:30:e7:4a:77:c5:c2:83:58:58:bc:c0:70:f1:10:
30:16:45:65:4f:79:c5:81:d9:4e:7c:fb:a6:b8:2e:
35:78:7e:d6:6c:c4:4f:de:e5:0b:f3:2e:9c:a6:74:
59:10:63:13:61:2c:de:e3:89:c1:87:33:b6:24:db:
56:90:bb:26:61:07:3f:4e:be:97:63:2c:b9:fe:b2:
78:b4:ea:5f:c4:41:cc:c2:68:3e:da:c4:b5:8b:0c:
cb:0c:eb:19:da:80:54:38:64:80:d4:30:08:94:46:
d7:1b:03:1d:c9:fb:b4:a4:22:9c:df:3a:2b:16:f8:
33:a0:2b:83:19:2b:ca:03:96:e4:b3:0e:8b:ab:6e:
75:d3:e3:e2:2f:54:ca:c3:ba:ab:92:d5:20:48:e9:
f7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0F:B1:54:A7:D0:0F:58:D1:82:D7:82:BD:AD:74:1D:83:25:D1:0C
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/YQ-xVKfQD1jRgteCva10HYMl0Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.181.57.0/24
Signature Algorithm: sha256WithRSAEncryption
91:cb:50:9b:b1:7b:a9:74:1c:50:fa:64:10:58:f5:f9:6f:b1:
7d:65:98:94:35:50:15:ac:17:9b:95:d2:6f:51:24:a5:91:dd:
2c:de:9f:71:8d:b3:6f:70:7a:51:b7:39:41:50:fd:e6:79:db:
78:3f:23:b7:63:d1:c3:d5:89:68:f4:7f:f2:35:b6:a0:d1:71:
99:a0:3f:2d:91:91:e3:22:5b:4b:e5:2a:ce:22:79:9c:37:02:
48:f7:d9:47:34:f1:8f:94:db:98:5e:8e:14:23:6c:35:4f:5c:
50:c0:aa:bd:f0:fd:c7:fd:0b:86:96:92:f5:c4:b0:de:4b:9d:
48:09:0b:c8:d2:70:96:89:d6:cc:13:ad:4d:c5:56:a4:3d:33:
7a:a4:d3:e3:81:d4:a1:6c:21:43:a7:03:c4:9d:0b:09:8f:21:
04:6c:c6:06:11:71:e6:05:da:48:b4:55:41:13:5d:bc:30:6d:
af:07:78:9e:0d:5f:b1:bc:52:c3:38:fc:50:8c:ba:70:93:75:
16:96:21:8e:6b:8c:19:3b:c9:0b:b5:4d:c1:cc:ec:c0:2d:a4:
0c:58:bd:0e:f3:fb:24:c8:d8:0e:df:a8:0d:22:54:f5:ea:23:
d6:42:80:11:cf:b2:fc:8f:51:12:78:de:74:ab:69:f7:9f:c7:
16:a2:82:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:31:08 2025 by rpki-client