Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/V8exFfKaPBaCFl8YViFG_SGqUNo.roa
File: V8exFfKaPBaCFl8YViFG_SGqUNo.roa (raw, json)
Hash identifier: OhPRpICQ5FGlBr+2nZOVEtWrsh0U262Ia2+sjiZLW3A=
Subject key identifier: 57:C7:B1:15:F2:9A:3C:16:82:16:5F:18:56:21:46:FD:21:AA:50:DA
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 0193F7594D23E7C205770A795CE24657AFCD
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/V8exFfKaPBaCFl8YViFG_SGqUNo.roa
Signing time: Tue 24 Dec 2024 06:27:25 +0000
ROA not before: Tue 24 Dec 2024 06:27:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9155
IP address blocks: 62.150.155.0/24 maxlen: 24
62.150.181.0/24 maxlen: 24
195.39.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f7:59:4d:23:e7:c2:05:77:0a:79:5c:e2:46:57:af:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Dec 24 06:27:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57c7b115f29a3c1682165f18562146fd21aa50da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:15:d6:65:21:d1:86:39:76:e7:4e:d3:43:
8f:52:55:f7:9f:a2:66:57:55:f5:e6:57:86:40:74:
05:5d:89:64:81:d8:a9:1e:0e:6c:c4:ba:12:c9:35:
b3:9b:af:c9:88:d1:78:74:0e:14:1b:1f:c3:5f:c0:
de:25:24:27:07:e9:d4:18:e1:6a:bc:0c:4d:ba:d9:
b7:24:2f:6f:62:da:09:e5:dc:27:0c:de:1c:29:3d:
0a:d2:e8:b9:f6:5c:a0:1b:18:df:51:a4:3f:92:eb:
04:28:5b:35:83:a4:d7:9b:94:9d:fb:b8:d5:18:60:
ae:97:97:ce:4e:24:72:d9:3a:04:fc:74:79:36:2f:
11:ab:19:bc:ed:33:c2:32:a8:9a:7a:b9:59:ae:1b:
ca:0f:fa:0b:e5:be:e5:28:44:ec:25:d6:bd:bb:76:
fa:4d:b4:5c:7e:68:58:5c:0c:98:14:5b:f0:e0:f9:
40:53:15:03:4b:46:3a:e9:69:88:72:38:1d:b2:2f:
60:0c:f6:a4:06:45:f9:7e:b6:53:c5:09:4b:a9:21:
fe:f7:cd:f0:9e:ba:6d:14:db:a7:0d:09:9a:25:72:
cb:19:40:e7:d0:76:dd:44:0d:a4:3d:da:ea:fe:dc:
34:25:c9:4c:41:f9:ca:2e:d1:7d:c2:d7:ab:12:ab:
f7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C7:B1:15:F2:9A:3C:16:82:16:5F:18:56:21:46:FD:21:AA:50:DA
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/V8exFfKaPBaCFl8YViFG_SGqUNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.150.155.0/24
62.150.181.0/24
195.39.181.0/24
Signature Algorithm: sha256WithRSAEncryption
06:5a:a0:24:3e:22:e4:72:39:6f:63:c5:d0:c3:d7:1f:63:c6:
00:b5:3e:01:c2:9d:2f:71:96:a4:7d:a0:7f:38:f1:88:30:72:
e6:d8:78:7a:07:e6:20:bc:79:a4:bc:ad:fb:ac:80:4b:41:3b:
f7:8c:ca:44:8b:60:68:5d:71:f5:87:23:95:6e:42:a3:36:c0:
c3:12:9d:26:3a:d6:e9:85:40:72:e5:8d:d3:c6:9b:a9:cd:b9:
82:66:f5:8d:59:35:b3:99:96:a1:48:0d:d3:7c:c5:ce:cb:64:
66:1e:58:c6:31:51:18:75:ae:f3:1a:23:d3:21:e1:e0:84:11:
c3:2e:6b:85:89:39:1d:8f:70:89:b3:4b:2e:d7:b7:b9:bc:8e:
ed:8d:12:37:d7:13:4c:b9:0d:37:11:8a:8f:8b:58:65:73:9c:
37:b0:65:eb:09:b1:d6:64:31:da:10:7e:42:a2:f8:0d:c0:90:
5f:49:e6:72:7a:1e:95:23:b1:03:cc:10:6c:6d:76:1b:22:04:
cb:9e:9e:14:ad:a6:a0:bc:35:a1:0f:fc:64:58:6d:fa:a1:a2:
c3:6a:b7:e6:a1:91:59:95:8e:fe:c9:a3:a9:3e:ba:10:89:b6:
b5:a7:bf:0d:da:fc:23:5b:5f:0d:5a:d0:f5:99:b6:4c:76:33:
e8:a9:d6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:31:02 2025 by rpki-client