Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/ydSrT8_C7XLxsJ1erwVccYKeMbA.roa
File: ydSrT8_C7XLxsJ1erwVccYKeMbA.roa (raw, json)
Hash identifier: Capy5RRmTH4N+mIAyuuZCugVGdAgZx50lFDjpH+8AkI=
Subject key identifier: C9:D4:AB:4F:CF:C2:ED:72:F1:B0:9D:5E:AF:05:5C:71:82:9E:31:B0
Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial: 019374435523769BD6005AA6CBC1311E42CB
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/ydSrT8_C7XLxsJ1erwVccYKeMbA.roa
Signing time: Thu 28 Nov 2024 19:33:09 +0000
ROA not before: Thu 28 Nov 2024 19:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25530
IP address blocks: 62.113.32.0/23 maxlen: 24
62.113.33.0/24 maxlen: 24
62.113.34.0/23 maxlen: 23
62.113.38.0/24 maxlen: 24
62.113.40.0/21 maxlen: 24
62.113.40.0/24 maxlen: 24
62.113.45.0/24 maxlen: 24
62.113.46.0/24 maxlen: 24
62.113.47.0/24 maxlen: 24
62.113.48.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 29 Nov 2024 09:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:74:43:55:23:76:9b:d6:00:5a:a6:cb:c1:31:1e:42:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Validity
Not Before: Nov 28 19:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9d4ab4fcfc2ed72f1b09d5eaf055c71829e31b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1b:3b:85:98:85:e0:2c:b8:e4:cb:dd:86:35:
55:ef:bf:4b:0d:83:1f:8d:4f:5b:12:c8:5f:ae:ee:
b8:65:c1:a0:7f:a8:43:72:85:38:68:3d:d5:ed:15:
7b:24:16:e9:e5:da:b0:45:56:01:ff:57:44:02:f0:
37:19:82:a6:36:d2:90:04:16:8f:8d:10:25:bf:11:
27:25:8f:5d:71:d3:05:54:c6:f8:5f:a2:75:09:a8:
98:da:17:c0:aa:7e:45:db:08:59:09:2b:5d:32:36:
94:be:0c:37:eb:3c:98:f5:e8:e0:64:59:19:f3:2f:
74:e3:35:3a:20:1e:e4:fc:ed:a2:a4:7a:85:a7:bb:
ac:f2:8f:c3:01:c9:9b:14:d3:fa:10:4d:1f:1c:83:
f2:5e:fa:3f:55:f3:70:28:6c:84:11:b2:f4:d9:75:
fe:08:9e:33:3f:29:df:f6:81:0e:d7:4d:e4:d4:35:
9f:e8:cb:85:28:66:9d:bc:af:79:c5:3a:5a:a6:6b:
ea:d4:8c:89:8f:df:66:f1:45:26:2c:c0:88:49:a6:
76:8d:63:2d:cf:12:b3:cd:95:cb:51:79:e2:9d:2d:
96:c9:17:13:5e:73:47:3e:63:34:ce:ce:3c:c9:94:
36:25:13:29:f8:83:50:39:af:97:55:00:80:b6:dd:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D4:AB:4F:CF:C2:ED:72:F1:B0:9D:5E:AF:05:5C:71:82:9E:31:B0
X509v3 Authority Key Identifier:
keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/ydSrT8_C7XLxsJ1erwVccYKeMbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.32.0/22
62.113.38.0/24
62.113.40.0-62.113.55.255
Signature Algorithm: sha256WithRSAEncryption
b2:44:8b:73:a2:1a:8c:c7:5a:80:8b:e3:3f:27:f5:5d:92:cc:
4c:b0:77:12:3e:65:bd:0d:bf:01:1a:5e:79:38:bc:ce:25:51:
81:6f:e5:b7:18:99:2c:1f:31:2f:03:ca:be:f1:b3:ae:f9:77:
ca:d7:75:1b:86:8c:8d:91:f4:93:ae:2b:d4:be:c9:13:bf:a7:
d7:ae:65:bc:ac:8a:1c:8b:4d:3b:73:3c:e0:69:69:ab:6b:ea:
8c:ab:c0:87:f2:5a:a8:92:3f:a1:c2:49:14:d3:41:c1:64:1e:
fb:6c:90:03:a1:e9:9a:17:fc:4a:20:b3:ef:ce:25:3d:b2:3c:
a8:53:a5:11:f2:6c:72:75:5d:fb:a4:df:f5:fe:27:3e:d6:d7:
e9:69:7a:79:00:a5:45:a8:35:14:04:a8:26:db:6e:f6:bc:f6:
14:ed:1d:df:45:ed:8f:0c:70:16:0b:f0:e0:7a:e7:05:13:dd:
e3:fb:f8:61:78:ab:22:b0:62:64:a6:ad:84:ca:66:98:0d:5d:
b6:27:75:be:02:2f:91:3a:35:4b:47:96:e8:93:ba:d4:fd:ef:
28:51:4b:79:7a:a6:f1:46:22:28:e2:49:34:dd:07:c2:60:e4:
f3:ab:43:b5:be:b8:e4:e4:ee:50:66:9a:eb:2d:7c:29:be:41:
0a:40:4e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:55:09 2025 by rpki-client