Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/WX1CjF1WWHwhtvEuJalboA7aseU.roa
File: WX1CjF1WWHwhtvEuJalboA7aseU.roa (raw, json)
Hash identifier: t68NRw1Hrf9dcBHJT+uupe/Of6RyvYl+rzHESsWLwg4=
Subject key identifier: 59:7D:42:8C:5D:56:58:7C:21:B6:F1:2E:25:A9:5B:A0:0E:DA:B1:E5
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018B378813336E0EFD27824E7688A5379424
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/WX1CjF1WWHwhtvEuJalboA7aseU.roa
Signing time: Mon 16 Oct 2023 08:09:06 +0000
ROA not before: Mon 16 Oct 2023 08:09:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29084
IP address blocks: 62.73.112.0/22 maxlen: 24
62.73.112.0/23 maxlen: 24
62.73.112.0/24 maxlen: 24
62.73.116.0/23 maxlen: 24
62.73.113.0/24 maxlen: 24
62.73.117.0/24 maxlen: 24
62.73.115.0/24 maxlen: 24
62.73.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:88:13:33:6e:0e:fd:27:82:4e:76:88:a5:37:94:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Oct 16 08:09:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=597d428c5d56587c21b6f12e25a95ba00edab1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:79:d5:67:50:3c:97:9b:4f:b8:e3:f0:90:
86:43:f2:1d:91:53:81:7d:95:11:1d:20:b7:5e:a3:
6d:f1:e1:48:39:db:37:44:89:33:3e:81:72:5a:99:
72:99:14:7b:e3:36:4c:b2:21:0b:4a:14:b8:25:9d:
17:98:1a:38:48:d1:08:dc:70:63:5e:b6:6e:15:67:
d0:98:82:af:aa:9d:c9:a7:df:c9:9a:40:f7:d7:5a:
5d:ec:31:cd:73:69:2c:ba:39:ca:57:8f:59:0e:e2:
a6:f2:18:93:04:66:f4:da:2b:f4:ee:bb:1e:40:33:
f8:28:44:b6:f8:5d:8e:69:59:f7:d4:6d:84:9c:15:
18:0d:c0:ee:35:10:c3:2f:95:83:7f:a5:9b:8b:64:
c0:a4:8f:b4:f4:74:e6:08:26:dc:43:7c:c5:62:01:
2c:bd:32:e2:f3:43:74:95:5d:ca:58:4c:49:d0:dd:
29:db:71:e1:ce:7b:54:b8:9c:90:ef:03:15:18:6e:
50:c4:40:82:bd:3e:3d:0f:62:32:a5:4e:a6:f0:2d:
69:0a:52:d6:fb:c2:ec:42:67:1b:10:0d:70:49:ae:
3b:93:b3:db:29:88:f9:85:a9:3f:24:c6:b2:da:7f:
11:ac:80:cc:41:a4:02:3c:77:8e:35:8d:da:d7:b2:
42:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7D:42:8C:5D:56:58:7C:21:B6:F1:2E:25:A9:5B:A0:0E:DA:B1:E5
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/WX1CjF1WWHwhtvEuJalboA7aseU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.73.112.0-62.73.117.255
Signature Algorithm: sha256WithRSAEncryption
92:cf:29:49:a4:35:54:3d:ab:ab:47:85:a9:37:cc:19:d2:07:
b4:7e:fa:c4:da:b6:64:09:00:5e:1b:d1:37:3d:71:3e:c8:2b:
35:dc:24:2c:8f:41:bc:fa:a5:18:8c:0f:2e:7f:cf:df:c7:cc:
7e:0b:6e:a2:f8:d1:8f:94:99:53:a2:dd:e3:a4:7b:58:d7:e9:
8e:ae:e7:60:4f:76:03:52:aa:69:c8:88:0d:3e:9a:80:2b:f5:
46:c4:c4:a7:e5:a4:27:53:65:0c:00:91:5b:56:26:41:84:9a:
9c:f9:98:a1:aa:6e:95:9b:5c:45:41:c6:86:c6:80:a3:fb:b1:
cf:bc:c5:c9:fe:ae:ed:0e:9e:14:ea:c8:4e:5a:a8:aa:01:f8:
ca:c9:f2:25:16:1f:d6:66:fb:a0:58:ab:c5:6b:e0:e7:82:51:
e1:f9:3e:11:a5:87:26:30:26:a3:53:6a:72:08:b6:1f:e8:ba:
f9:f5:76:1e:45:e0:48:32:a0:3a:31:62:f5:2a:cf:5d:bb:95:
db:23:6f:6e:ab:8e:36:5a:98:b9:be:ca:57:fc:bd:35:47:e8:
d1:3a:ce:82:a4:a5:df:de:8e:6a:dc:c1:84:9c:a1:ec:0c:09:
f2:e0:61:ef:fe:0e:47:c2:79:aa:da:ae:63:7e:5b:54:29:bc:
00:6d:21:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org