Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/mMw64vC3wTidIE2Ibk32mI0tgaw.roa
File: mMw64vC3wTidIE2Ibk32mI0tgaw.roa (raw, json)
Hash identifier: iQ8Q8BpanUXc9JkD09iAWCYwy3FCY5kzCrA/3se97i8=
Subject key identifier: 98:CC:3A:E2:F0:B7:C1:38:9D:20:4D:88:6E:4D:F6:98:8D:2D:81:AC
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01986AC6C86F2ED37640331779A9369D7221
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/mMw64vC3wTidIE2Ibk32mI0tgaw.roa
Signing time: Sat 02 Aug 2025 12:34:29 +0000
ROA not before: Sat 02 Aug 2025 12:34:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211522
IP address blocks: 62.60.152.0/23 maxlen: 24
62.60.172.0/22 maxlen: 24
62.60.216.0/23 maxlen: 24
62.60.244.0/22 maxlen: 24
62.60.248.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Aug 2025 02:11:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6a:c6:c8:6f:2e:d3:76:40:33:17:79:a9:36:9d:72:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 2 12:34:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98cc3ae2f0b7c1389d204d886e4df6988d2d81ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:9e:c3:33:5d:d3:42:47:06:3b:64:20:9f:
6f:0e:02:6f:f2:78:ed:e8:ce:3b:6a:4e:bc:64:84:
6d:85:a7:54:33:fa:c6:fb:83:5e:6e:23:9d:3d:8a:
3e:82:37:34:48:fd:28:0e:dd:12:d1:0c:07:d6:91:
b2:94:81:d0:f4:3a:33:be:24:27:ae:ea:04:87:71:
ad:3a:76:a0:64:3a:8c:4c:33:28:31:e4:43:fd:e9:
29:1c:a9:74:34:c6:b3:cd:0f:ed:6c:99:93:d8:fc:
d6:d0:91:ef:fa:c8:56:9a:52:da:bb:11:df:c1:b3:
73:10:87:80:85:83:5e:89:d9:00:3b:0e:08:10:47:
5c:96:82:e5:bb:94:6b:a7:ee:31:58:f8:87:4d:85:
11:9a:20:d0:46:02:18:5a:f5:3b:1e:7a:7f:d4:7c:
d6:2e:f0:3f:ec:25:c5:f6:c3:3e:b7:a8:44:09:8a:
eb:f2:64:a8:bd:b8:15:d6:8d:4d:8b:9d:9f:82:71:
11:c2:bb:95:58:70:19:a0:4d:45:1c:fb:43:1d:11:
8c:1b:2e:91:56:00:74:a3:5b:be:46:87:64:92:b2:
5a:6a:7f:87:f7:b1:d6:c4:bb:8b:79:0e:e2:34:5f:
2b:ca:9b:23:33:4c:1b:95:13:d0:c7:23:e0:d7:fa:
0d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CC:3A:E2:F0:B7:C1:38:9D:20:4D:88:6E:4D:F6:98:8D:2D:81:AC
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/mMw64vC3wTidIE2Ibk32mI0tgaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.152.0/23
62.60.172.0/22
62.60.216.0/23
62.60.244.0-62.60.249.255
Signature Algorithm: sha256WithRSAEncryption
74:56:d4:2d:16:12:6e:14:67:9b:0f:05:4b:cf:d2:9b:83:2c:
2a:0d:be:f7:02:b1:be:9f:9f:09:78:65:b0:89:8e:e1:f8:74:
f1:81:ee:ad:5e:89:93:d5:b8:81:9c:8f:7e:25:9d:95:ef:1d:
d1:ed:17:35:49:8b:03:e4:7b:da:70:ce:a6:a3:0e:88:81:50:
e0:2b:ff:ac:d5:f0:ab:22:7c:1d:d8:52:e2:8f:6c:0a:d7:12:
7b:44:66:fb:1b:69:25:ee:1f:bd:af:af:ff:7f:1d:96:e5:6e:
47:8b:ff:5c:21:74:f2:07:80:74:6e:41:ab:80:f7:af:22:77:
d4:21:f8:2c:55:ac:7c:50:1a:a8:12:40:e1:d6:c6:e6:1d:aa:
f8:ef:db:5e:07:06:22:dd:80:34:88:12:c3:0b:53:ee:4c:2a:
45:aa:92:cb:39:8c:b3:17:13:ce:71:ad:4a:bb:f0:03:09:fc:
b4:1c:d6:29:97:48:80:ca:aa:5e:56:d9:73:3f:af:6e:9a:f6:
96:66:8a:10:39:1b:90:4b:54:7e:c9:c2:c2:b7:0f:22:4b:55:
e5:07:4a:16:08:9c:cf:95:5f:72:8b:18:43:00:3a:ed:31:3a:
50:68:6a:e9:93:16:c3:01:f7:09:25:aa:c0:7e:d1:f8:8f:9f:
5f:96:be:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:06:56 2025 by rpki-client