Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/v-shCvJEQEGool4AOfjtPyH4yt4.roa
File: v-shCvJEQEGool4AOfjtPyH4yt4.roa (raw, json)
Hash identifier: n9hpPQddLV6/lYvj/cV1QeVE4/aHHQSXLt8xMQlqz90=
Subject key identifier: BF:EB:21:0A:F2:44:40:41:A8:A2:5E:00:39:F8:ED:3F:21:F8:CA:DE
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0196803E063ABBB21850C1BA7A4511E466F9
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/v-shCvJEQEGool4AOfjtPyH4yt4.roa
Signing time: Tue 29 Apr 2025 06:31:10 +0000
ROA not before: Tue 29 Apr 2025 06:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 62.72.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Apr 2025 09:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:3e:06:3a:bb:b2:18:50:c1:ba:7a:45:11:e4:66:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 29 06:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfeb210af2444041a8a25e0039f8ed3f21f8cade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:58:e8:ba:83:95:e3:cc:f7:d7:8f:71:4a:ce:
b6:e5:8a:27:f5:43:3e:b2:61:06:5d:7d:7e:00:fd:
8f:a6:f5:7a:4e:a3:94:21:8d:40:fe:4b:36:b7:96:
d1:aa:d0:32:6e:c9:ef:5c:42:a5:ef:53:65:0e:fd:
64:d4:25:ca:a4:31:a2:a7:f1:f9:8c:c0:3e:a6:03:
95:0b:bf:c3:bb:9f:e5:15:a3:40:36:fd:d1:38:2d:
34:4e:f6:ab:98:b6:f2:6d:82:10:39:e8:3b:28:f5:
dc:f6:76:6f:07:f5:dd:5c:50:64:5a:54:93:95:ec:
06:e1:85:86:87:1b:88:78:04:61:e6:14:b3:17:57:
5a:1f:d7:d5:c7:c3:4c:b6:23:27:c9:85:50:34:23:
47:8c:28:64:ed:c5:a4:2b:03:25:39:6c:d1:56:fe:
95:0f:a0:2c:0f:50:fb:b7:d9:90:7e:74:81:6a:a1:
51:b3:27:1f:6d:cc:c4:66:7f:61:0f:e6:49:91:52:
5d:63:fe:5a:b7:5a:fe:60:30:15:26:dd:c0:77:3f:
1e:c2:97:a7:99:b5:9b:59:da:b5:84:ab:70:fb:36:
a5:ae:71:58:6e:16:74:08:17:95:5a:92:aa:92:d7:
d6:78:fe:25:1c:e6:1a:cc:b7:9e:18:f7:1c:18:d8:
5b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EB:21:0A:F2:44:40:41:A8:A2:5E:00:39:F8:ED:3F:21:F8:CA:DE
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/v-shCvJEQEGool4AOfjtPyH4yt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.185.0/24
Signature Algorithm: sha256WithRSAEncryption
48:dc:87:0c:35:2a:27:4c:ac:ca:6b:f2:4a:c2:8e:42:06:e3:
75:e6:52:10:5b:26:10:3c:ad:7f:e6:bb:3b:e5:7f:4f:41:66:
cc:64:4d:59:4a:3b:da:8b:59:d4:4e:8a:17:19:44:4a:9b:9a:
e8:16:e8:b4:4c:4c:71:18:8c:9e:95:4f:ec:a8:c8:2a:45:34:
b6:2c:f9:66:0f:b6:41:82:d6:21:69:0a:8c:d8:4f:9f:aa:0e:
e6:91:e3:be:4e:0f:74:0a:fd:66:8f:ea:b4:ee:fe:b3:a6:87:
b0:20:9c:64:53:c0:82:95:34:8b:29:db:83:5e:63:3f:32:d2:
81:7a:9e:be:51:f0:14:12:f3:d6:04:ba:78:d1:30:36:47:77:
24:79:77:87:54:2b:69:59:c5:2f:98:6f:69:a3:d3:ed:82:bf:
1f:30:1c:eb:be:a6:c5:b9:0b:20:01:9b:ad:c8:8b:5f:5a:07:
82:22:36:ad:cf:88:35:2f:15:f7:99:8c:ed:d6:0b:04:ea:34:
63:98:95:08:49:d9:6a:0e:2c:68:e6:18:7f:07:0f:50:f8:a6:
a6:ac:fc:82:bd:b2:b4:9d:80:b1:0a:70:2f:11:54:db:42:52:
f2:99:8b:d8:c6:55:fd:42:c8:38:02:c2:6e:f8:7c:e0:bf:b5:
8a:1d:08:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:33:38 2025 by rpki-client