Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/haF8bZtngA5x2e1ZZsr8v1rWQ0M.roa
File: haF8bZtngA5x2e1ZZsr8v1rWQ0M.roa (raw, json)
Hash identifier: ehirbaCBiTEW/EyoyAuzksYxktoDaKgq6rqmZfzqBZs=
Subject key identifier: 85:A1:7C:6D:9B:67:80:0E:71:D9:ED:59:66:CA:FC:BF:5A:D6:43:43
Certificate issuer: /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial: 0194258F385ECD005354DCDB0463EABA7EA5
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/haF8bZtngA5x2e1ZZsr8v1rWQ0M.roa
Signing time: Thu 02 Jan 2025 05:48:50 +0000
ROA not before: Thu 02 Jan 2025 05:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214438
IP address blocks: 62.169.158.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:38:5e:cd:00:53:54:dc:db:04:63:ea:ba:7e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Validity
Not Before: Jan 2 05:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85a17c6d9b67800e71d9ed5966cafcbf5ad64343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2a:96:0e:57:d5:3c:7f:81:2f:ff:36:f3:b2:
0d:48:30:40:1d:63:15:e6:bb:3b:8a:4b:12:6e:97:
5e:a0:c6:f0:50:54:29:9e:cf:2a:ff:8d:42:6f:e4:
19:92:05:f5:55:13:63:9b:fa:b2:8f:f4:6c:b9:28:
d4:e5:9e:c3:31:19:1f:2f:e7:98:da:d4:3b:26:6b:
b3:1e:7a:4c:84:f2:d1:a3:fa:2c:ff:ca:5a:5f:42:
67:e7:28:ee:b0:fc:de:d1:d3:e6:96:7a:d7:8c:05:
e5:ce:a1:0c:e1:ba:4a:86:c1:f9:76:e3:96:1c:1d:
04:20:91:56:d5:78:08:0c:17:b6:a5:d7:76:34:e0:
38:4c:fa:6b:56:55:68:d2:8e:a0:97:36:41:3b:ea:
af:35:e4:2e:61:b4:c5:f1:5b:02:8f:98:59:05:66:
50:e3:1f:ba:f0:89:58:2b:f3:41:dc:d4:a5:74:51:
14:90:31:d4:54:8f:71:96:4c:f6:3c:1a:cb:c9:33:
55:43:c2:f4:d5:cc:cc:50:8b:81:17:88:fa:0c:3a:
94:7b:c9:3b:fc:7b:2c:0e:4f:dc:73:3d:9d:b7:d1:
10:68:4c:ef:d4:11:0d:3e:59:d0:a3:0f:7c:98:a6:
00:7d:c2:29:72:e1:cc:0a:d3:3b:9f:59:d8:40:5d:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A1:7C:6D:9B:67:80:0E:71:D9:ED:59:66:CA:FC:BF:5A:D6:43:43
X509v3 Authority Key Identifier:
keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/haF8bZtngA5x2e1ZZsr8v1rWQ0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.158.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:71:5a:a3:8a:fb:17:42:19:e2:5b:5d:e5:4f:7d:ba:f4:d9:
cf:5a:2b:45:bd:42:4b:8b:17:53:dd:73:1b:71:69:e4:fb:2f:
ef:06:dc:6d:5f:ec:b5:aa:92:cb:8e:fa:d8:e1:49:bb:be:c9:
7c:d0:92:5c:54:dd:6b:49:1f:b0:44:d9:b3:b0:e9:f2:04:a2:
a5:79:9e:9a:b0:e1:27:3d:6a:24:dd:fc:60:b7:58:36:a2:03:
02:01:b5:2e:b1:1a:46:4a:b2:a8:60:2f:f7:37:eb:52:32:53:
6a:2f:67:99:32:67:74:1e:f4:98:a7:eb:6e:e9:dc:7f:31:30:
a2:14:57:84:81:72:1d:37:e3:59:4d:97:e6:13:50:3e:f3:08:
91:a2:12:79:e9:ad:ed:e9:35:86:1d:91:ae:08:60:86:f5:bc:
18:fa:3a:7b:56:6a:58:dd:4c:3b:62:9b:1a:3b:33:56:7e:e9:
a3:df:38:b1:c5:c3:e9:05:c5:a9:92:24:85:f9:38:64:9e:09:
12:c3:e6:6c:c0:be:17:77:c0:2f:a8:ff:42:21:54:ce:8f:b4:
40:af:5e:38:5e:94:34:5b:81:77:98:28:77:50:1d:6b:53:8e:
94:5a:81:c0:ed:88:ee:fd:5e:01:51:05:ac:25:c2:93:02:5d:
f2:1a:a2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:20:12 2025 by rpki-client