Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/FQKqV4yq4pxJN5sIcwbJ4NnbnOo.roa
File: FQKqV4yq4pxJN5sIcwbJ4NnbnOo.roa (raw, json)
Hash identifier: MEe0edQfAYiapXSxtzeGlgnQHYJcvcfa4sl0tr1JiQg=
Subject key identifier: 15:02:AA:57:8C:AA:E2:9C:49:37:9B:08:73:06:C9:E0:D9:DB:9C:EA
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018570028A8B2264045DAD009C990EC00A63
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/FQKqV4yq4pxJN5sIcwbJ4NnbnOo.roa
Signing time: Mon 02 Jan 2023 01:04:52 +0000
ROA not before: Mon 02 Jan 2023 01:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62077
IP address blocks: 62.244.233.0/24 maxlen: 24
62.244.246.0/24 maxlen: 24
62.244.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:8a:8b:22:64:04:5d:ad:00:9c:99:0e:c0:0a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1502aa578caae29c49379b087306c9e0d9db9cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:46:86:31:2f:a8:a6:23:0a:a2:59:99:81:c0:
2c:a7:ac:4a:8e:7e:e1:11:a8:b9:04:f7:2c:41:20:
71:42:46:5a:4b:40:d6:77:32:f1:da:8e:ee:50:fe:
9b:bf:c7:f1:d5:53:a2:34:b3:f8:f6:05:7d:a3:b0:
f1:05:5d:17:44:56:13:70:3c:31:6b:b4:15:20:ee:
72:69:d4:1f:fe:1b:12:3c:d7:f4:e1:f8:5c:62:62:
69:9f:6b:8a:1c:24:90:1c:af:b2:52:73:c1:c3:96:
99:7f:5c:3a:50:7e:b4:ab:1f:bf:5a:08:46:a2:95:
0e:9f:7a:c7:9d:ca:bf:37:25:94:0b:7f:1b:46:ee:
54:96:0a:4f:c7:8f:c1:85:51:55:0b:8e:c3:06:a4:
fe:5c:0a:e8:15:05:2a:49:ff:57:55:6f:ad:ca:2f:
72:92:c1:d8:05:32:de:81:b5:9d:11:1e:a3:bc:ec:
e3:77:f8:31:d9:f0:66:06:c9:fb:6d:e9:cc:2d:3c:
20:d1:5e:49:08:34:ff:b2:95:f3:58:4b:b4:21:c5:
e1:66:f1:44:dd:b7:7f:7d:42:e4:a7:e4:9f:86:7f:
c9:c0:75:71:15:4b:27:17:de:73:f9:f2:5c:71:3b:
8a:dc:02:4a:b8:cc:75:60:18:95:ed:59:b2:64:6c:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:02:AA:57:8C:AA:E2:9C:49:37:9B:08:73:06:C9:E0:D9:DB:9C:EA
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/FQKqV4yq4pxJN5sIcwbJ4NnbnOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.233.0/24
62.244.246.0/24
62.244.249.0/24
Signature Algorithm: sha256WithRSAEncryption
69:df:75:49:83:90:d6:8a:37:58:a3:93:85:2d:3e:28:37:b6:
7e:cb:5a:8d:75:8e:dc:89:5c:96:a6:e0:5c:76:4f:4d:e0:4c:
c3:8b:4d:ae:c6:c4:f2:30:1a:27:ce:c7:61:f1:45:cf:c9:ed:
d0:84:fb:af:cf:1d:bd:47:ba:2b:40:ae:a5:bc:77:01:a9:04:
43:c6:47:ee:bf:08:c5:9b:e3:b3:d5:28:e9:52:74:9f:0a:21:
cd:9d:04:a6:de:93:33:2b:79:74:10:76:d2:2a:3d:86:a9:a7:
63:62:d9:49:e2:86:28:6d:cc:5b:e3:30:d9:25:11:b2:ee:b9:
94:24:c5:c4:0f:75:81:f4:d2:59:08:a8:9a:f7:d2:e4:14:0b:
a3:f8:e9:cf:43:61:94:2d:4f:72:16:15:ba:f9:c3:94:11:f4:
55:8f:4a:88:c1:b4:a1:83:48:99:7f:06:5d:0d:d1:db:32:ed:
0a:ec:f3:7c:f5:c9:c7:48:bf:e9:cd:00:21:b9:c3:a1:54:91:
22:77:9d:f6:29:67:03:ff:1b:71:fb:d4:ac:8e:6e:9f:7f:3f:
16:99:14:cd:e7:d2:77:de:25:bb:f8:43:d8:b8:a9:69:f3:8d:
03:63:cc:12:8c:e4:86:3e:e8:0b:c2:a1:0b:8d:d6:f0:20:c9:
40:43:fd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org