Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1LEld4tJ6rMy36URrF_yGCjnNYQ.roa
File: 1LEld4tJ6rMy36URrF_yGCjnNYQ.roa (raw, json)
Hash identifier: x1+w2PjV21aMUwI3UykeLwMnOi0ybW0HVQaLY4XtyIE=
Subject key identifier: D4:B1:25:77:8B:49:EA:B3:32:DF:A5:11:AC:5F:F2:18:28:E7:35:84
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0185719E8AE11297D5B5F2AC5572DA39C88D
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1LEld4tJ6rMy36URrF_yGCjnNYQ.roa
Signing time: Mon 02 Jan 2023 08:34:53 +0000
ROA not before: Mon 02 Jan 2023 08:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60544
IP address blocks: 62.76.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 May 2023 15:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:8a:e1:12:97:d5:b5:f2:ac:55:72:da:39:c8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 08:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4b125778b49eab332dfa511ac5ff21828e73584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:fb:fc:f0:9b:d3:ee:59:93:c0:74:1c:50:
6e:9d:02:73:3e:61:15:ba:ff:21:59:2b:aa:2a:f3:
3b:d5:0f:42:b2:a4:4b:3b:e0:30:e9:5c:09:6b:fe:
d9:e1:9f:c4:ce:f0:3f:f5:3b:0f:ce:bb:b2:76:fb:
45:41:1d:5c:b5:84:fc:e0:a5:75:54:ed:b9:4f:4a:
e2:75:83:f0:0a:fd:a9:d1:87:d2:38:a2:a1:5c:2e:
23:a3:6d:1d:7c:8e:60:98:68:82:59:44:62:e5:96:
f0:ef:33:e0:1d:bb:cc:22:08:93:2f:fd:06:19:d1:
4b:94:26:b4:10:87:b2:ef:b7:53:1f:ca:4b:8a:12:
ef:cc:ff:1d:d9:75:16:64:ab:93:e8:4a:76:1a:b8:
8c:d1:54:ed:d0:b2:1b:10:49:cf:a8:4b:f2:a8:45:
e3:d6:af:43:13:e8:d2:25:2e:f7:d6:66:70:6a:83:
6d:1f:25:95:1c:3d:07:49:d1:ec:16:9b:da:af:67:
41:12:cd:cc:96:10:57:a2:77:9e:a8:37:dd:71:11:
fe:79:34:fd:e8:14:cd:7c:7f:66:4a:c8:f3:2b:31:
e5:47:34:6f:7d:52:13:cb:72:94:21:8a:8f:43:7d:
2a:d0:e2:d7:b4:dc:d0:ad:26:f2:a5:75:da:fa:a5:
5d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B1:25:77:8B:49:EA:B3:32:DF:A5:11:AC:5F:F2:18:28:E7:35:84
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1LEld4tJ6rMy36URrF_yGCjnNYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.205.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:77:24:53:61:fe:7c:20:06:14:44:90:c5:28:13:d7:a1:08:
7a:0b:39:b2:fb:24:0d:ba:3f:45:36:cc:84:69:39:68:31:6d:
b5:ca:64:9f:46:ab:e8:c4:1a:45:e9:e7:3d:1c:a0:e1:a4:93:
99:23:bc:06:01:aa:73:52:f9:54:c7:5d:61:c8:11:6c:33:4e:
e8:a8:90:da:e3:17:70:07:d9:0d:10:b6:29:a3:54:89:7c:7c:
fd:fc:52:07:12:4c:5b:ba:47:fa:78:18:ae:bc:16:d0:15:f6:
7d:9f:82:42:cf:6d:c7:be:4f:c9:1a:e4:e5:e7:52:62:8a:5e:
17:c7:34:0e:e1:49:c5:91:bb:6a:0e:73:6b:94:38:26:49:55:
74:d3:27:72:4a:85:8e:33:a8:44:21:db:b8:90:bd:7e:a1:85:
7b:39:17:95:30:ff:3d:70:ae:37:95:0c:2b:62:19:3a:ec:a9:
05:10:b4:2b:76:fd:cf:8a:f0:e2:1a:fd:66:6e:13:76:60:e1:
3d:f8:fa:31:38:4b:f9:fc:28:40:7e:5a:2c:dd:87:0b:fd:31:
de:2a:6f:02:08:50:a9:e6:43:8d:36:d3:1d:87:82:22:8d:8d:
7f:dc:f9:ab:84:4a:25:a8:95:ac:aa:3d:c5:48:47:c5:d9:62:
43:81:bf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org