Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62976.roa
File: AS62976.roa (raw, json)
Hash identifier: F/1jXmGc63ZiUkbyTsvhzoUjXfAwYXuu6GjENFGX2ZI=
Subject key identifier: C5:86:5E:FD:EC:5E:A5:34:BE:C6:5C:63:EA:B4:98:9F:46:54:DC:AE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6A4D19BC9942E1DF7AEC8076FA370AEC57D3D8B9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62976.roa
Signing time: Thu 10 Apr 2025 05:57:39 +0000
ROA not before: Thu 10 Apr 2025 05:52:39 +0000
ROA not after: Thu 09 Apr 2026 05:57:39 +0000
asID: 62976
IP address blocks: 145.223.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 15:59:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:4d:19:bc:99:42:e1:df:7a:ec:80:76:fa:37:0a:ec:57:d3:d8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 10 05:52:39 2025 GMT
Not After : Apr 9 05:57:39 2026 GMT
Subject: CN=C5865EFDEC5EA534BEC65C63EAB4989F4654DCAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:03:47:79:92:53:11:20:d2:5f:07:ff:89:3d:
5d:f3:13:3f:69:3e:12:38:3b:66:75:13:3a:c7:2c:
90:f8:63:66:ba:38:f3:b6:be:8d:78:6e:4d:81:4a:
92:1a:2d:38:0b:2a:05:0e:8d:aa:28:bf:d7:58:62:
f6:65:79:68:1c:b7:fc:93:60:b1:ab:05:ff:09:c8:
56:72:c2:ef:a1:2e:a4:87:a1:f8:ec:6e:9e:53:a0:
aa:e8:5c:0f:a3:7f:e7:c6:11:05:f6:64:c5:23:7c:
9b:18:a5:63:12:22:79:78:84:67:64:2a:fd:7f:f4:
52:1c:4a:d8:2e:68:4b:14:48:85:30:12:aa:e9:21:
4a:a3:6c:f0:02:e8:89:b6:01:33:4a:2b:93:0c:d0:
6e:e8:4c:a7:02:c9:03:56:e8:ec:54:da:4e:c1:6c:
ba:bb:a5:9f:34:c7:8d:b0:58:b6:52:de:79:07:8c:
e8:97:4b:a3:25:6b:57:a1:9c:68:6d:b0:ac:42:3e:
bc:bc:9b:31:f6:74:2a:f6:26:c5:10:10:0e:d6:f9:
6a:0a:cc:67:9b:45:d1:bb:41:cc:f9:ee:45:e3:a4:
1e:45:35:0f:0e:09:76:7a:11:61:d9:be:ac:bc:d4:
36:90:c1:ea:fa:ad:66:f0:f4:4d:79:26:3c:54:18:
42:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:86:5E:FD:EC:5E:A5:34:BE:C6:5C:63:EA:B4:98:9F:46:54:DC:AE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62976.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.66.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:20:c3:d3:25:82:cf:1e:57:ca:1f:d6:86:05:4e:32:31:f8:
57:50:bd:69:9e:1e:fb:a6:2d:b9:84:0e:57:76:c5:33:be:b2:
97:4b:a2:d0:81:b1:f5:18:37:7c:60:e6:af:07:51:24:b5:01:
83:af:16:95:69:9a:10:02:a8:b9:b5:24:29:f2:72:f6:8b:a5:
3e:30:47:71:da:ef:d9:c0:26:02:e3:68:ec:49:63:e2:93:bc:
b9:0c:9f:26:bf:78:6b:a1:25:79:f3:b5:c2:ae:8b:c9:0c:3f:
15:9c:fb:39:bb:18:4a:8d:e6:c4:b2:ee:bd:20:07:5b:da:5b:
c9:07:ed:d3:7d:bc:f2:67:b5:65:12:9e:3a:20:f3:32:93:33:
98:09:79:39:05:2b:b0:c2:4e:22:94:bb:bc:99:09:e6:df:e7:
81:79:08:16:b6:4d:1e:44:7a:d9:8f:52:a2:5b:8a:af:18:f6:
66:0a:bd:79:46:42:86:20:32:c2:68:43:fe:e8:8d:1a:01:07:
bb:2f:d1:1d:23:02:93:18:42:a4:f4:60:4d:45:00:0a:7a:de:
7c:0b:a6:98:bd:42:60:74:cf:37:1f:c6:ed:1b:eb:4e:4f:bf:
cc:56:20:63:f3:42:48:0b:30:c2:f3:fa:35:71:18:83:e8:28:
e1:b0:ef:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:39:53 2025 by rpki-client