Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/oaEBrwuXIAY97szqziunLn8eOCA.roa
File: oaEBrwuXIAY97szqziunLn8eOCA.roa (raw, json)
Hash identifier: 1hggu9oE0pKYp7MPowQWQBwPf5Ar2XkMa/dqWLGoHtg=
Subject key identifier: A1:A1:01:AF:0B:97:20:06:3D:EE:CC:EA:CE:2B:A7:2E:7F:1E:38:20
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018FD28BCAF111DB72C3934B8AC6799ABA4C
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/oaEBrwuXIAY97szqziunLn8eOCA.roa
Signing time: Sat 01 Jun 2024 06:45:27 +0000
ROA not before: Sat 01 Jun 2024 06:45:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44559
IP address blocks: 62.60.152.0/22 maxlen: 24
62.60.156.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.216.0/22 maxlen: 24
213.176.64.0/22 maxlen: 24
213.176.72.0/22 maxlen: 24
213.176.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jun 2024 08:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d2:8b:ca:f1:11:db:72:c3:93:4b:8a:c6:79:9a:ba:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 1 06:45:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1a101af0b9720063deecceace2ba72e7f1e3820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:87:9d:88:18:df:15:c3:e2:fd:2a:d5:21:
97:58:0e:00:a1:0b:8f:ab:90:63:af:ce:9c:a8:cf:
6b:82:40:a2:69:9d:cd:45:65:f5:b6:47:05:75:04:
d1:44:2a:3b:75:3a:4d:79:3c:da:39:a4:73:29:47:
e7:4d:4f:28:b8:11:cd:33:02:15:4f:aa:3a:46:59:
08:ee:4e:c1:28:d6:e3:ea:df:e1:d9:07:99:58:42:
77:6d:75:dd:94:ae:65:42:6f:72:e0:27:9c:89:92:
1c:13:98:ea:c8:15:3d:41:3b:d6:89:3a:e7:a3:e4:
99:c6:13:89:09:a8:91:7b:4b:1d:d4:26:ba:29:2c:
65:6b:73:ea:29:96:67:f2:64:34:7f:45:ba:31:1a:
74:cb:b0:91:c3:bc:67:94:89:a3:27:38:7a:87:b4:
32:78:45:4f:08:a1:c2:aa:21:5b:b7:d1:9d:5c:57:
c1:f8:ed:ad:1d:24:57:56:f9:7e:39:cc:34:06:90:
e8:c9:e2:8a:b2:33:6d:24:88:b8:30:17:68:49:7b:
07:05:7f:f0:b5:8a:de:a5:6f:f1:c9:57:71:2c:d5:
3d:49:b4:0a:c0:20:20:d8:6c:77:f5:8d:ed:8d:90:
56:33:12:a3:ba:57:ef:b2:79:3c:c9:68:19:5a:c0:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A1:01:AF:0B:97:20:06:3D:EE:CC:EA:CE:2B:A7:2E:7F:1E:38:20
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/oaEBrwuXIAY97szqziunLn8eOCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.152.0/21
62.60.184.0/22
62.60.192.0/22
62.60.216.0/22
213.176.64.0/22
213.176.72.0/22
213.176.92.0/22
Signature Algorithm: sha256WithRSAEncryption
90:d4:0e:10:a7:6b:5c:94:de:81:8f:a3:bc:11:77:f8:01:ee:
7d:eb:13:a1:24:58:4a:aa:34:f2:de:2a:3b:27:dc:8e:f6:84:
a1:d1:a7:5f:1c:b4:3e:0b:b0:a3:e1:d2:08:c1:01:e1:68:32:
6a:da:8f:1d:0d:86:7f:5a:fd:a7:66:2e:d5:c7:78:55:62:ee:
6d:1e:a9:ad:f3:3d:d6:16:a0:2f:8d:e5:ee:00:91:43:59:0e:
57:de:fc:aa:96:c1:cb:2d:07:20:51:b8:29:07:bb:dd:07:eb:
0a:0a:70:be:8a:1a:72:49:5f:02:ba:67:4e:31:f0:4f:56:3f:
b9:97:14:79:0c:17:d2:71:ac:f1:bb:d0:78:62:64:46:99:d1:
e1:e6:84:2d:e5:e7:53:9d:b8:fe:e3:15:a7:5b:ad:fb:0d:d2:
9c:6c:45:73:b0:6d:64:07:57:66:17:08:24:43:c1:6f:3a:1c:
c4:0e:1b:ea:cf:49:eb:6b:31:32:a5:82:a3:9f:3d:e3:97:73:
ba:8d:6c:ef:9e:92:73:06:df:16:be:73:ae:68:cd:6d:19:d6:
a5:9f:4c:df:7e:e1:86:58:cb:f8:ad:ea:32:d0:b5:dd:6a:93:
0d:a5:ef:51:c4:f3:12:2d:f9:27:22:25:38:9a:88:b3:de:ad:
6d:5e:79:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:51:32 2025 by rpki-client