Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/frAh3AKumhCs2InnLvsz7zCFkzA.roa
File: frAh3AKumhCs2InnLvsz7zCFkzA.roa (raw, json)
Hash identifier: cOVJGIAlv31wt6P5mwZAoD+yd8XowqpM2NLVoa2NdTU=
Subject key identifier: 7E:B0:21:DC:02:AE:9A:10:AC:D8:89:E7:2E:FB:33:EF:30:85:93:30
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0187B87582BE24D5849C933F52A83700C508
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/frAh3AKumhCs2InnLvsz7zCFkzA.roa
Signing time: Tue 25 Apr 2023 12:48:41 +0000
ROA not before: Tue 25 Apr 2023 12:48:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24
IP address blocks: 62.73.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 May 2023 14:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b8:75:82:be:24:d5:84:9c:93:3f:52:a8:37:00:c5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Apr 25 12:48:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7eb021dc02ae9a10acd889e72efb33ef30859330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:ed:ce:42:21:74:c3:17:3c:c8:fb:e7:d4:
26:b5:69:8d:5c:58:0a:97:2b:58:45:33:58:fd:75:
c9:45:79:ad:c4:1f:85:78:bd:01:43:23:cb:c1:87:
06:2f:4e:2f:93:98:5e:9d:cb:1a:d3:9c:2d:fe:a0:
96:96:15:da:e4:94:4b:09:22:7a:4b:1d:19:8f:f4:
69:17:b9:dc:f4:df:b4:28:b1:d2:1a:88:86:16:41:
95:fa:65:23:f8:a2:a0:98:a1:19:4b:6f:74:3e:0a:
8e:8e:74:ff:a1:e4:08:5a:cb:03:b2:77:50:40:be:
5f:1d:d5:0a:7b:a4:b0:9e:ae:18:5d:4f:f5:85:4e:
f4:c4:09:68:26:ac:aa:65:e2:88:68:1b:3e:f0:64:
eb:17:16:12:43:e9:5f:f4:a2:8d:5b:02:03:30:c8:
59:b1:48:a5:03:c6:e3:b3:b9:a6:4e:ce:7e:16:9f:
16:88:60:1c:3d:cc:a8:e4:be:99:7a:b4:87:d4:fc:
3a:d5:92:86:08:67:a6:4b:e4:b3:3c:91:ba:00:9b:
29:f6:d7:d3:b2:52:d5:d5:1f:78:fe:c8:59:c3:a9:
97:2c:a1:9f:30:b9:31:39:4c:ce:93:49:af:09:8a:
d1:e4:20:af:1a:1c:9a:95:07:8e:db:29:17:08:dd:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B0:21:DC:02:AE:9A:10:AC:D8:89:E7:2E:FB:33:EF:30:85:93:30
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/frAh3AKumhCs2InnLvsz7zCFkzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.73.190.0/24
Signature Algorithm: sha256WithRSAEncryption
61:2a:04:f8:5c:9b:dd:68:40:ba:c6:34:45:5c:e3:a3:64:31:
85:36:f3:18:9c:6e:25:2b:8d:54:01:39:15:ed:dc:2d:ac:b5:
fb:94:90:21:96:2d:03:d8:fa:5f:03:da:88:1b:c3:f8:9b:d7:
f4:86:cc:2c:98:fb:92:56:d4:7f:8a:23:c8:ee:9e:83:65:85:
9c:71:7f:33:7e:1f:01:e3:88:02:40:5e:31:1e:c9:98:4e:00:
85:28:8f:68:49:6e:23:6a:41:6d:a8:a1:82:52:55:61:bb:de:
7c:16:34:8d:13:de:69:f4:16:c4:09:33:3f:5c:bf:20:bb:01:
08:ff:e0:6c:cb:80:b8:3a:d9:a7:f2:0f:00:ff:be:b5:3d:1f:
61:58:74:65:7f:ea:d8:a8:8c:57:68:cd:d4:26:bf:c7:d1:68:
c3:f5:f9:97:25:ef:01:7c:7d:ec:e8:4e:c0:dc:93:51:77:c3:
07:ec:b5:c3:b5:33:53:98:5f:a7:5c:cf:03:1d:d5:2b:69:ae:
31:6c:79:dc:6b:d5:49:e9:79:9e:79:17:c9:55:30:2d:3f:1d:
2c:9d:ec:e5:2e:bc:3f:7a:71:95:28:09:8f:fb:a4:7d:92:d6:
86:45:4c:b1:0d:95:13:12:77:cd:75:17:e0:e0:bd:cc:b4:35:
d6:cf:fe:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:03 2024 by rpki-client on console-ams.rpki-client.org