Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/paC1-c5_tmcQWcPZb7RI2WYXcUk.roa
File: paC1-c5_tmcQWcPZb7RI2WYXcUk.roa (raw, json)
Hash identifier: hV5T6XQsaKQA4L8dstiM67oF3guGhh6Ub+bM5YKuUfI=
Subject key identifier: A5:A0:B5:F9:CE:7F:B6:67:10:59:C3:D9:6F:B4:48:D9:66:17:71:49
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189974EBF142BA11E2817D1AA40CB3DA1D5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/paC1-c5_tmcQWcPZb7RI2WYXcUk.roa
Signing time: Thu 27 Jul 2023 12:24:27 +0000
ROA not before: Thu 27 Jul 2023 12:24:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198037
IP address blocks: 62.76.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Sep 2023 17:29:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:4e:bf:14:2b:a1:1e:28:17:d1:aa:40:cb:3d:a1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 27 12:24:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5a0b5f9ce7fb6671059c3d96fb448d966177149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:c4:b7:17:ee:b2:9b:67:f6:2c:01:79:24:
bd:8e:32:91:7d:87:b4:e3:11:97:37:c8:ae:cd:8f:
d7:9e:c4:3e:bb:c8:f0:f0:ca:be:bc:97:5c:47:5c:
49:87:5e:8b:33:59:d9:b2:c0:47:0f:d0:a5:58:2e:
5d:28:3a:d0:ef:6f:67:54:a4:04:92:c2:8d:da:60:
98:a0:e2:f6:17:4b:59:a4:fa:21:c7:94:9f:64:8e:
59:23:db:ef:4a:a8:06:ef:0a:5e:35:38:00:55:6d:
aa:75:4b:05:53:73:3a:fc:77:28:b3:d1:6f:87:37:
e5:9f:32:ca:ad:b3:98:3b:86:1b:eb:cd:8a:04:b3:
79:83:f2:72:7f:5e:bb:ed:7a:5f:eb:c4:a5:ee:d2:
dc:e9:56:45:c7:09:9d:91:46:bf:f0:4b:85:a1:bb:
f5:cf:73:84:35:b2:07:da:37:0d:b5:cc:62:1b:d7:
be:8f:bd:19:b7:bd:fb:be:0d:25:ac:38:56:67:58:
b6:1e:94:da:cb:27:e9:ba:71:c7:92:50:a3:54:2a:
ed:0c:60:be:84:be:ba:71:a7:de:a8:ad:51:f6:9d:
08:6a:88:0f:7f:a0:97:45:15:33:bb:be:42:cb:1f:
8f:41:14:49:31:cf:c8:74:76:8a:ec:2d:b0:f8:85:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A0:B5:F9:CE:7F:B6:67:10:59:C3:D9:6F:B4:48:D9:66:17:71:49
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/paC1-c5_tmcQWcPZb7RI2WYXcUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.227.0/24
Signature Algorithm: sha256WithRSAEncryption
30:75:6d:57:b5:bd:aa:99:4f:f6:b4:7d:4c:e4:d1:62:d1:67:
40:cf:19:af:7a:e7:2c:db:7f:e1:25:7a:28:e4:31:91:ea:c4:
46:93:a0:fb:ee:19:5a:99:06:7e:f5:17:2d:65:3e:d4:e8:2d:
97:19:a9:2f:0a:ff:44:e9:3d:29:f5:94:e7:bc:7e:85:a2:98:
74:00:bb:7a:cf:67:68:c6:8a:d4:fc:b1:5e:9d:4e:83:1a:cd:
ee:16:6a:fb:68:ce:1e:02:50:1d:40:bd:0b:8a:e8:e3:d2:72:
1d:4b:98:f5:d8:19:ca:a3:38:14:7a:58:f6:bb:54:19:d2:97:
cc:42:0f:5b:08:0a:7a:50:9d:e8:11:ec:50:f9:e9:b4:56:e4:
e2:75:5f:b8:4d:40:55:f7:ec:ac:c8:0f:e2:fc:51:4f:aa:b9:
6e:05:b5:7c:ad:ad:b8:02:2c:fd:1d:04:6e:02:b7:73:e6:2d:
04:bf:58:e0:44:dd:d0:af:6f:6e:6d:e4:bb:9b:79:6e:41:1f:
33:93:2f:be:f6:53:38:e9:3c:89:1f:8a:de:d4:34:03:1d:8b:
2a:05:b6:e2:89:eb:08:83:0f:1a:ea:cd:5a:62:7b:d2:44:fd:
99:0d:45:25:bf:2e:8b:a4:ee:40:d9:26:ac:e2:2e:db:77:04:
df:21:bf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:27 2024 by rpki-client on console-fra.rpki-client.org