Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c_xpi1B41KWsg8IcWMb6WR6L8y4.roa
File: c_xpi1B41KWsg8IcWMb6WR6L8y4.roa (raw, json)
Hash identifier: Lpx7lh5N9p8jrm4UcZPBSggsG1RtlqNvyXqqVp1RIJ8=
Subject key identifier: 73:FC:69:8B:50:78:D4:A5:AC:83:C2:1C:58:C6:FA:59:1E:8B:F3:2E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B98619E4C2746C27D762694856343F77C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c_xpi1B41KWsg8IcWMb6WR6L8y4.roa
Signing time: Sat 04 Nov 2023 03:30:16 +0000
ROA not before: Sat 04 Nov 2023 03:30:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47585
IP address blocks: 62.76.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:98:61:9e:4c:27:46:c2:7d:76:26:94:85:63:43:f7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 4 03:30:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73fc698b5078d4a5ac83c21c58c6fa591e8bf32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:23:93:1f:55:ba:31:4a:5d:7f:a2:06:89:7f:
b6:67:94:2d:39:0d:49:3f:15:ec:38:2e:bf:5c:84:
f7:b0:e5:22:00:af:8c:f0:fb:c4:eb:93:9e:7e:5f:
ef:30:af:5a:3a:c1:6c:d9:6e:c5:d1:54:d9:22:2b:
68:ca:de:ba:a2:9b:15:4a:18:0a:12:e6:18:13:2f:
5f:92:47:50:3d:e8:ba:b9:ce:81:9e:18:5b:36:91:
10:c3:b0:29:8b:c0:aa:94:54:48:7e:fa:1d:de:db:
3f:fb:26:cd:06:f2:6e:00:5f:64:07:a5:01:6c:6b:
11:9a:dd:36:51:c2:2a:d3:cc:9b:07:e7:ac:27:79:
15:bb:69:40:f2:e3:4a:c7:61:5b:45:1b:96:ae:b6:
e0:7f:5e:78:8a:49:3f:5e:3b:a2:30:7b:83:f7:37:
1f:b0:c1:a7:12:d9:28:64:11:60:ea:76:58:63:86:
79:39:4a:f9:b2:70:fe:f1:d6:2c:0b:77:d8:6f:e5:
43:71:d2:b4:f4:30:e3:99:b8:d6:d3:eb:67:60:4c:
70:66:14:b6:10:c4:2e:28:ef:71:1e:3f:47:fb:3d:
4d:5a:53:33:34:37:86:fc:a4:53:50:f8:32:fd:5d:
56:fd:f0:fd:3d:5c:ea:b4:b6:a2:4c:bb:a3:1c:70:
b5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FC:69:8B:50:78:D4:A5:AC:83:C2:1C:58:C6:FA:59:1E:8B:F3:2E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c_xpi1B41KWsg8IcWMb6WR6L8y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
Signature Algorithm: sha256WithRSAEncryption
63:04:eb:48:56:d2:fd:31:f2:f7:05:be:60:4d:70:31:e8:d0:
27:f2:b6:1d:3a:bf:b0:96:11:55:81:cf:cc:d9:40:8b:18:b3:
02:1e:80:76:0e:d4:48:08:3e:e4:00:3c:1f:01:69:b2:60:11:
d5:c8:5d:5e:74:97:8b:83:db:5b:0d:a8:c1:17:98:fe:c3:cf:
a8:1f:65:61:64:83:3b:4d:2d:28:6b:d9:8e:18:6a:fc:5b:3d:
5d:dd:3a:f9:d4:26:82:14:b3:d7:f7:4d:91:c0:b6:7a:06:0c:
48:83:49:55:24:36:00:0f:77:fc:29:47:6f:26:8c:16:60:07:
bb:96:bd:33:ab:f0:75:f4:be:13:aa:61:9f:ac:f4:86:51:e6:
ce:4f:93:fb:2d:ff:53:fa:d3:f1:80:88:d1:1f:4b:39:03:ef:
42:51:b1:40:88:ec:74:58:10:6b:99:04:03:74:a5:4e:2e:84:
0c:0f:b4:04:da:5d:5d:8a:ec:1d:b6:9a:9c:b0:d3:07:f9:e9:
52:ae:ed:55:47:02:b8:97:3a:e1:d2:25:63:a3:45:d9:24:46:
a8:48:7e:2c:5c:79:fa:cc:0f:4a:19:67:96:49:fa:73:76:78:
83:4a:8f:94:fc:62:2d:e1:1d:48:f6:63:41:1f:7b:04:6c:f8:
82:41:90:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:21 2024 by rpki-client on console-fra.rpki-client.org