Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62403.roa
File: AS62403.roa (raw, json)
Hash identifier: 8b09KQ1u/4P82pBCLtQq+vrU+epsNpkMnMI1Ei+GXZM=
Subject key identifier: 9D:93:12:42:D2:05:DA:3A:24:8A:A5:EB:58:51:D7:4F:B5:DB:7B:CD
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2343ADC5CE21ECA353BD8F04682D995EC923739E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62403.roa
Signing time: Fri 14 Feb 2025 13:56:03 +0000
ROA not before: Fri 14 Feb 2025 13:51:03 +0000
ROA not after: Fri 13 Feb 2026 13:56:03 +0000
asID: 62403
IP address blocks: 95.135.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Feb 2025 21:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:43:ad:c5:ce:21:ec:a3:53:bd:8f:04:68:2d:99:5e:c9:23:73:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 14 13:51:03 2025 GMT
Not After : Feb 13 13:56:03 2026 GMT
Subject: CN=9D931242D205DA3A248AA5EB5851D74FB5DB7BCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:89:ef:54:c3:d2:26:0e:9a:d1:42:49:df:bf:
64:e6:01:bb:6c:fb:a6:e8:45:69:ef:a7:53:16:5f:
1b:3e:04:eb:a8:d4:f6:bb:78:73:18:1e:c1:b1:ac:
0b:56:24:55:34:7d:9f:fb:90:74:2e:2e:5b:5a:6a:
81:a9:50:6f:0a:4a:27:42:41:3b:31:cc:12:d2:cc:
0d:4d:d4:a6:31:dc:76:c4:8e:e5:d6:b8:62:15:91:
b7:f9:92:7f:ff:21:2e:e2:a9:20:89:55:7a:20:a3:
94:b3:0b:03:5c:2f:7f:08:98:1a:b3:05:58:1e:31:
2b:97:72:85:59:87:09:ab:0f:fe:a3:23:37:e0:32:
34:43:15:4a:29:9e:0e:09:d0:01:6e:7f:13:49:cb:
56:ab:89:82:24:9c:80:b3:52:92:9e:12:1a:d4:e3:
63:2e:fd:37:07:d0:8b:15:d6:11:19:40:ba:76:cc:
d1:d1:3b:c4:2a:9f:20:24:1e:57:65:7f:a0:61:05:
cb:c3:c6:0f:b6:bd:f6:26:61:8e:4f:21:62:52:4f:
0c:6c:46:2a:9e:e5:5b:68:16:9b:5f:0c:d6:ff:13:
d1:92:03:73:93:c5:28:81:14:bd:ad:b0:60:41:d4:
74:7e:d6:fe:68:29:f8:90:ec:e6:ad:fb:a3:97:0a:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:93:12:42:D2:05:DA:3A:24:8A:A5:EB:58:51:D7:4F:B5:DB:7B:CD
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62403.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.60.0/24
Signature Algorithm: sha256WithRSAEncryption
47:00:bb:a2:8d:29:43:96:80:13:01:10:d1:34:fd:14:ed:16:
af:c5:0d:9a:7c:f4:f7:3f:e2:0e:6b:e0:84:4f:a9:de:36:d3:
7f:74:4e:6a:49:50:fe:3f:f9:bb:87:f9:3e:5f:19:5b:20:c6:
81:e7:ef:a7:79:ba:63:6a:16:26:3d:90:e0:bd:66:b7:41:10:
b1:2f:85:20:f9:22:e5:a2:40:cc:57:f7:9e:9a:27:0a:2e:15:
ee:1f:fe:ed:d6:29:be:fe:dc:89:8a:79:a8:75:d0:f0:d7:59:
4d:d7:2b:32:6b:8e:85:ea:79:8d:4b:ba:4b:76:c3:3b:91:98:
56:c8:d6:a4:a3:24:17:9d:9e:e4:00:b2:49:6c:a9:d2:02:30:
dc:62:dc:a6:ba:e3:ee:0a:5a:bd:11:1e:dd:b4:4c:5c:4f:db:
53:89:8a:c9:db:d6:6e:8c:08:0f:c7:a8:8c:0c:86:e0:2d:f8:
b6:e9:7a:00:d8:ff:e2:35:0b:64:68:b1:4a:d4:0a:3c:b3:e4:
ec:ef:67:98:fc:60:64:8b:88:70:bc:97:84:b0:42:73:c4:bb:
a9:ea:a3:d3:ca:bf:0b:9b:9c:8f:c8:8c:f1:c4:57:5c:32:56:
99:1e:e9:84:fa:52:3a:df:50:bd:2a:65:d2:db:b8:a0:4d:34:
4c:e0:65:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:34:05 2025 by rpki-client