Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/ru72KkHY1rdjS2jnPqXPS1Bbfx4.roa
File: ru72KkHY1rdjS2jnPqXPS1Bbfx4.roa (raw, json)
Hash identifier: mZVJBsKc+YnJKmRQNtAkgJcIVhw9JJA97I2UKR+Ee60=
Subject key identifier: AE:EE:F6:2A:41:D8:D6:B7:63:4B:68:E7:3E:A5:CF:4B:50:5B:7F:1E
Certificate issuer: /CN=6a9cf5a57bc7456d740b45e1fe08e369a9a1714a
Certificate serial: 01856F5DE7F97AA26616D246E1F3E899DA75
Authority key identifier: 6A:9C:F5:A5:7B:C7:45:6D:74:0B:45:E1:FE:08:E3:69:A9:A1:71:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apz1pXvHRW10C0Xh_gjjaamhcUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/ru72KkHY1rdjS2jnPqXPS1Bbfx4.roa
Signing time: Sun 01 Jan 2023 22:05:03 +0000
ROA not before: Sun 01 Jan 2023 22:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12843
IP address blocks: 62.182.102.0/24 maxlen: 24
62.182.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:e7:f9:7a:a2:66:16:d2:46:e1:f3:e8:99:da:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9cf5a57bc7456d740b45e1fe08e369a9a1714a
Validity
Not Before: Jan 1 22:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aeeef62a41d8d6b7634b68e73ea5cf4b505b7f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:d1:23:06:ea:48:6f:92:cd:25:60:0e:13:
ea:d5:c7:de:82:d3:18:ff:17:9b:c8:80:f2:2b:3f:
58:6b:4c:2c:a8:b0:ca:76:36:8d:98:29:f7:26:47:
bf:9d:63:1d:80:58:4e:a8:1c:1b:dc:28:7d:50:e7:
b0:92:a2:82:7f:e6:c4:33:ba:9f:47:1c:8c:ee:12:
dc:5f:f8:e6:0d:84:02:0b:86:97:3e:e8:ec:45:5b:
54:86:9d:f1:dc:ca:0d:12:be:fa:5c:af:cf:6e:80:
c0:8f:63:6f:ce:08:29:63:28:35:04:c5:1f:df:47:
56:8b:48:cb:c5:5f:6f:80:09:90:4c:12:67:6c:af:
19:ff:7f:b3:65:07:be:e9:8b:12:08:e6:d7:eb:29:
25:29:1d:87:f0:5e:c4:bb:34:9a:86:09:cc:6f:5e:
d3:44:77:bb:b8:39:ab:d9:55:0a:07:a6:0d:8b:0f:
b3:58:40:f8:ef:aa:74:2a:59:59:84:7a:50:34:dd:
56:95:d9:82:45:89:3d:37:c6:c8:0e:32:55:d2:1c:
b8:2e:d2:d7:af:bf:d9:67:64:73:8a:1e:31:aa:ae:
60:ac:39:48:44:cd:1b:e1:6f:77:92:d8:da:26:37:
99:ae:59:7d:f6:70:95:e4:39:45:c3:12:dd:c0:d8:
f4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EE:F6:2A:41:D8:D6:B7:63:4B:68:E7:3E:A5:CF:4B:50:5B:7F:1E
X509v3 Authority Key Identifier:
keyid:6A:9C:F5:A5:7B:C7:45:6D:74:0B:45:E1:FE:08:E3:69:A9:A1:71:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apz1pXvHRW10C0Xh_gjjaamhcUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/ru72KkHY1rdjS2jnPqXPS1Bbfx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/apz1pXvHRW10C0Xh_gjjaamhcUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.102.0/23
Signature Algorithm: sha256WithRSAEncryption
