Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/12zPHtVrQ0u8cFB_JVT91h391Cw.roa
File: 12zPHtVrQ0u8cFB_JVT91h391Cw.roa (raw, json)
Hash identifier: msvVeyOnbJeTw7W07bd+EAjqFWfvpz7Dq7KVId/dTlU=
Subject key identifier: D7:6C:CF:1E:D5:6B:43:4B:BC:70:50:7F:25:54:FD:D6:1D:FD:D4:2C
Certificate issuer: /CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Certificate serial: 0194F63603A4E562C63A6F1D9330DF33D96F
Authority key identifier: 59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/12zPHtVrQ0u8cFB_JVT91h391Cw.roa
Signing time: Tue 11 Feb 2025 18:12:02 +0000
ROA not before: Tue 11 Feb 2025 18:12:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9186
IP address blocks: 62.233.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 22:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f6:36:03:a4:e5:62:c6:3a:6f:1d:93:30:df:33:d9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Validity
Not Before: Feb 11 18:12:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d76ccf1ed56b434bbc70507f2554fdd61dfdd42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5b:90:8e:99:0f:0e:d6:1b:f3:9d:88:13:d9:
56:36:c1:6d:b3:b3:f4:df:37:2a:ba:ce:27:7f:d4:
d1:64:ca:14:e7:98:30:b1:bb:d5:96:20:d2:cf:a9:
1a:ba:81:7a:6f:ff:f4:32:68:ce:fc:76:0c:f6:72:
eb:63:2e:01:9b:29:bd:71:06:f8:52:1b:b7:9b:91:
a6:df:13:fc:db:1a:ae:ae:82:62:59:cd:9b:28:5c:
dd:3f:35:a2:29:65:cc:ca:c5:6d:2b:21:d9:cc:40:
9b:b9:ef:9a:23:fe:8f:47:19:ae:c3:87:6b:55:49:
c9:d4:e5:c6:ca:c2:ba:47:25:c5:f8:fd:a6:d2:e7:
7a:ba:2a:1f:cf:04:96:3a:f3:da:96:e5:87:5f:de:
13:16:41:b1:9f:21:1d:fb:8b:5e:62:ee:0b:57:18:
65:cd:47:61:1f:a7:9f:a0:20:41:d2:e1:10:8f:a6:
3c:c2:01:8b:6f:51:0f:f8:ee:f5:f5:a7:39:91:a1:
62:f8:98:8e:24:7a:99:ad:23:2d:d7:6a:f0:cf:6c:
03:2e:9a:b3:2e:2f:a4:7b:ca:07:2d:b5:43:eb:1b:
86:85:f7:f2:08:3b:8c:68:b7:9a:9f:25:de:6a:f9:
a0:0c:89:b1:5c:20:df:05:22:e6:da:83:a6:6f:9e:
79:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6C:CF:1E:D5:6B:43:4B:BC:70:50:7F:25:54:FD:D6:1D:FD:D4:2C
X509v3 Authority Key Identifier:
keyid:59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/12zPHtVrQ0u8cFB_JVT91h391Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.41.0/24
Signature Algorithm: sha256WithRSAEncryption
45:3f:91:83:c5:10:ba:57:42:e9:a1:ec:c2:cc:a4:f2:f4:43:
a5:88:3b:83:2b:a3:05:14:52:23:a2:c0:33:10:e9:a5:5e:c2:
23:1a:4b:72:7c:5b:ce:40:78:3e:93:12:37:4b:0f:19:0e:ba:
15:25:f8:67:8b:63:d0:49:71:83:b2:ec:c1:3a:75:c2:14:75:
a3:70:39:0b:6e:ec:34:2e:81:8f:61:f6:9c:5e:f7:5f:58:f4:
fe:ef:2b:8d:7b:71:5a:83:a4:11:82:6b:53:cb:6f:b4:20:86:
ba:7a:df:75:6b:25:7f:82:cc:cb:5d:3c:3d:35:44:72:7e:0b:
ee:1e:ca:75:c7:0f:26:a4:96:87:65:ad:c4:f9:0d:57:15:9a:
dc:29:36:7e:5b:7c:ab:51:70:e1:b1:ce:3f:7d:ef:b1:5e:6e:
37:fc:d8:5c:e6:57:f8:7a:30:46:86:10:a8:66:0a:91:85:24:
58:4e:1c:a9:ff:af:37:36:0f:bc:f6:4e:db:61:c3:17:29:1e:
d8:7a:97:a5:53:4e:17:d5:38:95:96:53:fe:71:7b:b3:ea:85:
f2:13:c7:61:fd:7d:ba:9c:7f:23:81:b4:55:c6:46:6f:e0:e1:
4b:dd:b7:2e:67:bd:c9:d9:43:d3:8b:96:d4:e6:c0:85:d0:b4:
23:46:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:58:32 2025 by rpki-client