Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IRnUY33rBwpSvm6h5QLuYo7BTz0.roa
File: IRnUY33rBwpSvm6h5QLuYo7BTz0.roa (raw, json)
Hash identifier: OANDGn7IDWK1u7IGLEkAe44KiLWngk8HfJZRnznZpIc=
Subject key identifier: 21:19:D4:63:7D:EB:07:0A:52:BE:6E:A1:E5:02:EE:62:8E:C1:4F:3D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CFD7DFB94CBA3D3C698BA16642C818970
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IRnUY33rBwpSvm6h5QLuYo7BTz0.roa
Signing time: Fri 12 Jan 2024 11:45:41 +0000
ROA not before: Fri 12 Jan 2024 11:45:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199760
IP address blocks: 62.76.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 15:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fd:7d:fb:94:cb:a3:d3:c6:98:ba:16:64:2c:81:89:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 12 11:45:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2119d4637deb070a52be6ea1e502ee628ec14f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:e9:a5:03:7a:48:86:22:be:66:69:a9:f4:
85:a1:88:0c:9e:29:61:1d:a3:fe:85:8a:47:c2:02:
c6:84:33:7a:c8:2f:69:4d:6e:06:9b:70:6b:8e:d0:
d2:5e:49:54:bf:dc:cd:d6:38:81:76:f3:4b:ba:77:
e1:13:55:2e:ba:ee:95:3b:e3:b2:15:1d:24:ad:90:
2d:c2:cc:14:8d:c0:e5:00:e1:51:b2:43:c0:3e:a9:
7a:9c:6b:b3:44:00:fa:84:f5:41:35:8d:13:4b:90:
e1:2a:be:c0:81:78:38:56:00:a1:7f:56:38:f6:e9:
dd:9d:27:fe:51:cb:d4:2b:ed:2e:85:93:11:8d:35:
66:ca:e3:57:b1:f5:3d:06:5c:23:cf:9e:f6:55:39:
c4:9f:94:8f:d6:23:2b:b8:ff:31:05:7b:e9:23:62:
06:d6:5f:7f:e3:de:99:f2:39:74:b5:9b:ff:91:25:
40:d9:2e:84:8a:b1:46:b0:ea:8d:9e:28:d8:bc:02:
1f:05:6a:0b:bf:c9:07:a5:af:9e:67:a9:c1:ff:a0:
23:83:44:2b:7f:c3:79:a1:92:39:ec:16:88:ed:19:
b3:39:e7:8e:1a:36:35:d9:9a:dd:c2:7d:38:ba:bc:
f6:27:91:d9:48:1b:41:87:a9:1a:48:c9:e1:e5:d3:
a6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:19:D4:63:7D:EB:07:0A:52:BE:6E:A1:E5:02:EE:62:8E:C1:4F:3D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IRnUY33rBwpSvm6h5QLuYo7BTz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.224.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:a0:c9:60:91:fa:11:0f:d9:3c:69:39:b5:a8:4b:4e:4c:fa:
46:24:de:7b:6d:fc:08:e3:63:06:27:63:3e:86:01:7b:e0:a0:
a1:fa:7a:e5:76:01:97:39:cc:f9:37:72:56:c3:bb:39:1b:ad:
fd:dc:71:73:68:9d:2d:95:36:19:bd:ea:04:b3:2b:74:c0:58:
99:49:16:7d:c9:6a:ec:ae:ab:16:15:a7:b0:a5:c7:1b:2e:49:
da:2c:d9:28:d1:6f:23:61:cf:67:04:40:24:15:97:aa:4e:51:
0d:ce:88:f3:35:b6:34:c7:6e:c0:9a:c7:30:a2:02:31:49:99:
12:09:26:8f:ee:aa:b7:0b:1e:a9:6a:e4:1b:39:a2:a3:95:1b:
cb:63:b2:83:c0:d3:27:f3:26:52:93:d2:eb:c8:8f:f0:d0:07:
08:97:71:0d:59:cb:1d:01:1f:45:87:d5:39:c5:5a:dd:e2:a9:
23:c3:12:0c:cb:3f:52:e8:3b:e0:17:14:12:d8:f2:67:67:c2:
92:c9:64:ec:4e:2a:c5:9a:dc:ea:ae:c7:61:d7:b2:b3:0b:e6:
92:6e:26:a1:55:d3:ba:cc:1e:6a:17:dc:06:cf:b9:b4:7e:04:
b7:36:00:ac:5e:90:35:b4:53:a2:8d:03:b8:80:6d:73:66:01:
99:fb:58:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 17:51:01 2024 by rpki-client on console-ams.rpki-client.org