Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/HTz9GC247W62RAj1y1noTjfym44.roa
File: HTz9GC247W62RAj1y1noTjfym44.roa (raw, json)
Hash identifier: kOd4r/Wi5GShS9MJcfbbtMTn/EaYMfuG9UvBMFsaOZ8=
Subject key identifier: 1D:3C:FD:18:2D:B8:ED:6E:B6:44:08:F5:CB:59:E8:4E:37:F2:9B:8E
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0185700286B662CEA5EEEB3920E4D1D73A9D
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/HTz9GC247W62RAj1y1noTjfym44.roa
Signing time: Mon 02 Jan 2023 01:04:51 +0000
ROA not before: Mon 02 Jan 2023 01:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55002
IP address blocks: 62.244.244.0/24 maxlen: 24
213.248.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:86:b6:62:ce:a5:ee:eb:39:20:e4:d1:d7:3a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d3cfd182db8ed6eb64408f5cb59e84e37f29b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:d2:dc:b3:6d:df:99:39:ab:98:0d:34:42:
c7:9b:43:da:b5:89:9e:16:3d:38:cd:ed:f6:ed:68:
ce:49:4e:f8:ef:59:b3:12:2f:1c:ce:67:06:a2:62:
c7:d9:a9:27:9c:4f:d3:ee:8c:04:69:76:d8:a6:a5:
41:5e:ef:a0:a4:36:1d:e1:a5:7f:3a:3b:bd:78:93:
e1:d9:ff:df:f8:71:68:db:45:6f:58:96:0b:37:db:
77:fc:66:20:e2:9a:e7:2b:2d:75:d4:84:8f:d1:4e:
ba:76:a8:69:aa:b4:65:b6:46:ef:7c:d1:e9:e0:90:
7c:a1:47:a7:f9:b3:64:00:8d:ae:87:d8:13:bb:cb:
3d:86:dd:fe:cc:aa:72:8b:d0:f0:8e:8e:5a:2d:0e:
c5:6d:c7:ac:36:9c:f7:8e:a6:02:91:38:17:21:8c:
2b:31:30:65:6f:bb:64:e2:1f:dd:e1:c4:6d:4b:51:
16:93:6e:32:4d:e7:33:57:7f:97:dc:fc:64:ed:b5:
29:e0:ee:bd:9b:49:69:ea:05:c9:61:f3:61:05:73:
cf:99:44:52:a0:7d:04:13:71:02:2d:d2:d5:8d:7f:
f8:6a:e6:02:e3:26:f9:43:e8:99:ca:60:81:6e:19:
85:ac:a0:4e:2e:9b:43:91:bd:3f:9f:62:3b:b3:ba:
dc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3C:FD:18:2D:B8:ED:6E:B6:44:08:F5:CB:59:E8:4E:37:F2:9B:8E
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/HTz9GC247W62RAj1y1noTjfym44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.244.0/24
213.248.141.0/24
Signature Algorithm: sha256WithRSAEncryption
51:7e:e7:b2:7e:91:a0:7d:27:d5:89:89:93:28:aa:9a:86:c9:
24:49:8c:b9:7c:bb:c2:a8:6e:ff:ff:a7:19:71:aa:1d:ae:a1:
bf:10:06:7f:26:65:78:92:1c:2a:ac:8f:aa:c5:a0:43:09:4a:
36:ce:ba:2c:ba:50:8c:97:e8:56:32:68:d6:8e:a4:20:47:6f:
28:04:e8:51:9e:ae:5d:1f:43:4e:65:0c:fd:94:61:04:2d:c6:
a3:57:82:91:4a:ac:32:ed:3a:2d:6f:7e:9c:b4:28:7a:45:9c:
65:41:62:29:62:c5:88:77:5c:41:75:71:11:1e:43:b4:03:c8:
e7:db:c8:ae:ed:fe:7a:ad:d4:3d:ac:88:71:e7:b5:3f:51:01:
2a:4c:40:db:ff:2e:a0:c1:ea:d7:44:64:0b:62:64:21:55:fa:
50:89:14:0f:20:65:14:f1:8e:e7:97:75:69:62:de:7d:8a:eb:
f9:87:25:c6:fd:62:68:38:10:3c:79:72:a0:79:ec:fe:ae:41:
64:77:b4:10:f5:87:a9:97:92:41:fe:b8:83:3c:ab:47:d0:fa:
f8:49:62:bf:fd:1f:2c:ae:f4:ab:4d:b5:88:a3:6d:5c:b5:ae:
9f:74:c8:da:1d:63:ff:74:aa:a2:6b:e2:e3:98:ec:ef:21:25:
ad:25:16:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org