Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/k-zsEH2f0DTAvCN_7_wtbTLwbSo.roa
File: k-zsEH2f0DTAvCN_7_wtbTLwbSo.roa (raw, json)
Hash identifier: WdFZNA0mckhKpIZv7bisSMHYid+ExNzF+dDiHQ899ds=
Subject key identifier: 93:EC:EC:10:7D:9F:D0:34:C0:BC:23:7F:EF:FC:2D:6D:32:F0:6D:2A
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 018571A7B5B15D089EDE23AC05A5C92EBF5B
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/k-zsEH2f0DTAvCN_7_wtbTLwbSo.roa
Signing time: Mon 02 Jan 2023 08:44:54 +0000
ROA not before: Mon 02 Jan 2023 08:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 62.68.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:b5:b1:5d:08:9e:de:23:ac:05:a5:c9:2e:bf:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Jan 2 08:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93ecec107d9fd034c0bc237feffc2d6d32f06d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:47:0b:07:5c:5f:e6:62:c0:b3:5c:5e:b7:
ff:55:a3:24:f1:c0:b8:4d:79:b7:41:eb:0a:b0:d4:
f9:dc:b8:5c:3a:60:bb:75:71:61:2c:1f:1f:24:52:
a8:b0:a4:55:53:e8:a2:98:53:38:c9:1d:06:5b:d8:
38:0f:3d:2e:9e:6f:99:f4:1f:95:7c:ca:76:8a:4f:
7c:fe:6a:7d:3a:81:55:9f:97:af:8f:7d:88:f9:f7:
38:6b:9a:f6:29:6e:4f:7a:09:c9:9a:b7:e3:c9:37:
2f:c2:fa:fe:72:04:83:9b:c5:45:8f:38:aa:4a:99:
e2:5d:ec:74:55:ce:ba:78:84:2a:12:60:01:f0:27:
cb:99:34:06:af:15:cd:7f:df:5e:aa:5c:5b:78:70:
a7:1e:e9:b2:ef:a4:57:38:43:fc:c6:94:dc:2b:32:
18:60:42:00:d0:14:7f:1b:c4:15:3d:56:29:d6:25:
b3:3e:a0:8a:ce:53:cc:3b:44:3a:a6:44:d1:7c:f3:
15:23:32:21:b1:ce:00:a0:58:ee:44:b8:e0:aa:05:
61:bc:f8:cd:5c:0f:06:39:2c:89:7c:24:a3:49:a5:
85:4b:40:15:13:3b:20:eb:d9:55:aa:5d:b9:cc:0e:
67:66:a0:9b:9e:59:be:fb:e5:57:f8:00:e2:91:6e:
82:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EC:EC:10:7D:9F:D0:34:C0:BC:23:7F:EF:FC:2D:6D:32:F0:6D:2A
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/k-zsEH2f0DTAvCN_7_wtbTLwbSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.73.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:7a:5b:f7:fa:b5:64:11:f8:47:93:a2:32:67:bc:2e:aa:b8:
78:11:58:43:3a:be:9c:0a:cb:d3:fd:a0:64:5e:ab:98:db:45:
ab:db:08:5d:59:9d:6a:41:26:0f:e8:07:4e:2f:5e:99:61:8d:
6f:e2:0a:35:85:0a:38:75:04:0a:f6:c8:6f:13:bd:6e:d4:f7:
03:53:ff:11:ee:1c:67:78:8b:34:b1:b3:82:e2:9a:c1:b8:5a:
ca:a2:e3:19:0a:cf:46:fc:bc:da:1b:1e:9e:b4:0a:47:28:e5:
ff:03:39:fd:2e:f4:56:86:a3:e5:0e:85:13:4f:92:0a:8d:2a:
c9:57:63:65:9a:75:c7:33:6c:ca:b9:32:af:b6:b5:2d:57:52:
e1:4f:0c:20:9e:e8:7f:38:86:6d:07:0b:2c:a8:79:42:9c:b1:
ce:c6:c9:5f:4a:9f:1e:cf:7e:29:97:62:8b:31:a4:59:c2:82:
94:b4:9e:d9:0a:83:ac:83:e5:38:e3:d7:1b:e9:9f:cb:c6:35:
af:13:89:1c:a3:d0:69:89:9f:f8:aa:1c:34:86:97:c5:f9:54:
7e:7a:c1:bc:a7:49:20:82:34:d0:a4:dc:41:5b:db:cf:48:ab:
ed:f4:fc:3e:83:16:c8:bc:d4:a3:48:64:5d:89:b7:a0:f9:6b:
6e:87:d0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:09 2024 by rpki-client on console-ams.rpki-client.org