Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/XERYiVy_xkRmu6zG7XX_P4Amy-Y.roa
File: XERYiVy_xkRmu6zG7XX_P4Amy-Y.roa (raw, json)
Hash identifier: 9gVPKpCBsBuUQFDmqWIuQ+hVV0oixDsWyUFpFgu9ZL8=
Subject key identifier: 5C:44:58:89:5C:BF:C6:44:66:BB:AC:C6:ED:75:FF:3F:80:26:CB:E6
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0195D45D7644B1322309E021814746CD8A5E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/XERYiVy_xkRmu6zG7XX_P4Amy-Y.roa
Signing time: Wed 26 Mar 2025 21:30:49 +0000
ROA not before: Wed 26 Mar 2025 21:30:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60068
IP address blocks: 62.93.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d4:5d:76:44:b1:32:23:09:e0:21:81:47:46:cd:8a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Mar 26 21:30:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c4458895cbfc64466bbacc6ed75ff3f8026cbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:58:52:f8:05:b2:8d:2d:de:1a:9b:70:4b:f0:
4c:54:5b:c5:93:13:53:45:79:32:8e:72:1c:66:23:
72:97:34:a9:3c:82:95:27:e8:7e:c7:86:c2:12:f2:
9f:cc:4d:75:1c:63:5b:b1:6f:bc:c8:f1:90:68:da:
9a:5c:95:16:b2:5e:c0:07:c6:87:59:d8:e3:57:2a:
e2:07:d3:d1:33:87:36:26:43:f9:a2:9f:62:1d:73:
ec:af:65:c4:ac:8a:ff:5b:fb:85:1a:15:01:7b:1d:
63:e4:da:41:be:66:e1:27:04:ef:cf:1a:23:6b:f4:
1e:4e:32:86:a5:2f:0f:45:37:80:10:3f:92:de:b0:
1f:97:cf:de:43:e3:9d:49:06:73:9c:93:71:eb:ec:
5c:8c:7c:9e:3d:92:3f:1b:36:8b:75:e9:97:4f:57:
d2:f2:a7:7c:6d:a1:88:b1:e2:ef:05:3a:7c:eb:c0:
4a:f6:8d:3c:4f:44:77:6c:be:a7:ed:98:a1:89:d2:
0d:27:a3:e6:7b:d0:f3:9c:e3:b1:76:54:09:85:3b:
2b:e2:02:45:6e:e3:7e:97:b1:71:f0:5a:ea:29:11:
be:e6:e5:fb:ce:93:24:10:6d:36:77:21:dd:96:2d:
d9:aa:d1:50:e8:8d:f3:02:cf:35:40:92:91:32:b7:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:44:58:89:5C:BF:C6:44:66:BB:AC:C6:ED:75:FF:3F:80:26:CB:E6
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/XERYiVy_xkRmu6zG7XX_P4Amy-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.176.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:93:24:47:bf:fe:85:73:12:55:64:cd:38:13:ab:54:ed:4f:
4d:5f:21:d9:5a:9c:7c:5c:65:23:05:ce:f9:5a:ad:55:a0:a7:
27:36:58:6d:57:d1:92:18:db:4b:55:a7:af:19:17:8e:b9:ac:
57:82:61:ce:2f:ee:04:4d:11:ff:39:d7:97:80:dd:13:cf:ba:
2b:3c:ca:86:82:0e:fc:4c:4e:ee:0f:e6:59:cf:a4:40:bf:c3:
c9:30:3d:cc:d2:c8:2d:8b:d9:ec:70:4e:33:47:1b:3c:38:f2:
79:57:ea:63:90:e8:d8:33:9f:e2:21:2d:c4:dd:80:d1:77:de:
f6:55:a9:6a:ee:d4:e4:09:21:d3:47:db:36:7d:f7:55:b0:2b:
05:d3:0c:20:f7:de:ee:6f:b3:d0:fc:7c:ca:88:d7:0f:e1:a0:
6e:c7:ff:77:d9:9d:2c:b2:99:49:3e:fc:9b:17:17:7b:7e:3e:
a6:7a:55:3d:b6:5e:8a:8b:c4:07:0c:83:84:6d:1d:9b:a5:48:
7d:54:e4:48:5c:b6:26:67:ba:2f:0a:b2:c5:a5:c5:30:e5:0d:
77:51:9e:df:4a:44:7a:89:fc:bc:be:2a:fd:91:d8:c6:df:8e:
80:eb:36:4d:2f:c1:7f:c0:f9:bc:34:c7:79:dd:99:ac:62:18:
51:d8:a9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:26:51 2025 by rpki-client