Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/r2RAXijAABArUrlCGLednSgIP2o.roa
File: r2RAXijAABArUrlCGLednSgIP2o.roa (raw, json)
Hash identifier: RjK2V2wxCD1HishJoLOsDGk9opwiEsZf2BDR0aQQv1g=
Subject key identifier: AF:64:40:5E:28:C0:00:10:2B:52:B9:42:18:B7:9D:9D:28:08:3F:6A
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018B4121591CC3D2899F068F68656D753E90
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/r2RAXijAABArUrlCGLednSgIP2o.roa
Signing time: Wed 18 Oct 2023 04:53:06 +0000
ROA not before: Wed 18 Oct 2023 04:53:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41719
IP address blocks: 62.76.141.0/24 maxlen: 24
194.190.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:41:21:59:1c:c3:d2:89:9f:06:8f:68:65:6d:75:3e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Oct 18 04:53:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af64405e28c000102b52b94218b79d9d28083f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ee:a9:ed:bd:b6:22:b4:dd:e5:ec:d4:1f:32:
6d:0b:11:a0:50:80:b9:21:34:61:6e:cc:4c:29:db:
98:8b:de:d7:0a:9c:ec:ea:76:ff:5f:cf:90:cd:2f:
a0:15:d5:0c:97:95:de:15:40:7f:8d:c8:9d:33:9e:
a6:68:ce:e9:9e:b4:a8:e3:19:ce:2f:fe:e1:99:a4:
7f:a9:82:94:18:1d:10:e6:fd:d6:24:3d:f0:da:73:
13:46:63:c6:db:98:d6:bc:70:80:26:29:06:55:5a:
f6:f7:91:b1:be:29:c6:c0:50:af:38:05:28:1b:56:
38:c3:f4:75:90:c0:f9:2b:e5:d1:7e:33:80:97:0e:
ff:9a:e6:06:82:2d:1f:42:e7:f3:48:f3:42:9d:84:
9e:53:29:83:68:75:5c:74:bb:6a:30:e6:69:1f:8c:
56:88:3d:49:69:16:fb:fa:09:ba:a9:5e:eb:c6:80:
fd:ff:6f:dc:1d:11:2f:74:bd:dd:1d:9b:a4:ba:37:
52:33:4a:a8:e6:c2:84:a2:2f:67:51:c6:df:15:e9:
d0:25:52:82:cc:28:75:77:ed:6b:f5:96:75:91:09:
6a:fa:e9:58:a1:91:17:5c:00:69:60:94:97:79:f5:
41:4c:85:f4:1e:cd:e8:01:31:d9:fe:85:5d:55:1b:
6c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:64:40:5E:28:C0:00:10:2B:52:B9:42:18:B7:9D:9D:28:08:3F:6A
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/r2RAXijAABArUrlCGLednSgIP2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.141.0/24
194.190.69.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:1d:82:62:c4:db:c9:60:92:e4:61:f7:3c:90:76:53:58:12:
57:03:3e:8a:cf:8e:4c:a8:2d:a0:de:42:37:35:af:e4:47:6b:
26:79:44:b5:ee:38:53:73:2a:be:13:71:28:a1:d8:87:b5:52:
4d:6a:cf:1d:92:11:b8:d1:79:fc:09:c4:87:a0:21:74:73:5e:
05:d3:ad:1d:eb:a7:43:99:5d:63:16:1a:c2:45:94:ed:aa:f6:
f8:de:4b:14:d1:f9:e9:44:84:6a:dd:a0:80:09:96:05:cf:17:
bc:f5:01:22:4e:f6:f7:a4:dc:7c:d6:50:54:f8:b7:08:1b:fa:
62:a4:65:2d:87:95:9b:9b:c9:45:67:66:ed:ed:62:52:4f:43:
f3:2a:96:29:7d:cd:96:ce:c8:b5:c3:e6:24:4e:39:72:17:7e:
c1:bf:5f:c1:30:9d:0e:15:a3:34:4b:63:af:89:5f:bd:8b:ed:
81:af:7a:cb:40:46:cd:ed:14:c1:25:90:a3:dd:8e:3f:41:ce:
90:53:e7:09:7b:a8:88:e0:1d:1a:45:c6:02:e8:5c:07:16:2d:
de:1c:8a:fe:02:f6:db:e9:fe:ab:e6:c2:f8:ca:6c:a7:d7:ed:
3c:af:f9:fc:e6:3e:35:51:0f:10:40:d6:d4:df:8a:6b:55:10:
0a:88:61:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org