Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/p5Za4_yLuRHTkS-dpJlQinSHPp0.roa
File: p5Za4_yLuRHTkS-dpJlQinSHPp0.roa (raw, json)
Hash identifier: 44gPW1ar038/qec6Um91u91GjSrb0G4dGTN+qwAWtg0=
Subject key identifier: A7:96:5A:E3:FC:8B:B9:11:D3:91:2F:9D:A4:99:50:8A:74:87:3E:9D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189E9C91B7C567A697A1DDFD2FF2200D027
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/p5Za4_yLuRHTkS-dpJlQinSHPp0.roa
Signing time: Sat 12 Aug 2023 12:46:58 +0000
ROA not before: Sat 12 Aug 2023 12:46:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 62.76.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e9:c9:1b:7c:56:7a:69:7a:1d:df:d2:ff:22:00:d0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 12 12:46:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7965ae3fc8bb911d3912f9da499508a74873e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:33:e5:dc:1d:48:f5:89:67:6e:94:08:02:e5:
19:1a:5a:f1:06:ff:44:9f:a3:c6:6a:4c:c8:5f:49:
81:ab:1b:a6:3e:e7:6a:6b:6e:47:3f:a2:9c:f4:1a:
b5:66:cc:2a:5a:26:bf:a5:01:4d:97:8b:f7:6f:62:
c7:b3:95:17:3e:e4:61:25:a2:d1:ee:db:ad:09:73:
bc:52:36:55:a0:d8:20:f7:68:b6:0e:08:ba:e6:b3:
b0:a1:c0:d9:67:95:d5:0b:24:7a:47:c5:6a:0e:d0:
20:03:b9:bf:59:b7:0c:46:58:f3:73:f3:6d:48:9f:
8d:46:3d:cd:a1:7c:59:8a:91:95:13:9d:90:98:df:
c4:08:10:8c:32:04:ba:6d:b7:c4:e2:27:f8:68:46:
70:aa:72:a6:fb:62:3a:8e:93:bf:53:c2:84:d3:89:
68:0f:33:fe:27:ac:ef:23:a4:e8:76:d0:46:5c:7c:
86:a9:2f:6a:52:2f:e7:bb:b7:17:06:fb:65:10:d8:
33:60:cc:a4:18:cb:8e:13:27:84:2f:dd:b9:ca:ce:
58:64:12:32:8b:d5:84:3e:38:04:85:2d:a3:09:48:
2a:80:21:d6:c2:19:31:eb:b9:86:26:9c:cb:3b:8d:
5e:c0:0a:15:5d:72:6e:5d:e9:f8:e2:d4:cb:26:33:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:96:5A:E3:FC:8B:B9:11:D3:91:2F:9D:A4:99:50:8A:74:87:3E:9D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/p5Za4_yLuRHTkS-dpJlQinSHPp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
Signature Algorithm: sha256WithRSAEncryption
25:36:22:31:13:86:ec:6a:e3:bf:9b:6e:8c:01:69:c1:c4:a2:
86:87:04:07:20:7a:1c:03:d5:7f:5d:2d:95:65:ad:71:f2:ea:
00:52:b1:34:a0:b2:08:f2:47:c7:e7:50:1c:9a:d8:56:a3:20:
2b:d5:b0:be:06:b5:e8:2e:16:68:55:dd:65:69:14:43:64:72:
02:e4:78:6d:38:7b:db:4f:22:ce:f4:dc:a4:c1:cd:c6:e9:d2:
50:5b:ea:df:98:74:00:38:a2:97:a0:ba:8b:0a:79:8f:d9:00:
dd:95:9f:76:a8:9c:a3:6c:b8:12:c7:5a:ab:eb:ce:e0:1d:ff:
86:fc:c7:05:67:b6:4d:5b:80:a7:57:65:cd:5f:6b:3b:a3:ca:
43:c7:02:d6:b4:01:00:b6:97:60:e0:20:12:10:02:91:55:21:
7b:88:6c:7f:5e:3b:6c:4d:1a:d6:e2:a9:6a:9f:f6:db:3e:ad:
41:30:e5:c5:43:b4:30:c4:d7:57:18:ef:44:bb:33:64:28:3f:
37:5f:02:3b:6b:dc:a0:50:8e:93:d2:09:6f:3e:4a:e2:86:54:
e2:40:b4:2e:da:3e:5d:eb:3e:3f:84:1e:99:b7:a9:c7:34:e5:
8b:41:64:5d:4b:07:3f:43:3b:3f:7b:a0:c1:fd:4c:82:bc:8c:
55:0f:9f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 20 18:57:57 2023 by rpki-client on console-fra.rpki-client.org