Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/k9jCuM3C5LgJlB3-6J5MQ0D6mq0.roa
File: k9jCuM3C5LgJlB3-6J5MQ0D6mq0.roa (raw, json)
Hash identifier: 7qC472wge8JzrcdPd+tZR31BcNFTkNmsutnDQcW3vgQ=
Subject key identifier: 93:D8:C2:B8:CD:C2:E4:B8:09:94:1D:FE:E8:9E:4C:43:40:FA:9A:AD
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 018CEDFEFE96D2C527D2481F8406E39A6284
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/k9jCuM3C5LgJlB3-6J5MQ0D6mq0.roa
Signing time: Tue 09 Jan 2024 11:32:40 +0000
ROA not before: Tue 09 Jan 2024 11:32:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 62.201.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 05:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:fe:fe:96:d2:c5:27:d2:48:1f:84:06:e3:9a:62:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 9 11:32:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93d8c2b8cdc2e4b809941dfee89e4c4340fa9aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c9:8a:58:33:e9:5d:93:52:79:d9:f2:13:6b:
83:28:55:10:1a:d7:a8:d6:d4:e0:71:0b:e3:38:81:
12:6f:26:ff:ff:71:5f:19:eb:bb:60:50:bf:d4:0c:
ea:1a:85:73:c1:b9:24:8b:3b:99:d3:9a:28:c9:5b:
b8:44:0d:7b:f5:5e:4c:0c:d2:bd:8a:f2:91:96:d9:
5e:fe:bd:14:7d:89:ac:34:08:cc:8d:69:0f:77:68:
b9:88:f4:44:62:ba:84:48:66:9d:01:9a:a3:94:a5:
8b:d1:10:53:fb:5b:c2:0e:79:27:0a:bc:19:7a:2a:
cb:df:48:15:49:9a:1b:3a:7f:6c:ca:f7:d8:2d:32:
4f:f3:ed:25:d5:4e:39:b2:1a:4d:a3:4f:5b:70:e4:
a2:6f:9d:db:20:ed:59:51:ba:de:00:a0:b1:20:8d:
a0:3c:33:77:4b:05:b2:60:d6:4c:31:72:6f:bf:74:
f2:c5:87:a0:06:70:cd:99:1a:df:e7:57:ed:b9:bd:
d0:8f:97:f1:dc:8e:11:af:7d:db:bd:f5:80:6c:b1:
f1:c4:4a:fe:ff:fe:94:89:fa:50:41:18:c4:f1:31:
83:b0:51:bf:65:27:14:8d:cc:e8:7d:b0:1c:18:50:
d2:e6:4d:7d:67:25:a1:6a:cb:cd:f6:1d:65:87:90:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D8:C2:B8:CD:C2:E4:B8:09:94:1D:FE:E8:9E:4C:43:40:FA:9A:AD
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/k9jCuM3C5LgJlB3-6J5MQ0D6mq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.202.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:73:2a:e3:fe:43:bd:c7:01:96:5e:be:76:f8:20:72:f4:af:
e8:30:7d:ef:d5:79:a7:2b:18:ac:25:7f:5d:c4:a9:3d:09:ea:
56:0f:3f:95:d1:d3:46:f9:2a:19:d4:12:35:75:fe:44:42:f5:
d9:21:eb:c4:a4:71:e2:28:6a:bb:7a:d8:a3:11:fb:5e:b9:e2:
bc:e8:bf:a7:b5:ee:63:86:07:61:eb:1d:ce:68:11:ee:94:a0:
4b:ba:05:1a:18:a1:b2:b2:30:43:fd:8e:11:d8:de:87:99:58:
27:dc:85:0a:57:19:bf:60:e7:a1:1d:f7:e5:44:3b:3e:f1:37:
f6:cb:eb:b3:a6:f3:be:74:9c:05:ec:a5:36:b0:87:1b:f9:60:
44:ce:bc:34:08:ae:dd:02:ea:6f:c7:1b:33:92:89:00:82:b4:
a9:12:16:46:bb:d9:22:3b:b3:71:aa:b9:fd:64:04:a5:aa:c6:
10:7b:fe:e5:6e:b7:91:61:d5:b6:d4:0d:b7:9b:79:e7:9a:4b:
76:f4:ee:c7:90:f6:b6:19:3b:db:fa:fe:77:2a:5b:2c:c7:62:
7c:52:b5:1b:1d:6b:38:04:fb:f3:0c:e5:39:59:26:2a:2c:53:
1b:2e:d2:4c:d6:e4:1a:bb:b7:29:d1:ca:ff:44:42:d1:aa:f5:
9c:c9:c9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:20:28 2025 by rpki-client