Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/5P9mokzhVvkyQEeAiC1SOmBA3QE.roa
File: 5P9mokzhVvkyQEeAiC1SOmBA3QE.roa (raw, json)
Hash identifier: 9JqFNCGI8323Jek9dzbjfnbo7wzITFs9EA0ZQ1LARUY=
Subject key identifier: E4:FF:66:A2:4C:E1:56:F9:32:40:47:80:88:2D:52:3A:60:40:DD:01
Certificate issuer: /CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Certificate serial: 018CC7273B546426EF55D13693B0EB6283A2
Authority key identifier: BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/5P9mokzhVvkyQEeAiC1SOmBA3QE.roa
Signing time: Mon 01 Jan 2024 22:31:26 +0000
ROA not before: Mon 01 Jan 2024 22:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201847
IP address blocks: 185.62.48.0/22 maxlen: 22
185.62.48.0/24 maxlen: 24
185.62.51.0/24 maxlen: 24
185.62.50.0/24 maxlen: 24
185.62.49.0/24 maxlen: 24
2a04:efc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 29 May 2024 11:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:3b:54:64:26:ef:55:d1:36:93:b0:eb:62:83:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Validity
Not Before: Jan 1 22:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4ff66a24ce156f932404780882d523a6040dd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:09:9b:05:88:18:9a:fa:77:7c:e3:15:78:ad:
82:ea:72:a0:7c:8c:d9:42:f9:a0:18:86:42:21:79:
ac:b7:f9:b5:7d:4d:1a:7d:11:d2:3e:b4:2c:9c:62:
18:cd:9a:4a:8c:a3:68:21:86:9e:b5:6b:b8:89:cd:
21:b8:d0:7a:19:de:29:c6:d0:4f:ef:65:ef:e0:95:
07:4e:fb:4e:50:63:2c:fe:24:b6:ca:a6:93:1c:62:
06:b6:54:51:62:2e:1a:4a:f3:b3:3f:f9:3a:d0:74:
4e:ab:bb:b6:5d:70:93:22:b8:cf:a5:c5:46:c3:7e:
df:8e:5e:92:eb:30:a1:a5:80:93:c9:d1:85:71:93:
28:2d:5d:0c:eb:6a:4c:3f:77:8d:d5:ea:9c:bd:96:
5c:53:7b:7e:6a:a3:0a:92:9d:7b:d0:7e:2f:d7:93:
68:12:7e:24:80:8e:96:9b:8a:65:da:84:f5:55:13:
a2:4e:a4:3d:73:c1:21:00:b4:f2:dc:82:ed:00:e4:
67:d4:1e:78:69:7d:af:e4:69:da:71:a5:c1:f5:fe:
71:25:fa:c9:59:55:55:69:ca:69:a9:cf:ef:19:50:
90:9f:7b:04:c4:84:22:28:d8:00:4f:57:bd:63:8b:
1c:1a:d1:fb:7e:59:4b:2c:25:57:d7:b7:0c:81:21:
31:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FF:66:A2:4C:E1:56:F9:32:40:47:80:88:2D:52:3A:60:40:DD:01
X509v3 Authority Key Identifier:
keyid:BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/5P9mokzhVvkyQEeAiC1SOmBA3QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.48.0/22
IPv6:
2a04:efc0::/29
Signature Algorithm: sha256WithRSAEncryption
4b:a0:ea:da:db:54:fc:1f:e0:50:27:c3:c9:6c:b8:f7:e7:0b:
51:2e:95:ef:da:62:ec:d4:62:e4:99:2b:0a:8f:b6:b9:0f:fa:
cc:9f:ec:fe:a4:9c:da:d1:2c:ed:b0:10:9d:06:bc:5b:39:8c:
0c:2c:83:1a:c0:72:b6:33:6d:b8:d2:ba:65:10:ad:4e:7d:7e:
0a:76:92:a7:06:b8:29:0f:8b:90:4a:bf:dd:73:d1:f1:fc:d2:
17:e6:00:4f:41:32:b1:33:1e:9f:17:8e:56:e5:2f:ce:71:2f:
8d:6a:d3:70:6e:7a:e0:06:64:eb:62:76:9d:2b:ed:b8:85:45:
70:ae:29:ab:c5:63:db:8e:74:f1:33:c4:aa:72:77:43:20:72:
15:bb:41:88:40:2d:bd:c9:ca:70:73:1d:07:fd:78:c7:dd:15:
33:0c:7a:1e:24:14:d0:e5:f6:1a:d2:66:84:1d:59:f2:e9:b7:
37:11:f3:45:3c:15:10:5a:39:4c:df:cb:61:94:54:a0:a5:8d:
ba:88:33:f9:a5:f5:0c:20:70:c9:49:1b:a3:cd:62:45:37:a0:
b3:f7:d9:4d:2f:fc:59:a3:89:df:ca:19:e2:41:e5:87:f3:d5:
84:bb:d0:67:08:45:87:47:9a:5d:99:15:99:c6:57:b4:02:ac:
4b:f5:bd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:26 2025 by rpki-client