Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/R7SGmUx2Kez57CZU0gs7obnRM5I.roa
File: R7SGmUx2Kez57CZU0gs7obnRM5I.roa (raw, json)
Hash identifier: dazNfeVwdeAFCUOcTXTeksvtqevg1DlVRxiZhMQXYBs=
Subject key identifier: 47:B4:86:99:4C:76:29:EC:F9:EC:26:54:D2:0B:3B:A1:B9:D1:33:92
Certificate issuer: /CN=7a8746a76cda8369009d28941ef156239c6a63a1
Certificate serial: 01856F94AB174C841A1B24722233DD454C89
Authority key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/R7SGmUx2Kez57CZU0gs7obnRM5I.roa
Signing time: Sun 01 Jan 2023 23:04:52 +0000
ROA not before: Sun 01 Jan 2023 23:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6660
IP address blocks: 62.25.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:ab:17:4c:84:1a:1b:24:72:22:33:dd:45:4c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8746a76cda8369009d28941ef156239c6a63a1
Validity
Not Before: Jan 1 23:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47b486994c7629ecf9ec2654d20b3ba1b9d13392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:77:76:da:b1:42:e8:f8:46:84:61:c2:94:
1a:49:72:17:67:4f:e3:c6:de:0a:d1:43:21:c9:fa:
93:72:4f:f2:20:f0:56:9d:bc:e6:54:98:a8:7b:b8:
d9:6f:ba:09:21:10:16:ab:31:7b:82:ca:31:1c:e6:
44:e8:b9:f5:8b:65:4b:90:bb:4c:09:73:be:8e:b2:
69:2f:d9:d0:f1:56:6d:8a:b0:9c:ea:97:b7:01:e0:
c1:49:53:0c:85:40:cf:cd:7f:7a:3b:2c:f3:35:9b:
d9:7f:5f:fb:7c:d4:5e:f0:09:fd:30:f5:39:e5:38:
56:be:4a:98:5d:8f:79:0c:6d:e7:e8:c8:ba:ac:62:
da:ab:92:3d:7e:f6:b8:5e:65:ce:b0:bb:5d:de:a1:
8b:26:95:f2:2f:08:f7:6e:f8:9f:67:5c:98:c3:c0:
ad:d6:d9:bf:88:ad:c1:87:ad:7b:89:1c:d4:ea:13:
f3:1e:17:e4:34:5b:65:b0:bc:eb:ec:dc:99:b8:f9:
2a:ef:fb:af:28:ff:ed:75:86:3a:59:c9:ec:62:f2:
24:db:f4:4c:99:8b:0a:f5:eb:a9:ce:e7:02:1b:94:
fe:63:86:de:39:34:02:49:50:c5:c0:a2:2e:67:ea:
20:6c:65:e3:2c:eb:a7:97:64:f9:3c:93:ed:a4:01:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B4:86:99:4C:76:29:EC:F9:EC:26:54:D2:0B:3B:A1:B9:D1:33:92
X509v3 Authority Key Identifier:
keyid:7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/R7SGmUx2Kez57CZU0gs7obnRM5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.25.128.0/17
Signature Algorithm: sha256WithRSAEncryption
09:be:40:fe:18:51:ba:04:e3:b4:db:51:61:c2:9b:d2:04:d0:
3f:e7:2f:82:71:99:aa:8c:d6:8c:0a:44:8b:27:db:05:a8:d4:
d4:be:25:02:33:f5:2c:79:7a:f8:ea:72:69:8a:82:ed:bd:e7:
e9:fb:2f:40:cf:5b:9c:52:5c:e5:16:40:66:d2:43:68:23:9a:
ec:dd:09:cc:4a:e1:c2:f0:a1:a5:1d:33:32:f0:21:2a:9f:87:
a3:3b:2d:e9:e5:c2:7a:6e:be:93:fd:14:d2:63:1a:16:67:fb:
22:a5:39:ac:ef:a8:85:ba:7c:3f:20:1d:ee:d7:40:84:aa:af:
88:5e:6a:28:8b:39:b9:d7:5e:a7:a3:bb:10:85:00:cc:97:43:
ee:56:b1:6f:1d:0b:ee:5f:28:45:93:12:44:41:0c:eb:ce:c0:
24:74:65:ee:df:d4:42:cf:9c:07:25:9e:a1:e7:ea:9f:4c:49:
fd:62:a0:51:99:47:49:55:32:7e:36:d7:ee:8e:68:50:d9:c8:
9e:7a:da:7e:dd:24:a3:4b:10:93:3a:ae:0a:6e:e8:a1:b3:8b:
2d:da:1d:02:07:10:18:65:28:05:92:c9:d0:67:f5:b1:56:53:
e2:17:53:34:60:98:29:f2:f4:60:08:7d:a6:e3:53:1e:a3:97:
cc:c3:72:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:22 2024 by rpki-client on console-ams.rpki-client.org