Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/Kbp1On6hP15cTq_8U0klJBYwmxo.roa
File: Kbp1On6hP15cTq_8U0klJBYwmxo.roa (raw, json)
Hash identifier: Vgzc7sOwFoSeF9nUZUBJ5RhJEsbIYttjVgPVuFGM+v0=
Subject key identifier: 29:BA:75:3A:7E:A1:3F:5E:5C:4E:AF:FC:53:49:25:24:16:30:9B:1A
Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial: 01934B659B367DFE475514DE05509C0505AD
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/Kbp1On6hP15cTq_8U0klJBYwmxo.roa
Signing time: Wed 20 Nov 2024 21:06:10 +0000
ROA not before: Wed 20 Nov 2024 21:06:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25530
IP address blocks: 62.113.32.0/23 maxlen: 24
62.113.33.0/24 maxlen: 24
62.113.34.0/23 maxlen: 23
62.113.38.0/24 maxlen: 24
62.113.40.0/21 maxlen: 24
62.113.45.0/24 maxlen: 24
62.113.48.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 21 Nov 2024 09:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4b:65:9b:36:7d:fe:47:55:14:de:05:50:9c:05:05:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Validity
Not Before: Nov 20 21:06:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29ba753a7ea13f5e5c4eaffc5349252416309b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:de:6e:64:2c:09:60:29:ee:b4:02:87:6f:
cc:9d:e7:78:bc:52:b0:10:f4:75:58:13:43:30:d2:
5d:70:bb:01:75:40:c3:00:64:e1:ad:94:99:c7:01:
ca:70:42:7f:d2:f8:61:f3:0c:67:b6:40:9b:90:57:
35:18:18:b8:db:3e:1e:58:ee:b1:36:97:e3:13:7b:
b7:58:2b:02:de:11:8e:80:a6:2b:65:71:39:e5:c6:
40:d1:d0:d3:a8:60:f2:4a:39:23:1c:a3:ed:e1:42:
cf:46:d5:71:34:bc:1a:2e:6f:68:10:53:0b:89:03:
86:b7:13:5e:62:34:c8:72:79:f9:76:8d:60:94:e8:
ca:74:5f:2c:59:78:20:c9:35:e5:9f:bd:9a:53:ec:
5e:61:07:59:85:dd:f0:52:22:98:9b:ea:ae:63:98:
38:68:ba:ed:e8:70:76:d0:d9:b8:85:fe:07:5f:f9:
65:0e:a8:05:8f:13:85:89:25:2f:bc:af:55:bc:01:
58:3b:91:fa:ad:49:1f:20:5c:94:a7:89:1d:20:25:
24:18:d9:f2:42:26:c8:60:31:65:19:50:b1:35:79:
af:2b:45:79:de:af:c6:13:bb:63:01:3f:8f:8c:1d:
9d:24:29:5f:07:b7:2b:3a:4f:b1:b1:4f:54:35:32:
17:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BA:75:3A:7E:A1:3F:5E:5C:4E:AF:FC:53:49:25:24:16:30:9B:1A
X509v3 Authority Key Identifier:
keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/Kbp1On6hP15cTq_8U0klJBYwmxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.32.0/22
62.113.38.0/24
62.113.40.0-62.113.55.255
Signature Algorithm: sha256WithRSAEncryption
6f:91:81:85:26:ca:04:9a:55:37:3e:2b:a6:ec:8c:57:22:3e:
f3:b9:76:ee:6e:f6:25:6d:59:bc:65:2a:ca:93:8c:c7:cd:ce:
ad:62:2d:c6:26:32:c3:bb:ac:c2:10:50:0f:87:aa:5f:7b:e0:
9f:ec:79:39:e0:00:4b:d4:c9:53:34:e6:92:0b:e4:fe:40:9a:
65:ae:9f:c4:75:4a:02:e1:43:3b:23:cf:34:1f:54:df:63:8b:
13:07:34:0b:7f:2c:98:b0:8a:a2:92:15:77:76:1d:ca:48:53:
90:cc:44:c4:c1:59:82:8b:64:64:2d:df:38:8c:54:3c:49:ef:
7d:41:fc:f9:e3:62:2a:f7:78:5e:94:37:36:0a:49:fe:8b:81:
cf:de:e9:e9:d4:8b:cb:d3:3c:29:88:a8:d3:08:b8:d4:19:ef:
28:f8:27:a2:79:6f:f4:e1:e2:fe:df:eb:3c:42:d0:bc:04:8c:
d9:3a:39:6d:a4:94:59:36:2f:74:fa:90:c5:9d:37:a0:ac:d2:
1c:dd:11:51:86:0b:22:a1:81:b8:8f:a3:17:22:14:5e:e1:6f:
3a:94:d3:5c:88:c9:d2:6c:ba:96:fb:6f:98:b9:b8:f5:fe:b5:
21:58:62:01:f2:c6:b2:db:47:a5:9a:66:90:fd:5d:cb:57:10:
66:29:75:a0
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZNLZZs2ff5HVRTeBVCcBQWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNTYzNjA2MjRjYzFiNGM0OWRhNzJiYzMyNWY1YmI2YWI0
ZDgzMDAwHhcNMjQxMTIwMjEwNjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWJhNzUzYTdlYTEzZjVlNWM0ZWFmZmM1MzQ5MjUyNDE2MzA5YjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNrebmQsCWAp7rQCh2/Mned4vFKw
EPR1WBNDMNJdcLsBdUDDAGThrZSZxwHKcEJ/0vhh8wxntkCbkFc1GBi42z4eWO6x
NpfjE3u3WCsC3hGOgKYrZXE55cZA0dDTqGDySjkjHKPt4ULPRtVxNLwaLm9oEFML
iQOGtxNeYjTIcnn5do1glOjKdF8sWXggyTXln72aU+xeYQdZhd3wUiKYm+quY5g4
aLrt6HB20Nm4hf4HX/llDqgFjxOFiSUvvK9VvAFYO5H6rUkfIFyUp4kdICUkGNny
QibIYDFlGVCxNXmvK0V53q/GE7tjAT+PjB2dJClfB7crOk+xsU9UNTIXfwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFCm6dTp+oT9eXE6v/FNJJSQWMJsaMB8GA1UdIwQY
MBaAFM5WNgYkzBtMSdpyvDJfW7arTYMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUt
YTk4ZWYzMDA4NTgwLzEvS2JwMU9uNmhQMTVjVHFfOFUwa2xKQll3bXhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUtYTk4ZWYzMDA4NTgw
LzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCPnEgAwQA
PnEmMAwDBAM+cSgDBAM+cTAwDQYJKoZIhvcNAQELBQADggEBAG+RgYUmygSaVTc+
K6bsjFciPvO5du5u9iVtWbxlKsqTjMfNzq1iLcYmMsO7rMIQUA+Hql974J/seTng
AEvUyVM05pIL5P5AmmWun8R1SgLhQzsjzzQfVN9jixMHNAt/LJiwiqKSFXd2HcpI
U5DMRMTBWYKLZGQt3ziMVDxJ731B/PnjYir3eF6UNzYKSf6Lgc/e6enUi8vTPCmI
qNMIuNQZ7yj4J6J5b/Th4v7f6zxC0LwEjNk6OW2klFk2L3T6kMWdN6Cs0hzdEVGG
CyKhgbiPoxciFF7hbzqU01yIydJsupb7b5i5uPX+tSFYYgHyxrLbR6WaZpD9XctX
EGYpdaA=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:04 2025 by rpki-client