Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gxoZ65l9wv07RZeA1h3nwJzNWsY.roa
File: gxoZ65l9wv07RZeA1h3nwJzNWsY.roa (raw, json)
Hash identifier: GoIkP85MPOqzbVrCR1IFjx41Ffz0HGOnUiCuKLf+0XI=
Subject key identifier: 83:1A:19:EB:99:7D:C2:FD:3B:45:97:80:D6:1D:E7:C0:9C:CD:5A:C6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C4E3192A7A883A68F84485A9D7798F567
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gxoZ65l9wv07RZeA1h3nwJzNWsY.roa
Signing time: Sat 09 Dec 2023 10:48:40 +0000
ROA not before: Sat 09 Dec 2023 10:48:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 62.76.224.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4e:31:92:a7:a8:83:a6:8f:84:48:5a:9d:77:98:f5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 9 10:48:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=831a19eb997dc2fd3b459780d61de7c09ccd5ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:f8:7d:a1:c6:9a:c2:a8:c2:fb:a9:0d:17:
10:7e:44:ff:6e:e5:7e:aa:a2:e0:8c:dd:bc:cb:fb:
7d:99:c3:ef:ab:6a:07:92:3d:5d:1a:59:bb:d1:77:
ef:a3:05:3a:73:27:87:b4:37:ac:7d:53:b5:91:5b:
cf:20:25:e6:d1:a4:a6:89:1d:97:6e:5f:b3:a1:58:
bd:21:ee:67:99:39:45:da:96:97:e0:ba:3a:41:a9:
4f:c8:95:0e:82:15:f8:09:11:53:98:36:bc:01:9e:
00:61:60:69:9e:71:cd:0c:e2:90:48:60:e8:ff:f5:
d2:74:36:f3:e7:50:42:b6:e0:af:ac:b3:26:fe:a1:
56:3d:fd:1c:a2:d7:79:07:b1:84:a5:37:6b:4f:a1:
8c:d0:de:19:15:c0:4b:44:f6:af:e3:7a:f9:48:d9:
3c:cd:b2:01:b5:21:c0:62:53:3d:60:97:fe:41:28:
60:05:44:cf:68:b5:2c:bc:79:30:03:8e:3a:7a:27:
09:5e:af:d6:12:8d:e6:8e:80:26:48:01:26:98:00:
31:65:a3:f0:d4:78:6d:fa:32:6b:9f:81:32:f4:5d:
f8:15:74:f6:74:cc:f9:57:36:a8:8f:cc:fc:47:84:
32:dc:0f:f7:cc:65:a7:ec:06:6d:e5:ce:53:ba:b1:
7c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1A:19:EB:99:7D:C2:FD:3B:45:97:80:D6:1D:E7:C0:9C:CD:5A:C6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gxoZ65l9wv07RZeA1h3nwJzNWsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.224.0/24
194.87.54.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:72:1a:22:21:2a:c2:d9:09:18:40:7e:90:bb:9e:f0:29:45:
22:79:2d:f0:68:4a:7c:47:ac:56:96:1f:77:df:bb:29:7c:8f:
c4:3d:2f:04:a9:fa:54:f7:e3:ea:02:b5:c8:57:70:c2:c1:e6:
c6:d4:58:9f:63:72:36:58:89:37:20:da:86:bd:45:43:88:c8:
d2:5a:45:af:f0:74:6a:f1:84:95:08:86:4b:de:31:10:ad:d6:
5c:e3:88:9e:87:11:10:9e:c6:22:15:a3:24:cf:bb:33:7b:b4:
b3:8e:73:cc:fb:02:38:60:b8:c6:20:0d:33:75:f0:d6:17:95:
13:23:eb:8e:96:50:d3:e1:77:33:04:41:4c:91:ac:01:b5:1f:
78:7d:bd:e4:ef:94:8e:4b:18:26:48:db:ab:74:94:48:98:51:
9a:5c:94:56:d5:09:4a:a5:f0:f1:36:b1:6e:50:35:bf:d3:80:
3d:74:5c:08:c3:fc:20:e4:1e:7a:9a:a3:ea:c0:01:85:95:30:
52:84:c8:ca:21:ba:8a:45:1c:e8:b0:88:14:0b:25:f0:9d:3b:
81:01:53:a1:10:c4:d5:e4:49:44:ae:72:eb:82:9f:71:b7:54:
03:ac:86:f9:f1:27:6f:32:bf:42:87:05:1b:71:97:b4:b8:cf:
7b:5a:9d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 10:07:24 2023 by rpki-client on console-fra.rpki-client.org