62:17:4b:25:49:d4:2f:90:6e:dd:d0:28:48:34:c2:e2:75:5c:
d1:1a:7c:8c:db:32:37:cf:44:c9:e8:ea:37:dc:80:43:f6:75:
b3:f5:37:d4:63:47:fc:57:55:a3:fe:f9:d4:4f:fe:ef:13:48:
f0:95:37:b1:26:c6:5f:b5:a2:e3:46:24:3f:d6:32:54:d0:9e:
e6:f2:40:08:a2:1f:35:2b:0b:cb:22:ea:c6:31:0a:04:0f:90:
e3:80:29:cb:28:80:0c:f2:7f:19:09:91:ef:f6:d3:c8:2d:a9:
4d:c3:05:63:fc:5b:c5:90:bd:75:fa:fe:3b:2f:4d:b6:47:2e:
81:19:50:12:d0:db:98:78:98:c7:2d:04:49:a2:7f:a4:f5:fb:
40:3f:e0:38:f4:0e:c9:7f:5f:b9:7d:b1:db:7a:1a:71:2a:c8:
af:11:9f:db:42:6e:8e:f4:85:15:33:2e:0a:16:a6:b0:3d:25:
f5:45:42:38:5c:20:d7:3a:6d:9c:ee:c4:d1:d8:fc:ea:a4:15:
5a:e3:9b:01:8c:b5:dc:f5:a8:f3:fa:82:73:eb:aa:bc:89:57:
73:bf:9f:cf:9e:34:bd:66:5c:a8:5a:fb:fb:ca:06:2e:4a:d5:
09:6d:6c:44:a4:8b:dd:84:12:62:22:d1:fc:4b:af:05:f1:64:
e9:21:02:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXef5eqJmFtJG4fPomdp1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOWNmNWE1N2JjNzQ1NmQ3NDBiNDVlMWZlMDhlMzY5YTlh
MTcxNGEwHhcNMjMwMTAxMjIwNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWVlZjYyYTQxZDhkNmI3NjM0YjY4ZTczZWE1Y2Y0YjUwNWI3ZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqzRIwbqSG+SzSVgDhPq1cfegtMY
/xebyIDyKz9Ya0wsqLDKdjaNmCn3Jke/nWMdgFhOqBwb3Ch9UOewkqKCf+bEM7qf
RxyM7hLcX/jmDYQCC4aXPujsRVtUhp3x3MoNEr76XK/PboDAj2NvzggpYyg1BMUf
30dWi0jLxV9vgAmQTBJnbK8Z/3+zZQe+6YsSCObX6yklKR2H8F7EuzSahgnMb17T
RHe7uDmr2VUKB6YNiw+zWED476p0KllZhHpQNN1WldmCRYk9N8bIDjJV0hy4LtLX
r7/ZZ2Rzih4xqq5grDlIRM0b4W93ktjaJjeZrll99nCV5DlFwxLdwNj0XQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK7u9ipB2Na3Y0to5z6lz0tQW38eMB8GA1UdIwQY
MBaAFGqc9aV7x0VtdAtF4f4I42mpoXFKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXB6MXBYdkhSVzEwQzBYaF9namphYW1oY1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZmUzZDctOTIxNC00ZGUzLThmMWMt
MmMwYWJiZDJlODVkLzEvcnU3MktrSFkxcmRqUzJqblBxWFBTMUJiZng0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xZmUzZDctOTIxNC00ZGUzLThmMWMtMmMwYWJiZDJlODVk
LzEvYXB6MXBYdkhSVzEwQzBYaF9namphYW1oY1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPrZmMA0G
CSqGSIb3DQEBCwUAA4IBAQBiF0slSdQvkG7d0ChINMLidVzRGnyM2zI3z0TJ6Oo3
3IBD9nWz9TfUY0f8V1Wj/vnUT/7vE0jwlTexJsZftaLjRiQ/1jJU0J7m8kAIoh81
KwvLIurGMQoED5DjgCnLKIAM8n8ZCZHv9tPILalNwwVj/FvFkL11+v47L022Ry6B
GVAS0NuYeJjHLQRJon+k9ftAP+A49A7Jf1+5fbHbehpxKsivEZ/bQm6O9IUVMy4K
FqawPSX1RUI4XCDXOm2c7sTR2PzqpBVa45sBjLXc9ajz+oJz66q8iVdzv5/PnjS9
ZlyoWvv7ygYuStUJbWxEpIvdhBJiItH8S68F8WTpIQK2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:56 2024 by rpki-client on console-fra.rpki-client.org