Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/n9I08vm4Of9nMxspxO67aMaL_uE.roa
File: n9I08vm4Of9nMxspxO67aMaL_uE.roa (raw, json)
Hash identifier: S/BFa6PhWGd0TT/DpZOuIHFdjnWsnqQLRmeRNUF9gII=
Subject key identifier: 9F:D2:34:F2:F9:B8:39:FF:67:33:1B:29:C4:EE:BB:68:C6:8B:FE:E1
Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial: 018D78B55DF196F798DCCF1D0579DF8907C6
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/n9I08vm4Of9nMxspxO67aMaL_uE.roa
Signing time: Mon 05 Feb 2024 09:59:28 +0000
ROA not before: Mon 05 Feb 2024 09:59:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12479
IP address blocks: 62.151.128.0/19 maxlen: 24
62.151.168.0/21 maxlen: 24
62.151.184.0/21 maxlen: 24
62.151.192.0/18 maxlen: 24
185.124.24.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:b5:5d:f1:96:f7:98:dc:cf:1d:05:79:df:89:07:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Validity
Not Before: Feb 5 09:59:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fd234f2f9b839ff67331b29c4eebb68c68bfee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c2:55:d8:da:4f:eb:10:c3:d8:aa:37:7a:fd:
cf:39:f9:b6:1f:6c:39:51:91:5b:7b:a1:c3:ba:8c:
39:22:d1:e4:7d:8f:16:14:a4:a8:bb:7a:87:00:e6:
75:72:9c:7e:d3:3c:37:e1:66:0a:c4:91:f0:96:2f:
e5:24:18:cf:75:15:59:06:a0:96:43:62:06:d1:37:
a8:2a:70:a5:21:ae:c8:2b:30:68:62:2c:a8:7b:f9:
56:5f:bc:bc:5e:45:bf:6a:d8:1e:89:e8:c3:62:bf:
87:d4:30:57:b9:11:9e:1a:2f:dc:c5:2f:c0:e8:d4:
ed:6b:bb:39:5f:9e:46:1e:31:fb:75:a4:b7:cc:61:
7b:69:15:28:76:f1:ac:05:16:2f:21:4e:b9:b4:79:
57:e2:b8:03:02:bc:60:d5:fc:27:cf:21:92:a4:77:
c1:26:9e:ed:c4:dd:d5:56:b8:a6:bb:b4:e4:9a:e9:
d6:33:4d:bb:2b:6f:d8:63:3b:f4:df:00:09:8e:96:
42:3a:51:40:87:c3:ee:ee:a2:f5:bc:fc:52:09:4b:
8f:44:71:e0:91:ec:42:09:29:19:13:d3:e0:08:eb:
2c:dd:7b:39:c2:d2:63:f4:58:17:ab:71:62:d2:e0:
4e:2c:90:f9:22:ef:96:79:71:97:22:56:68:19:c1:
1e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D2:34:F2:F9:B8:39:FF:67:33:1B:29:C4:EE:BB:68:C6:8B:FE:E1
X509v3 Authority Key Identifier:
keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/n9I08vm4Of9nMxspxO67aMaL_uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.151.128.0/19
62.151.168.0/21
62.151.184.0-62.151.255.255
185.124.24.0/22
Signature Algorithm: sha256WithRSAEncryption
66:ea:f6:dd:ff:9b:23:ec:7a:7d:a2:3a:6a:61:9d:b0:5d:8d:
26:22:45:59:fb:85:28:e9:41:8f:42:ae:30:ef:99:74:cf:a8:
18:ac:1e:9b:ac:12:f2:c6:b7:4e:df:34:38:37:d9:bd:3d:f6:
a8:c1:cf:7a:9f:0d:34:87:6b:ee:b4:ad:3b:00:b7:76:1a:0e:
e4:8f:97:5a:72:19:86:d6:48:9d:49:4c:00:9b:88:af:ea:82:
56:55:f3:0d:11:d7:a7:f9:a3:07:35:5a:ad:f9:2e:8a:52:c4:
f3:31:cb:51:ab:a3:84:0d:10:ce:84:00:95:72:ce:90:39:1f:
0a:03:e5:f4:8c:f7:84:7d:41:69:31:a3:a2:98:9f:13:6a:c8:
1f:09:f4:a0:df:55:06:23:9a:cf:13:f7:e3:d2:12:16:68:c5:
f7:1c:e0:6a:1f:b9:30:32:e9:1b:3c:8b:a1:c2:d8:16:e8:8e:
e7:d5:fa:05:5d:45:1c:9a:92:59:0c:ca:fe:81:e6:bb:59:74:
ad:a6:75:9a:af:8c:3e:a5:c6:a0:c9:1a:64:f8:99:59:86:e8:
51:b2:ec:df:1d:49:33:3b:bd:c3:68:bf:96:32:11:b4:4c:3e:
82:6c:d1:79:bd:c2:a1:ce:f1:84:53:8e:6b:84:02:d4:ce:28:
9c:38:72:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:10 2024 by rpki-client on console-fra.rpki-client.org