Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/6AjpE2X2U3UOKWWUW9KIbYlc9n0.roa
File: 6AjpE2X2U3UOKWWUW9KIbYlc9n0.roa (raw, json)
Hash identifier: 62h4gtVQewSwKU7kMqnxFcHQDRwb9GNrx2eKkUZjOfk=
Subject key identifier: E8:08:E9:13:65:F6:53:75:0E:29:65:94:5B:D2:88:6D:89:5C:F6:7D
Certificate issuer: /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial: 018CC34901160091D37C7E5A2F0956EB9210
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/6AjpE2X2U3UOKWWUW9KIbYlc9n0.roa
Signing time: Mon 01 Jan 2024 04:29:50 +0000
ROA not before: Mon 01 Jan 2024 04:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201737
IP address blocks: 62.3.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:01:16:00:91:d3:7c:7e:5a:2f:09:56:eb:92:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Validity
Not Before: Jan 1 04:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e808e91365f653750e2965945bd2886d895cf67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:5f:f0:56:83:12:4f:01:9d:f7:0d:d9:ab:
b4:69:29:8e:a6:96:7e:07:7e:08:0f:7e:d2:8a:66:
4f:20:36:36:46:4f:e9:73:ce:4d:10:3a:69:41:49:
52:de:81:9d:af:b3:4a:40:aa:64:8f:19:7f:87:13:
ad:1a:bc:9a:a6:10:74:fb:21:b2:1c:fb:7a:3d:e0:
31:ed:26:ce:e1:cc:9c:03:5d:9c:2e:5b:d8:ba:cc:
82:90:ca:21:35:12:4d:23:5a:d1:fc:b7:69:e2:47:
0d:f0:98:4d:ba:54:52:21:0e:8e:80:a6:31:fe:fb:
70:6a:1a:bf:f0:9f:3a:a8:c7:12:a2:9e:9a:66:d7:
e9:3f:51:46:ab:fc:61:eb:14:94:9f:5e:f8:e8:b1:
e3:e4:7c:b7:01:d5:ce:d2:bb:08:b9:bf:b6:8a:ff:
4f:10:3d:b5:82:19:03:37:a0:5f:b1:d3:8a:98:a4:
5f:d3:22:d7:19:49:e1:f4:37:ed:9b:89:7a:3e:c5:
4b:5e:36:91:bb:4f:14:71:b9:59:0b:b8:42:5d:1c:
fe:4b:44:28:ba:83:fa:e2:85:a9:e5:74:7f:18:d7:
e3:84:54:ea:0d:73:b6:ad:9f:a5:cd:47:a8:9f:65:
44:81:cd:ed:97:bb:80:57:5c:ff:da:2a:87:b0:cc:
5c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:08:E9:13:65:F6:53:75:0E:29:65:94:5B:D2:88:6D:89:5C:F6:7D
X509v3 Authority Key Identifier:
keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/6AjpE2X2U3UOKWWUW9KIbYlc9n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:1d:4e:d8:32:b1:bc:87:c3:e4:9c:d1:1f:2d:9c:91:98:1a:
3c:28:19:77:0c:f9:6d:6e:6a:f5:b2:d4:a2:40:10:cf:0b:ca:
89:75:6c:6b:26:0b:ac:37:de:d5:6d:5d:b0:99:84:1a:36:8e:
4b:1b:33:1d:42:fe:cb:a1:77:b6:01:7f:dc:94:b0:2b:a4:6c:
72:fa:78:03:09:ea:67:99:17:99:4e:e1:b6:f0:43:d2:a7:bd:
ee:71:02:c6:4a:41:2d:e8:0f:a1:6b:7d:79:0c:94:f0:ce:15:
77:18:69:85:6e:44:2d:04:8b:68:e6:b8:12:a0:be:51:4a:b4:
5c:79:18:b0:d8:8b:ec:e9:80:02:b5:9d:d9:52:72:9d:89:0e:
33:ea:fe:3e:56:3b:35:68:d7:da:7f:f4:48:cc:e0:21:a1:41:
48:1a:2d:c9:e4:1f:c6:d1:4b:6b:54:ba:77:5d:8b:06:b6:8e:
1b:9e:70:72:7c:20:3d:b8:86:f6:36:3e:f3:f3:d5:6a:d8:b7:
9e:7a:08:11:52:65:37:a6:5e:f2:b5:49:91:68:e1:99:73:12:
30:61:f6:f2:3e:fa:ac:2a:44:ca:4a:0a:99:db:9c:d3:9d:d9:
50:9e:d6:fa:d3:b0:aa:cc:41:15:de:b1:a8:a8:e8:c9:15:a2:
02:14:eb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:10:57 2025 by rpki-client