Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/pFybm1n5u_GZ6AlthUTZiWx9TLw.roa
File: pFybm1n5u_GZ6AlthUTZiWx9TLw.roa (raw, json)
Hash identifier: j4k2Kk1KcpOgp24WSiGmJtlTYY2zilNNmN23S1++oPg=
Subject key identifier: A4:5C:9B:9B:59:F9:BB:F1:99:E8:09:6D:85:44:D9:89:6C:7D:4C:BC
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 019096697E66F48B306E5C639314569CB4B4
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/pFybm1n5u_GZ6AlthUTZiWx9TLw.roa
Signing time: Tue 09 Jul 2024 07:33:34 +0000
ROA not before: Tue 09 Jul 2024 07:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198589
IP address blocks: 62.201.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Oct 2024 08:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:96:69:7e:66:f4:8b:30:6e:5c:63:93:14:56:9c:b4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jul 9 07:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a45c9b9b59f9bbf199e8096d8544d9896c7d4cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:04:10:2e:5f:32:02:4e:fc:a2:2f:8a:df:
4e:ba:ac:03:41:2e:67:93:a8:84:03:41:9c:d5:80:
5b:5b:51:a6:e8:81:e1:44:8c:27:91:37:f5:cf:9a:
57:3b:ee:d3:00:f8:76:c1:51:35:1c:38:86:10:c5:
1b:e6:97:d6:0b:fc:46:bf:4d:63:5b:79:6e:13:3e:
34:b1:66:8b:7e:eb:53:6c:e4:fb:76:46:3a:55:32:
17:e4:81:00:f5:66:f2:30:20:e2:20:17:7f:5c:46:
24:1c:6a:2a:7a:81:63:af:ce:13:d7:66:79:a0:44:
30:0a:2d:3c:45:91:b1:76:6d:02:96:a6:90:b2:f9:
0f:96:f5:92:5c:99:cd:77:48:c6:1a:78:15:db:af:
e8:34:a4:e0:58:a0:55:c0:69:97:67:df:ad:2f:71:
b2:e9:9e:a9:fc:14:a9:55:c6:07:06:a1:04:7b:f3:
b1:df:dc:2b:76:47:f8:58:71:82:fa:57:2e:9b:bb:
e4:d7:0e:e5:b2:a9:25:56:b7:c1:be:f7:2b:a2:93:
7d:61:34:04:82:59:ac:fe:78:d2:24:b5:82:32:e1:
1d:43:a0:a7:16:3a:bb:32:e8:d7:bf:7d:6f:e5:00:
b2:66:38:02:fb:7b:72:c8:30:df:27:73:68:4f:6c:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5C:9B:9B:59:F9:BB:F1:99:E8:09:6D:85:44:D9:89:6C:7D:4C:BC
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/pFybm1n5u_GZ6AlthUTZiWx9TLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.196.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:9d:83:7e:9e:f8:88:1b:8c:3c:c7:3b:6f:e8:06:98:89:90:
8c:85:3f:f3:6d:be:39:73:a3:ab:b8:8f:6d:fb:08:12:0c:98:
fb:de:7c:cc:d0:ba:5e:59:02:d8:6d:24:78:35:be:1b:ad:9d:
9a:23:7f:20:22:7f:5d:c8:60:b4:6b:e9:2e:44:c2:de:e5:46:
2c:ba:d2:84:80:e2:2e:65:79:ed:d6:02:1e:fc:80:af:13:5c:
b9:f5:7c:53:b5:e2:57:16:17:67:0c:82:99:4c:65:49:22:f3:
66:7a:9c:ad:8b:7d:14:24:26:b5:d4:43:d6:b2:cd:6b:dc:d3:
e1:33:88:0a:bb:16:16:85:2c:8f:50:d6:1a:29:4b:e2:f4:8f:
91:a4:bc:d4:42:87:17:80:7a:0e:9a:b1:c5:40:72:07:7b:26:
2e:3b:b7:d4:d5:e1:02:aa:05:22:b8:78:28:c7:95:d9:72:8f:
4f:14:b5:de:9f:b5:c0:7f:2e:ad:d3:97:2f:4e:a5:05:25:14:
a0:4f:a8:60:74:0d:ec:08:45:5d:02:04:e0:d2:e3:0a:83:fd:
95:b2:74:df:17:65:5b:2b:f9:1a:4e:ab:df:5e:6a:bd:f7:f6:
51:19:da:77:6a:5c:92:bd:4e:ab:bf:db:b7:d5:a3:8e:96:a2:
51:44:38:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:56:27 2025 by rpki-client