Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62005.roa
File: AS62005.roa (raw, json)
Hash identifier: yPWIpy5SxAtbUIrxfRZVlTMPoC447B2paGUJcvoPorE=
Subject key identifier: 93:F7:4D:F9:F9:AE:31:DD:F4:70:EC:17:13:7A:6D:47:D9:C3:A1:80
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1DE50170AAF35D9DD3E325C4D63F5F2CD9C174A3
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62005.roa
Signing time: Tue 20 May 2025 12:11:13 +0000
ROA not before: Tue 20 May 2025 12:06:13 +0000
ROA not after: Tue 19 May 2026 12:11:13 +0000
asID: 62005
IP address blocks: 91.124.140.0/24 maxlen: 24
91.124.243.0/24 maxlen: 24
91.124.252.0/24 maxlen: 24
92.113.2.0/24 maxlen: 24
92.113.5.0/24 maxlen: 24
92.113.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 10:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e5:01:70:aa:f3:5d:9d:d3:e3:25:c4:d6:3f:5f:2c:d9:c1:74:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 20 12:06:13 2025 GMT
Not After : May 19 12:11:13 2026 GMT
Subject: CN=93F74DF9F9AE31DDF470EC17137A6D47D9C3A180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:08:3e:66:c7:59:6a:7a:b9:65:f1:b3:3f:6f:
aa:26:04:e5:29:b0:6f:39:ca:72:c0:01:84:db:65:
34:35:d1:39:fa:37:7d:5c:8a:05:df:b2:50:f5:22:
88:45:96:83:e0:58:bc:38:b7:60:02:04:f2:ed:83:
9c:61:93:b5:25:e5:ef:30:1b:4d:07:a6:47:b8:a8:
39:7e:6c:f9:39:b3:0e:8e:29:ca:ea:0e:18:bd:58:
26:4e:79:bb:f9:45:01:8a:c7:5b:03:31:fd:33:2c:
0d:cc:b6:c7:3d:37:28:d8:a2:99:86:f7:6b:19:aa:
b1:47:6b:53:c1:ab:0a:39:3b:c5:05:f3:34:94:34:
58:10:50:93:7c:7f:fa:40:36:b5:a4:0d:1f:b3:89:
ed:f4:a1:fe:b1:c5:36:39:59:7b:4e:64:a9:56:c4:
18:af:c7:64:23:a4:b5:42:d3:e7:5a:5a:45:1c:56:
34:11:0f:05:fd:22:73:ea:93:21:be:8c:4b:35:0a:
7b:2a:8a:51:13:77:b2:0d:15:7e:ab:77:7a:fc:a8:
0d:2a:be:d3:b5:d0:67:ad:a6:b5:91:a4:e9:f6:1e:
33:7a:28:1b:98:7a:2b:55:11:66:57:80:4a:03:e3:
94:34:e5:8a:a0:3f:23:ba:8a:01:fe:65:96:96:b9:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F7:4D:F9:F9:AE:31:DD:F4:70:EC:17:13:7A:6D:47:D9:C3:A1:80
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62005.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.140.0/24
91.124.243.0/24
91.124.252.0/24
92.113.2.0/24
92.113.5.0/24
92.113.8.0/24
Signature Algorithm: sha256WithRSAEncryption
37:d2:58:a7:cd:32:3c:c4:80:fb:77:4d:50:d0:59:24:fc:96:
ca:fd:91:3c:fc:ef:d2:ce:5c:0d:c0:4f:e6:54:02:b1:0a:ec:
29:07:1e:51:4a:fc:95:ff:f1:ae:fa:37:d5:66:d3:75:11:d6:
94:94:d0:f1:d4:ba:52:62:d9:19:fd:05:c2:df:79:b6:22:82:
f2:4c:00:08:1f:24:38:b2:84:9c:62:d1:86:00:33:d7:44:d9:
9a:97:8c:44:83:bf:73:6e:da:68:15:10:63:79:de:77:71:89:
ca:6d:01:1b:2f:2e:91:78:e9:e8:e7:a1:dc:66:7a:02:87:10:
ca:10:d5:0d:a2:7e:2d:c9:a8:bd:b3:78:dc:c1:94:1f:08:4e:
79:79:0c:a4:8d:ed:bb:a4:95:a6:c4:8a:27:88:c0:47:75:0d:
6b:62:2b:78:d9:b2:65:59:f4:9c:6d:5d:cd:42:9f:00:04:d0:
a9:b5:f3:c4:07:f0:9d:81:b7:e6:c0:2b:b4:0e:86:99:87:3a:
b6:fc:f0:5a:6a:6e:25:39:3e:ba:93:fe:67:7e:bb:20:a1:f0:
5b:60:fe:9a:e8:e7:88:63:3b:68:f6:7d:49:32:6a:b0:49:3a:
e5:ba:8b:a2:22:f4:d4:e5:ca:ab:f2:1c:14:dc:cd:37:ef:e5:
f9:85:56:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:04:44 2025 by rpki-client