Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/L0ZnW8TDYvUPLNLpPhOa7v-F9-Y.roa
File: L0ZnW8TDYvUPLNLpPhOa7v-F9-Y.roa (raw, json)
Hash identifier: uKJuJFjnK6kPChErmmJ6qZtEoa+XbXHA9Ih85XU7cXM=
Subject key identifier: 2F:46:67:5B:C4:C3:62:F5:0F:2C:D2:E9:3E:13:9A:EE:FF:85:F7:E6
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01879278C6C38DFFAEBD0DE8F3E19516A20B
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/L0ZnW8TDYvUPLNLpPhOa7v-F9-Y.roa
Signing time: Tue 18 Apr 2023 03:46:41 +0000
ROA not before: Tue 18 Apr 2023 03:46:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44709
IP address blocks: 62.219.83.0/24 maxlen: 24
62.219.197.0/24 maxlen: 24
62.219.106.0/24 maxlen: 24
62.219.10.0/24 maxlen: 24
62.219.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:92:78:c6:c3:8d:ff:ae:bd:0d:e8:f3:e1:95:16:a2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Apr 18 03:46:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f46675bc4c362f50f2cd2e93e139aeeff85f7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:61:75:fd:ee:15:af:96:fb:ca:8c:82:c8:08:
d8:60:d9:61:55:da:70:a0:72:9e:aa:10:e5:c2:bb:
00:63:cc:47:8f:34:6a:2f:ae:60:4f:d3:03:d6:67:
5c:1a:cc:25:98:d4:a2:83:6f:69:62:15:1e:fb:05:
ef:f3:c4:c8:22:44:59:19:5a:27:fc:b0:09:a8:9e:
d3:1d:5a:f6:d2:37:8e:02:71:dd:13:83:c6:a9:ff:
80:d6:a7:b4:f0:45:e1:77:b4:26:df:e8:66:7f:d9:
95:e7:d3:87:25:d5:cf:03:b4:22:aa:d0:50:35:7c:
43:ad:a8:a6:43:cd:2d:3b:fd:1d:2a:50:20:de:ca:
26:45:b4:31:b4:64:0e:db:a9:98:37:db:c3:1c:83:
26:15:e2:a4:dc:11:50:4e:61:61:b4:d1:16:e9:ee:
84:bd:2a:b0:95:8c:22:66:eb:24:40:bd:36:5c:c1:
c6:f7:21:e9:29:3e:38:48:a9:52:66:b6:a1:5a:91:
24:6d:7e:b0:e2:d0:59:bc:fc:25:32:4a:fe:6d:f8:
06:e1:2f:34:7d:59:c9:4e:7e:9c:7a:7a:72:f2:a7:
36:9c:34:09:f5:a1:40:f3:7e:b7:a6:e6:01:3b:e1:
b1:6e:47:46:76:4e:b9:98:c8:fe:8d:c4:ad:18:76:
84:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:46:67:5B:C4:C3:62:F5:0F:2C:D2:E9:3E:13:9A:EE:FF:85:F7:E6
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/L0ZnW8TDYvUPLNLpPhOa7v-F9-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.219.10.0/24
62.219.14.0/24
62.219.83.0/24
62.219.106.0/24
62.219.197.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:67:5b:ed:61:11:aa:02:bb:f7:3c:3d:a8:88:11:dc:97:8a:
2b:35:e6:58:cd:72:63:ee:64:20:79:5c:8a:51:75:eb:bd:04:
43:36:9f:06:ac:5a:62:b6:39:fc:ee:b0:04:02:a5:c9:ae:9f:
01:fb:70:8f:84:20:47:2c:ad:e8:31:af:00:56:bb:d7:81:0c:
25:87:87:f2:03:4d:09:46:79:36:69:e7:cd:c3:c1:cd:73:9f:
38:84:ec:aa:68:6c:b1:77:bf:d8:92:4a:67:7f:ef:0c:27:e9:
49:1f:74:c6:f7:cf:ad:e4:48:c8:6a:dd:d1:05:f0:c2:a3:48:
e5:be:8d:de:6a:72:e3:35:52:88:87:f6:af:c3:95:87:a9:b8:
8c:d0:80:4b:5e:eb:08:bd:1e:84:8e:b4:98:7c:a6:d8:11:bb:
78:fc:03:2e:94:d6:c6:55:9c:fe:f7:23:a5:a2:88:53:97:26:
5a:e1:5c:e1:08:a8:52:d1:00:ee:b0:73:ed:fd:df:31:5a:9e:
36:7a:a6:e5:93:76:25:5e:df:b1:07:b9:16:a3:54:86:74:6e:
97:c5:6c:b6:a6:ef:73:cb:f0:8b:a9:2d:77:43:02:f8:b3:fa:
90:a7:3f:d1:bf:d0:2d:22:61:2c:33:e6:a1:a2:b7:cf:30:60:
e6:10:74:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:57 2024 by rpki-client on console-fra.rpki-client.org