Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/ZIYEYfmwCmPTKSxU8KxuFfKNHcc.roa
File: ZIYEYfmwCmPTKSxU8KxuFfKNHcc.roa (raw, json)
Hash identifier: SWwBVrqyX42AGJSKUCm5EK6005wOOdR/exJCiFUq/Qc=
Subject key identifier: 64:86:04:61:F9:B0:0A:63:D3:29:2C:54:F0:AC:6E:15:F2:8D:1D:C7
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018CC5003AE9C24E3E3CA2B92659F556CBE6
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/ZIYEYfmwCmPTKSxU8KxuFfKNHcc.roa
Signing time: Mon 01 Jan 2024 12:29:35 +0000
ROA not before: Mon 01 Jan 2024 12:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14576
IP address blocks: 62.204.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 10:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:3a:e9:c2:4e:3e:3c:a2:b9:26:59:f5:56:cb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 12:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64860461f9b00a63d3292c54f0ac6e15f28d1dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f3:5f:39:7d:27:30:5b:a9:25:4e:fb:a1:45:
d5:66:5b:a0:aa:f6:b1:2c:51:70:f1:99:79:de:8e:
bd:af:44:3c:aa:88:3a:11:bf:47:d9:eb:8f:d2:32:
a2:2c:27:af:76:3f:35:1e:b0:86:01:aa:df:4e:33:
5e:10:b8:05:08:13:43:09:38:17:f3:a1:70:d0:d5:
df:87:c8:5a:08:de:43:72:df:08:e5:31:a0:db:ac:
40:e7:a9:10:79:0f:e4:08:a5:58:c9:8a:23:70:a0:
2e:7c:17:c4:44:4a:d1:2d:13:2b:f9:c8:1f:3b:20:
4a:31:3a:69:2b:0c:b5:06:04:d6:d3:88:e2:d8:88:
2f:d2:2b:16:5b:16:24:cf:ab:54:c1:1a:96:34:5f:
bf:63:0a:11:b3:b1:41:17:31:2d:ae:c5:5a:31:07:
c4:bd:d9:a5:aa:d3:56:b9:01:71:27:0f:58:fe:2c:
48:6c:d5:d2:19:38:2d:11:70:dd:31:29:fd:9a:ed:
ce:69:56:81:c7:eb:84:73:6b:51:c4:89:1a:1c:17:
a5:0f:97:9e:42:86:f6:cc:53:eb:64:e4:23:44:63:
7d:88:8f:72:4d:f0:02:a2:fe:f6:b6:4c:5d:d4:2d:
01:25:d1:43:0b:51:d0:de:7d:d7:80:a0:06:db:40:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:86:04:61:F9:B0:0A:63:D3:29:2C:54:F0:AC:6E:15:F2:8D:1D:C7
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/ZIYEYfmwCmPTKSxU8KxuFfKNHcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.35.0/24
Signature Algorithm: sha256WithRSAEncryption
77:76:e9:d8:59:00:bd:0a:b1:e7:2e:3d:6d:60:00:fd:09:d4:
38:cc:ed:ed:3a:85:03:31:91:65:d3:67:fc:5d:21:b1:89:b9:
f9:c8:bc:16:0b:bb:49:9f:bb:26:0a:6d:d1:de:ad:64:1a:ee:
86:08:ce:9d:20:f2:45:19:f7:1c:f0:32:58:34:9e:82:c2:c8:
82:73:5d:40:0c:1e:49:45:ec:4c:a3:1a:a8:ca:08:bf:96:d3:
8e:76:6c:fc:be:84:ca:2a:76:87:c6:c7:2c:61:1f:78:7a:5b:
f8:5f:79:d2:47:94:80:ca:c7:1c:46:4d:bb:e7:db:6f:41:f7:
d5:eb:ee:ca:72:31:88:a0:43:58:0f:4d:09:df:05:06:f1:b8:
9d:72:02:29:6c:c1:e3:b5:e0:b4:72:6b:cd:b0:0e:04:b6:a5:
56:39:c1:18:d8:52:47:11:f5:10:e8:8a:89:29:23:f8:bb:7e:
3d:83:d8:09:6c:8d:b6:87:42:b8:77:2b:f4:79:97:81:39:f7:
41:e4:47:55:51:a9:a9:76:f8:ac:9b:7d:c0:e5:6c:be:3e:92:
cf:94:37:86:8c:98:51:bf:3e:c2:e3:6a:dd:09:98:18:6e:2e:
f6:d0:75:16:6b:e7:67:c5:b2:94:37:75:d0:c9:bc:29:d4:c4:
e1:88:9f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:34:19 2024 by rpki-client on console-fra.rpki-client.org