Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/Qo57N4Rv4v33Ej10p3n8l37uMqs.roa
File: Qo57N4Rv4v33Ej10p3n8l37uMqs.roa (raw, json)
Hash identifier: 2+cOszMDg5JfvErlc5sLo1XG/OYnxdPQ0KeusY3qXNo=
Subject key identifier: 42:8E:7B:37:84:6F:E2:FD:F7:12:3D:74:A7:79:FC:97:7E:EE:32:AB
Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial: 019373BDAA313BF6795FB37BF03F404A31D9
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/Qo57N4Rv4v33Ej10p3n8l37uMqs.roa
Signing time: Thu 28 Nov 2024 17:07:09 +0000
ROA not before: Thu 28 Nov 2024 17:07:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25530
IP address blocks: 62.113.32.0/23 maxlen: 24
62.113.33.0/24 maxlen: 24
62.113.34.0/23 maxlen: 23
62.113.38.0/24 maxlen: 24
62.113.40.0/21 maxlen: 24
62.113.45.0/24 maxlen: 24
62.113.46.0/24 maxlen: 24
62.113.48.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 28 Nov 2024 19:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:bd:aa:31:3b:f6:79:5f:b3:7b:f0:3f:40:4a:31:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Validity
Not Before: Nov 28 17:07:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=428e7b37846fe2fdf7123d74a779fc977eee32ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:b1:c0:16:82:55:2b:d6:fe:34:94:36:b3:
8a:47:2a:f7:85:28:e8:34:23:90:d2:fc:26:86:6c:
b9:62:57:75:4e:21:dc:e0:fb:42:28:26:11:1c:d5:
21:e1:a5:99:20:63:d3:07:64:a6:77:f3:72:91:81:
06:0f:c9:83:ee:a9:0f:55:0d:82:92:15:fc:fd:c9:
18:49:46:73:89:33:b3:0a:de:f2:9a:1f:60:9a:a8:
57:28:cb:66:d6:f2:68:4c:c9:2f:fd:5b:17:b6:6f:
1d:a8:f6:38:12:af:32:6a:88:f3:22:42:ba:3a:3c:
9d:4f:4c:08:bc:70:d2:de:f5:49:03:65:7f:98:8e:
7f:38:87:b3:b9:14:83:fc:0c:9e:60:72:0e:88:68:
7e:62:c0:79:fc:1f:7d:ac:b9:76:25:b0:7c:20:ad:
94:21:97:22:ae:d7:1d:47:73:2b:5f:10:59:65:fc:
d2:eb:71:e7:d1:d0:d8:0c:7a:89:5c:e9:e2:b3:c0:
8a:db:04:d2:49:d0:53:bb:a3:d1:11:98:fc:ac:54:
81:fb:db:00:99:96:04:2d:0f:77:ee:7a:39:74:22:
58:18:5d:3f:ad:45:b1:8b:6c:b8:98:04:95:87:23:
12:54:15:ce:99:fc:0f:5a:97:3f:0d:4f:31:2c:5d:
79:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8E:7B:37:84:6F:E2:FD:F7:12:3D:74:A7:79:FC:97:7E:EE:32:AB
X509v3 Authority Key Identifier:
keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/Qo57N4Rv4v33Ej10p3n8l37uMqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.32.0/22
62.113.38.0/24
62.113.40.0-62.113.55.255
Signature Algorithm: sha256WithRSAEncryption
