Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/auHWPgTksaAjsSfLBkEtJUXj_4k.roa
File: auHWPgTksaAjsSfLBkEtJUXj_4k.roa (raw, json)
Hash identifier: Vw0NwHihK4f8TXhll4F56nrgfSZwHTFEHPNE1z1hHEQ=
Subject key identifier: 6A:E1:D6:3E:04:E4:B1:A0:23:B1:27:CB:06:41:2D:25:45:E3:FF:89
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 018F95DCC4C6A3C284B094C52870E2CD3E6F
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/auHWPgTksaAjsSfLBkEtJUXj_4k.roa
Signing time: Mon 20 May 2024 11:57:04 +0000
ROA not before: Mon 20 May 2024 11:57:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51020
IP address blocks: 62.201.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Oct 2024 08:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:dc:c4:c6:a3:c2:84:b0:94:c5:28:70:e2:cd:3e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: May 20 11:57:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ae1d63e04e4b1a023b127cb06412d2545e3ff89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:c2:77:df:3c:68:b6:1e:c8:b0:63:b5:ca:
f9:24:3c:a4:90:6c:94:33:5c:17:42:7f:d6:03:dd:
9a:be:70:7c:5f:72:16:a4:6f:3d:a0:9e:68:23:02:
29:a4:3a:04:08:05:20:21:80:7b:24:a7:53:a3:13:
a5:a0:fe:cf:a1:9f:a6:9d:c5:6a:86:db:6c:3e:15:
40:9c:81:b6:56:b4:9f:1e:0e:3a:fa:a4:2d:71:4f:
8e:37:ac:85:cd:ee:e9:10:97:10:38:80:aa:0d:8a:
f8:1f:b4:42:c7:67:97:69:54:c6:76:82:da:7a:90:
da:85:b6:d0:f5:f5:65:ab:a9:b9:52:c9:31:c7:a0:
94:e8:05:25:ba:47:b3:eb:cd:d0:21:cf:58:b5:e3:
e5:9c:ae:b5:b3:0b:66:af:a2:b6:4e:b2:b6:90:d8:
f4:95:5b:86:0b:70:74:e8:a8:ec:ff:3b:2e:95:ef:
5d:c8:8e:c8:1d:52:69:8f:4e:c6:5a:6b:08:78:73:
d3:9b:40:18:f8:ef:7e:e4:19:55:df:9c:99:57:39:
4f:b6:b0:82:95:96:ca:36:8c:64:58:32:9b:ac:12:
97:4d:de:94:b0:b6:0b:fe:f3:36:cc:8a:61:0e:3e:
9f:22:bd:17:ad:ff:9e:2c:c1:eb:70:4b:ec:80:d6:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E1:D6:3E:04:E4:B1:A0:23:B1:27:CB:06:41:2D:25:45:E3:FF:89
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/auHWPgTksaAjsSfLBkEtJUXj_4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.196.0/24
Signature Algorithm: sha256WithRSAEncryption
40:59:a8:a1:fb:ca:59:fe:41:be:d9:57:03:8a:67:55:a2:90:
01:09:1b:56:35:5c:72:0f:24:2c:29:f3:5e:19:4c:46:5f:39:
48:15:37:1f:d8:33:1f:a9:5b:47:30:49:92:12:15:d8:80:13:
bf:56:96:09:5c:74:8e:1f:9f:f3:50:06:9d:d5:90:03:b6:db:
b1:94:e4:da:42:77:6d:53:91:7b:b9:ac:92:25:32:00:85:29:
0a:0f:3f:f7:47:e0:cb:21:ac:a3:fc:b3:cd:e9:d8:de:0c:b8:
ab:b1:b7:8c:ef:17:53:c0:af:56:ce:79:0f:a5:0d:c4:01:cf:
b8:a6:14:04:8e:dc:c6:39:4d:3b:06:b7:69:75:e8:92:0e:d1:
b5:f2:b9:e4:c2:61:17:b9:01:7a:b9:6a:16:af:60:1a:91:a2:
0f:a1:1a:72:4c:7a:90:03:7e:d6:cd:3c:82:c9:de:8c:4d:cb:
e8:b1:e0:d8:24:2b:0b:46:f2:41:66:ef:b4:4d:8c:cd:25:25:
c1:49:d6:5f:ce:ae:f1:ca:94:95:1f:0d:c6:c8:d4:0f:55:32:
ee:19:d9:80:7e:bb:60:cb:b6:67:db:6b:ee:86:8b:88:2f:60:
8b:bd:e6:cd:cb:95:ca:90:93:72:59:25:a3:0e:88:49:33:41:
49:3a:25:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:25:10 2025 by rpki-client