Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/f3l1Am2nw1vCTSx7GhFc6ETnJXs.roa
File: f3l1Am2nw1vCTSx7GhFc6ETnJXs.roa (raw, json)
Hash identifier: X9m1yludSdol4eszcODEYVcbw6y+TPc5KLkOKKJXj/0=
Subject key identifier: 7F:79:75:02:6D:A7:C3:5B:C2:4D:2C:7B:1A:11:5C:E8:44:E7:25:7B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BAAB20FE30346BC3CB17D56A37E47502A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/f3l1Am2nw1vCTSx7GhFc6ETnJXs.roa
Signing time: Tue 07 Nov 2023 16:51:18 +0000
ROA not before: Tue 07 Nov 2023 16:51:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 62.76.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:b2:0f:e3:03:46:bc:3c:b1:7d:56:a3:7e:47:50:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 7 16:51:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f7975026da7c35bc24d2c7b1a115ce844e7257b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:27:44:02:bc:f3:0a:48:58:a8:51:89:6e:f7:
a4:66:98:ad:53:74:52:93:34:d2:8d:09:83:c0:76:
94:39:2a:a1:44:45:d6:35:4a:e6:66:07:41:50:0e:
af:fe:c4:b3:4a:ac:bb:ee:4d:c0:d6:ef:3e:d9:ef:
c8:b2:17:50:69:94:ee:b0:74:06:3d:75:3a:c2:7c:
9a:f3:54:b6:dc:46:ff:e5:69:06:0e:d6:1e:fd:12:
e5:de:da:5c:bd:22:70:4d:86:9f:74:ff:eb:b5:d5:
2a:06:b8:3f:35:79:fe:75:26:df:10:4d:28:aa:d1:
04:98:6f:cd:02:a4:42:ed:84:19:fe:05:4d:18:51:
28:89:95:8d:af:e0:ec:12:a2:d0:ea:d5:85:d4:2c:
d8:49:71:7b:ae:a1:bf:6f:75:14:11:e3:a9:64:a5:
94:0a:84:68:55:e2:cf:60:0e:eb:5f:54:10:96:fd:
d3:3b:54:63:e6:8f:3d:93:8b:2c:88:80:88:a7:91:
a2:53:0a:50:e8:53:e8:65:70:cf:17:cb:44:71:2e:
6d:e6:d0:f3:65:f8:7e:fb:ea:70:37:80:1a:2f:f1:
b3:b7:6d:91:af:2f:a9:cb:3f:88:ee:3f:2b:6f:58:
ea:aa:50:0f:ec:26:12:5a:14:a0:8c:13:87:97:84:
7a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:79:75:02:6D:A7:C3:5B:C2:4D:2C:7B:1A:11:5C:E8:44:E7:25:7B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/f3l1Am2nw1vCTSx7GhFc6ETnJXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
Signature Algorithm: sha256WithRSAEncryption
22:99:0e:56:31:09:b0:03:08:41:0d:94:38:48:32:1e:de:cc:
29:90:42:20:3d:e3:22:2a:61:3a:14:23:d7:7f:e1:0d:80:e8:
57:d4:25:70:74:ff:8c:2c:3a:42:6d:c4:c5:9f:d8:e3:5f:00:
c1:1f:db:cb:1f:1e:1f:e2:cc:c1:86:9a:56:4a:96:f4:ff:24:
a4:ba:4f:da:f2:db:ab:04:f9:b0:2d:6d:8b:b8:e4:03:fd:b3:
42:34:89:2d:d0:ee:e9:05:28:9e:b6:d0:a2:8e:92:34:64:65:
57:09:e0:6d:d7:9d:c4:80:cb:ae:1e:04:72:16:82:3f:ee:e2:
5e:35:52:21:df:70:5b:7b:be:f7:07:dc:cb:da:df:be:b2:9f:
23:d6:f5:66:e2:b3:91:48:18:da:09:14:03:86:9f:09:a4:d1:
33:c8:63:f0:3a:03:53:25:2f:42:06:1d:87:43:7b:df:ea:72:
cd:fc:ad:47:a6:3b:67:e0:58:95:74:81:6e:22:aa:f5:9f:e7:
3d:2e:2a:08:55:17:a2:d2:ee:3d:88:9c:9f:a2:b6:65:e8:24:
69:e5:d2:4b:9c:b3:cc:04:e8:4f:d0:86:1d:5d:56:e8:67:2d:
53:e2:a6:d6:90:ad:29:0f:2d:df:eb:0e:97:76:d3:5c:61:e4:
e1:50:64:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 18:43:48 2023 by rpki-client on console-ams.rpki-client.org