Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0UXANEwKk-UeOy7CzIFXiDmtUso.roa
File: 0UXANEwKk-UeOy7CzIFXiDmtUso.roa (raw, json)
Hash identifier: lIZMA7+nZdXW/Z4pX++35bqEdpCYPhiFLp9COLfEIpI=
Subject key identifier: D1:45:C0:34:4C:0A:93:E5:1E:3B:2E:C2:CC:81:57:88:39:AD:52:CA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187E6660FCDABE1B957F60C33951C5B9B26
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0UXANEwKk-UeOy7CzIFXiDmtUso.roa
Signing time: Thu 04 May 2023 10:54:21 +0000
ROA not before: Thu 04 May 2023 10:54:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 62.76.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:66:0f:cd:ab:e1:b9:57:f6:0c:33:95:1c:5b:9b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 4 10:54:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d145c0344c0a93e51e3b2ec2cc81578839ad52ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:db:44:25:6b:20:78:06:31:18:de:44:97:
3c:14:33:45:e6:7d:e9:16:b2:62:ea:69:00:16:ea:
37:a6:12:b4:cf:92:56:ce:05:e2:3a:44:29:94:96:
62:85:cf:32:c3:f7:77:4b:67:dc:25:77:d5:6c:81:
eb:76:fb:07:3c:84:01:76:6b:b0:75:f2:bc:de:55:
cc:11:c7:1c:38:a0:0d:9f:de:41:c5:3e:44:91:08:
56:39:70:6b:7e:f8:e6:9b:e4:59:2e:61:95:41:e4:
5d:9b:5a:9e:2f:f4:76:bc:ca:e3:54:de:56:1c:5c:
ac:c6:ad:ed:24:cc:7b:6f:18:75:26:4e:64:2e:07:
c9:99:e1:47:43:4c:9b:94:1f:a0:b0:79:e7:a6:a7:
4e:65:c9:d3:81:38:41:c4:82:e4:5d:63:44:c4:9f:
d7:08:86:10:86:c7:67:23:4d:3f:db:3b:aa:19:a2:
24:d3:fb:46:39:79:2a:e4:99:d7:e9:96:32:78:5e:
11:ae:95:93:f9:71:9c:b5:76:ab:9e:fc:98:b6:84:
92:bf:cc:1f:99:46:dc:06:57:99:29:fd:b0:21:e5:
f2:e2:a3:1d:b7:42:f5:98:97:2e:ef:74:40:1a:33:
ce:f7:26:6f:db:3c:a7:83:2c:3b:29:6f:e0:4b:c4:
7a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:45:C0:34:4C:0A:93:E5:1E:3B:2E:C2:CC:81:57:88:39:AD:52:CA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0UXANEwKk-UeOy7CzIFXiDmtUso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.235.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:79:64:49:eb:2a:c2:49:02:d1:3b:07:e0:6b:d6:35:8d:fe:
c8:40:2f:41:cf:53:01:4b:90:3d:94:73:eb:69:5a:bc:8a:94:
4a:12:7e:ca:4b:05:3a:50:34:20:ac:c3:f0:4a:5d:de:b0:a0:
ae:0a:2b:2d:9f:54:a5:b7:a2:79:90:af:f1:84:30:46:7c:82:
6f:59:a4:45:52:36:b0:2f:5b:85:8c:3f:97:8d:68:7b:48:9f:
b7:16:e4:8b:9e:d4:e6:88:57:fc:60:26:c5:e1:a7:6e:08:5a:
8e:32:65:90:9f:71:4b:18:da:f6:b4:4f:b3:16:03:22:cd:8e:
4f:ec:5e:ac:e9:f4:a0:d8:ab:84:ff:80:23:2b:ef:2f:03:48:
3c:e9:7b:31:6a:ee:ab:0b:8b:76:37:54:41:b4:7a:17:32:6d:
99:ab:24:df:52:d2:96:9f:12:d5:39:ec:33:05:46:c4:c2:c5:
f1:70:ac:f0:20:d0:7e:86:ef:53:9e:79:55:e2:3d:6f:09:76:
e0:55:59:52:53:f7:9d:a7:d7:e6:83:61:fc:51:9b:88:f8:be:
09:3f:70:10:56:7e:26:63:69:83:d1:21:26:68:f3:2f:55:46:
ad:7f:27:b2:49:04:5c:0f:23:93:8e:9f:9a:a8:9e:b8:04:70:
7f:e8:14:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 13:30:17 2023 by rpki-client on console-ams.rpki-client.org