Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/VqMeuNUeDxdLdU0uQSnMUvjH2tw.roa
File: VqMeuNUeDxdLdU0uQSnMUvjH2tw.roa (raw, json)
Hash identifier: dGRqaT6zAsIGr9YUrK3pvkfQCGMIQg8gMygO6bTI6Gk=
Subject key identifier: 56:A3:1E:B8:D5:1E:0F:17:4B:75:4D:2E:41:29:CC:52:F8:C7:DA:DC
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01939037186CCC6AA682F2518AB51AE6D628
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/VqMeuNUeDxdLdU0uQSnMUvjH2tw.roa
Signing time: Wed 04 Dec 2024 05:49:10 +0000
ROA not before: Wed 04 Dec 2024 05:49:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15611
IP address blocks: 62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.230.0/23 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
213.176.96.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
2001:790::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 04 Dec 2024 06:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:90:37:18:6c:cc:6a:a6:82:f2:51:8a:b5:1a:e6:d6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Dec 4 05:49:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56a31eb8d51e0f174b754d2e4129cc52f8c7dadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:29:90:ff:0e:a3:b2:35:e4:ba:a1:69:18:
aa:ad:8b:7a:34:5b:d1:90:d4:ed:8b:3f:4d:bb:ae:
07:e8:1d:2c:d1:b4:a0:55:26:9e:c2:29:9b:ac:7a:
f0:5f:f7:62:39:68:dc:d8:e2:4d:f2:4e:36:37:50:
c8:62:9c:bd:c2:a3:91:98:8c:b2:ad:b9:dc:29:ae:
88:2f:b6:02:e4:95:00:33:3a:62:15:ac:f4:88:2f:
61:0c:e6:42:9d:6c:88:db:fc:56:94:61:1e:c1:cf:
bf:d6:e1:07:f8:67:17:db:ce:55:7b:f6:4b:cc:5c:
23:98:79:16:59:52:d3:47:ff:f4:5a:81:f4:ce:09:
40:87:7c:95:f1:c7:3e:38:97:99:12:1d:f0:04:3d:
54:0b:ee:f0:68:72:69:be:8b:d3:c3:9f:98:22:be:
11:42:c1:ad:56:74:b9:95:78:84:71:5e:ed:55:c8:
e4:aa:6e:75:8e:ed:e1:94:17:69:23:da:08:67:7d:
0e:81:f9:69:0a:11:9a:64:cd:48:e9:09:6c:36:35:
25:06:0d:6a:49:8c:66:2d:70:30:01:4e:46:9e:7c:
3f:6e:80:33:05:6d:08:53:72:43:39:a7:4a:91:89:
5e:c2:9b:48:c0:b4:1c:45:dd:b9:ce:84:cd:a3:3b:
30:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A3:1E:B8:D5:1E:0F:17:4B:75:4D:2E:41:29:CC:52:F8:C7:DA:DC
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/VqMeuNUeDxdLdU0uQSnMUvjH2tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.140.255
62.60.142.0/24
62.60.145.0/24
62.60.168.0/21
62.60.230.0/23
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
IPv6:
2001:790::/32
Signature Algorithm: sha256WithRSAEncryption
2f:c3:c9:97:2f:c6:c1:2b:15:bb:3b:0c:3a:85:a1:35:f4:56:
83:25:8d:08:20:77:ec:36:5f:89:a1:c9:ed:63:c6:3f:bc:16:
9c:04:9f:98:6c:bb:e2:00:4c:10:33:d4:a2:4c:f0:f6:70:e7:
ef:79:78:07:4e:29:3b:66:a6:98:04:7d:b4:12:96:72:d0:aa:
aa:5e:f0:19:5c:d0:8f:20:95:1f:e7:60:af:99:d0:d8:0a:0d:
26:89:94:08:ee:93:43:b1:8d:e6:27:ac:b3:6d:23:ac:2a:15:
3b:bb:be:97:29:06:8c:ca:36:b8:1c:02:16:c3:ff:ad:40:34:
44:75:ee:81:da:c3:6b:d6:b0:0e:39:ba:e8:d4:e4:c6:9c:dc:
02:22:2b:8e:e0:03:02:25:d7:00:53:cb:73:4d:9b:f1:db:1e:
f1:8e:d3:de:20:7c:0b:8e:fa:6e:48:4a:5f:a4:ab:3a:03:2c:
e4:30:e3:4d:c6:6c:e6:53:4e:f5:10:3a:e4:03:1d:a4:12:4e:
8b:8d:b8:45:0f:23:89:0d:1d:59:b2:c6:d0:9a:81:ef:7a:5b:
61:84:5a:84:b6:a7:ac:b4:c1:c0:04:d6:9e:d4:82:cd:fe:f5:
80:84:10:5f:9e:7d:dd:a6:d4:d4:95:7b:ee:d9:68:9f:18:3c:
5c:a0:08:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:53:58 2025 by rpki-client