8c:11:aa:30:5c:cd:96:ac:7a:21:7e:88:ae:ed:d5:69:17:7c:
58:e5:ab:4e:1b:c4:5f:41:2c:a2:d8:be:26:3c:18:48:ea:85:
cf:3c:66:9d:2f:9a:9d:72:40:2e:5e:a0:a4:15:06:97:cf:bf:
46:99:77:cf:ac:17:d4:db:5a:5f:fa:23:6b:66:37:58:54:68:
1c:b3:b6:a5:37:5d:41:4e:71:f2:92:b4:f7:e3:2d:05:8f:79:
33:20:24:e1:55:d3:e0:85:5c:bd:1d:bb:d7:8d:4a:a4:ce:2e:
eb:46:54:6b:81:ea:72:07:d5:3c:3c:09:22:e6:05:e9:43:9c:
d7:25:cd:30:a8:75:1e:d8:32:12:53:cf:aa:09:de:9f:c0:6b:
a2:3f:df:95:bf:ca:1b:65:ef:dc:3c:9b:84:fe:e2:c5:94:98:
09:b0:16:48:22:62:6c:62:bb:37:07:53:88:1b:7b:d1:62:e0:
c7:02:12:0c:5e:de:ce:e5:c3:2b:a2:f6:8e:e4:9a:12:91:a0:
16:3a:b9:9b:07:f2:9c:e7:1d:6a:2a:c1:de:09:a6:b1:8b:1e:
1f:ee:c4:fa:d8:b7:a8:00:8f:d8:da:44:f9:de:86:69:af:ab:
34:c1:6b:d2:6e:11:8e:62:e3:1f:ce:74:67:6b:90:73:d3:f8:
6f:33:95:1b
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZNzvaoxO/Z5X7N78D9ASjHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNTYzNjA2MjRjYzFiNGM0OWRhNzJiYzMyNWY1YmI2YWI0
ZDgzMDAwHhcNMjQxMTI4MTcwNzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjhlN2IzNzg0NmZlMmZkZjcxMjNkNzRhNzc5ZmM5NzdlZWUzMmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrqxwBaCVSvW/jSUNrOKRyr3hSjo
NCOQ0vwmhmy5Yld1TiHc4PtCKCYRHNUh4aWZIGPTB2Smd/NykYEGD8mD7qkPVQ2C
khX8/ckYSUZziTOzCt7ymh9gmqhXKMtm1vJoTMkv/VsXtm8dqPY4Eq8yaojzIkK6
OjydT0wIvHDS3vVJA2V/mI5/OIezuRSD/AyeYHIOiGh+YsB5/B99rLl2JbB8IK2U
IZcirtcdR3MrXxBZZfzS63Hn0dDYDHqJXOnis8CK2wTSSdBTu6PREZj8rFSB+9sA
mZYELQ937no5dCJYGF0/rUWxi2y4mASVhyMSVBXOmfwPWpc/DU8xLF150QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFEKOezeEb+L99xI9dKd5/Jd+7jKrMB8GA1UdIwQY
MBaAFM5WNgYkzBtMSdpyvDJfW7arTYMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUt
YTk4ZWYzMDA4NTgwLzEvUW81N040UnY0djMzRWoxMHAzbjhsMzd1TXFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUtYTk4ZWYzMDA4NTgw
LzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCPnEgAwQA
PnEmMAwDBAM+cSgDBAM+cTAwDQYJKoZIhvcNAQELBQADggEBAIwRqjBczZaseiF+
iK7t1WkXfFjlq04bxF9BLKLYviY8GEjqhc88Zp0vmp1yQC5eoKQVBpfPv0aZd8+s
F9TbWl/6I2tmN1hUaByztqU3XUFOcfKStPfjLQWPeTMgJOFV0+CFXL0du9eNSqTO
LutGVGuB6nIH1Tw8CSLmBelDnNclzTCodR7YMhJTz6oJ3p/Aa6I/35W/yhtl79w8
m4T+4sWUmAmwFkgiYmxiuzcHU4gbe9Fi4McCEgxe3s7lwyui9o7kmhKRoBY6uZsH
8pznHWoqwd4JprGLHh/uxPrYt6gAj9jaRPnehmmvqzTBa9JuEY5i4x/OdGdrkHPT
+G8zlRs=
-----END CERTIFICATE-----
Generated at Sun May 11 19:14:57 2025 by rpki-client