Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/2GO4tye4HtvrMeUx__P9rhOTryg.roa
File: 2GO4tye4HtvrMeUx__P9rhOTryg.roa (raw, json)
Hash identifier: /Ktb+nisS02Qc/0n4Eb+s8/QbBLER7XI6Vvt7yL6DhM=
Subject key identifier: D8:63:B8:B7:27:B8:1E:DB:EB:31:E5:31:FF:F3:FD:AE:13:93:AF:28
Certificate issuer: /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Certificate serial: 018F1610870140BF4D75FB1FE727CB81AEAA
Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/2GO4tye4HtvrMeUx__P9rhOTryg.roa
Signing time: Thu 25 Apr 2024 16:22:12 +0000
ROA not before: Thu 25 Apr 2024 16:22:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28995
IP address blocks: 62.140.160.0/20 maxlen: 20
2a02:2670::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 25 Apr 2024 19:52:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:16:10:87:01:40:bf:4d:75:fb:1f:e7:27:cb:81:ae:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Validity
Not Before: Apr 25 16:22:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d863b8b727b81edbeb31e531fff3fdae1393af28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f3:86:48:3b:eb:30:22:05:d2:1e:64:ad:b5:
bc:22:9c:47:67:bf:04:37:7c:cf:c5:c5:4f:cd:08:
a3:ca:97:26:60:c9:e8:ad:2f:dc:c6:bb:01:fb:f3:
14:2b:ab:a9:26:43:b3:5d:be:0d:54:c1:9d:76:2c:
a8:37:be:d4:95:0a:33:58:49:e9:ed:f4:37:02:18:
d2:b9:89:73:f2:e3:8e:8c:58:b7:e0:14:ed:5e:8f:
d9:35:5b:bb:8c:34:28:7c:f1:41:ae:ca:e1:a1:43:
6a:f6:09:ee:9c:e7:52:de:c4:19:c3:2a:84:a0:4c:
6b:eb:2d:82:6e:bc:5a:03:7f:99:f9:50:6e:04:e0:
22:c9:e9:53:b5:60:e1:f5:a2:33:64:db:b9:e6:01:
3a:b5:38:0a:b5:70:1d:78:45:fd:44:74:cd:fe:ed:
7b:63:a2:9a:04:7d:03:4b:be:e0:fc:aa:78:f7:fb:
38:a8:6b:84:f8:00:c7:aa:87:8d:70:3f:eb:05:e7:
2b:2b:99:d5:1f:26:c1:a4:9a:9a:68:d8:62:51:e6:
97:c2:0e:a2:e2:09:c3:19:24:59:08:06:57:b1:1f:
d8:d4:1c:20:87:71:bc:13:cc:f6:54:ea:55:eb:f0:
12:d6:51:68:74:b8:a5:3f:89:ea:f8:ad:93:ed:fa:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:63:B8:B7:27:B8:1E:DB:EB:31:E5:31:FF:F3:FD:AE:13:93:AF:28
X509v3 Authority Key Identifier:
keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/2GO4tye4HtvrMeUx__P9rhOTryg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.140.160.0/20
IPv6:
2a02:2670::/32
Signature Algorithm: sha256WithRSAEncryption
22:97:d0:02:30:32:19:f9:07:da:7c:8b:e6:22:e9:3d:5e:4c:
72:37:ec:c8:21:75:91:30:fd:d5:0f:cb:8b:55:1c:fc:15:93:
f3:37:0e:dd:3c:ee:17:80:33:96:1e:7d:e7:e6:b2:40:99:42:
05:ca:4f:73:48:a5:22:b5:83:bb:40:ee:ab:fa:45:3a:d0:c9:
07:7f:fc:56:00:15:e3:42:42:88:cd:08:05:e8:69:b0:44:80:
a0:c9:0d:da:f2:d8:55:c9:8b:ca:7d:f9:24:48:68:bc:bf:54:
bc:64:a4:09:08:61:8f:13:e4:70:ff:64:9b:51:cb:9c:38:f4:
74:54:10:a8:48:ee:81:01:92:1a:96:d7:27:40:a5:86:df:80:
f1:8d:39:a4:cc:02:75:5f:e5:0f:db:b4:9b:96:92:af:ee:96:
34:ce:75:85:0a:ea:ce:e3:c8:97:8a:ca:dd:97:af:91:a2:7e:
37:39:10:22:cd:eb:26:97:66:20:b3:61:82:26:3a:d0:dc:0d:
73:f1:03:42:d5:3d:db:77:f6:2c:5c:da:45:72:32:c6:9a:cc:
81:9e:e9:bd:90:63:32:c3:1b:29:ef:25:67:97:c1:8b:27:9b:
79:3b:a8:3d:d2:00:93:f1:13:81:22:55:6c:7c:43:b6:0d:42:
c9:1b:51:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:47:08 2025 by rpki-client