Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B0PEtXdy_p9KalL-pKg03XCKpnA.roa
File: B0PEtXdy_p9KalL-pKg03XCKpnA.roa (raw, json)
Hash identifier: q5ruq2WP3P97nYQJuorZa4kK5y9N3xDOGVzmfjE4Z7M=
Subject key identifier: 07:43:C4:B5:77:72:FE:9F:4A:6A:52:FE:A4:A8:34:DD:70:8A:A6:70
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A1C6D004712591FD895BF7AAC4A934BD0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B0PEtXdy_p9KalL-pKg03XCKpnA.roa
Signing time: Tue 22 Aug 2023 08:47:00 +0000
ROA not before: Tue 22 Aug 2023 08:47:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 62.76.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:6d:00:47:12:59:1f:d8:95:bf:7a:ac:4a:93:4b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 22 08:47:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0743c4b57772fe9f4a6a52fea4a834dd708aa670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8c:a9:15:88:53:a0:9f:03:ac:e5:bb:fc:c4:
cb:46:6d:d4:e2:6f:b1:5f:da:be:22:af:78:5c:a2:
fa:b9:d5:e7:d6:95:2a:33:ae:06:93:cc:9d:32:4a:
01:f0:d5:bf:01:1f:6b:d7:68:50:00:9d:d6:b5:f1:
e4:d1:63:19:4e:7f:6c:39:94:46:7a:03:63:6b:c1:
32:a6:10:98:54:c3:3d:55:65:38:72:cc:b5:ad:41:
68:47:38:f1:8f:bb:11:6c:01:5c:d4:91:b8:dd:4b:
3f:bd:47:45:a1:cc:fa:5e:e2:ed:8d:6d:e8:7e:47:
ed:26:35:cb:2c:95:53:b3:14:94:f1:84:ca:d3:2b:
bb:c5:37:f8:f8:6c:98:fe:75:95:38:17:bf:f3:6a:
ec:6d:e9:2c:db:89:96:2c:6d:3b:13:ab:56:83:ad:
0c:17:f3:c0:fb:cb:83:d0:d7:1b:ab:da:7c:bd:fa:
07:5a:20:59:06:03:2d:5c:d8:76:82:ea:49:95:51:
91:5e:92:53:d3:e3:5a:02:46:3c:96:dc:56:48:09:
82:d4:54:e7:a4:b3:de:b6:c6:66:4f:ce:c4:86:2f:
ca:e9:66:33:23:dd:5c:fb:f6:fd:8d:91:18:7c:8c:
48:59:3d:9c:5a:96:50:ed:d1:87:a6:6a:dd:33:92:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:43:C4:B5:77:72:FE:9F:4A:6A:52:FE:A4:A8:34:DD:70:8A:A6:70
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B0PEtXdy_p9KalL-pKg03XCKpnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:44:73:10:eb:9b:a9:e9:db:6f:e0:19:26:82:fc:7d:b8:c0:
eb:67:72:56:a3:23:0f:93:32:ff:8b:5e:39:5d:35:a3:92:30:
f2:44:ae:b7:43:44:47:eb:14:8f:1e:3c:5a:7b:c3:8d:39:2c:
f8:61:b6:07:48:38:c6:1d:0d:4b:c7:55:ee:a7:76:b7:b3:7c:
5a:00:56:43:81:e3:34:bc:a4:29:4c:a8:1e:0f:c3:d1:24:d0:
16:cc:d2:00:1e:8b:ac:39:36:d3:f4:79:24:97:00:1b:58:d6:
f8:19:5c:20:d3:1f:32:f6:ec:3d:51:bb:a2:78:a1:40:e4:7a:
bf:59:65:2e:b5:29:04:24:eb:d4:8c:b0:81:9d:39:44:9f:a2:
7b:7f:b1:3e:e3:e2:06:9b:20:46:a1:78:c0:dd:c4:41:ff:5e:
36:ac:52:ce:ef:40:18:ac:02:01:37:c9:d5:ea:51:36:a9:42:
85:1d:aa:38:e3:eb:40:a5:77:e7:7e:e8:d1:ae:b9:cc:d5:9f:
a3:81:62:2a:0b:57:7a:15:48:2c:04:a1:5f:0e:9d:ba:4e:78:
c9:69:cf:04:d3:4a:ee:61:7d:50:6e:7a:91:c6:10:c4:9a:a2:
0d:7f:c5:f8:8a:84:ef:a5:37:d1:4c:3b:6b:c0:df:a6:f5:3b:
02:c3:45:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 18:27:25 2023 by rpki-client on console-fra.rpki-client.org