Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/y5fMAVQwElUU7G3uo3FYxJP9kTY.roa
File: y5fMAVQwElUU7G3uo3FYxJP9kTY.roa (raw, json)
Hash identifier: lT+f73sqKPDFpGYnDFmsck9BCf+bojBLtohMkDqd/Dk=
Subject key identifier: CB:97:CC:01:54:30:12:55:14:EC:6D:EE:A3:71:58:C4:93:FD:91:36
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018570028032701549CABBF1AEF33C40CD96
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/y5fMAVQwElUU7G3uo3FYxJP9kTY.roa
Signing time: Mon 02 Jan 2023 01:04:50 +0000
ROA not before: Mon 02 Jan 2023 01:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38920
IP address blocks: 62.244.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:80:32:70:15:49:ca:bb:f1:ae:f3:3c:40:cd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb97cc015430125514ec6deea37158c493fd9136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:55:15:7b:d1:a8:e7:ca:69:45:43:61:20:d6:
48:6e:98:33:b2:4f:ae:01:23:7d:ee:ea:78:7f:fb:
64:a2:8c:1a:de:8d:cb:da:a5:32:95:67:8c:e1:cd:
c0:e8:85:d8:d5:1b:21:d8:2e:17:39:b0:7f:5e:ee:
0c:ea:47:ba:c6:90:80:b0:70:97:28:c1:a6:27:56:
c1:ae:63:4e:7c:7c:7c:1f:35:27:d5:ff:be:f5:f4:
c8:e1:64:43:34:39:ae:ac:fe:a3:a8:fb:23:9d:f1:
19:3f:28:05:fa:08:f3:03:38:e4:a5:cc:29:bb:7c:
64:90:d2:2e:32:bf:db:2d:9c:c0:5d:bb:df:0c:3d:
40:58:55:94:1d:0e:c8:9d:e2:ad:e0:97:50:98:cc:
5d:b7:9b:c6:19:72:34:4a:51:15:53:33:24:07:64:
eb:fd:9b:6f:95:ca:d1:e1:2d:95:ce:d2:15:24:37:
0b:40:37:b7:fc:ea:18:78:7c:c8:47:4e:e7:aa:36:
8b:1c:58:74:97:ae:43:d1:99:fa:5c:40:e1:41:00:
5d:53:b3:cd:83:21:7f:e2:2a:09:67:17:e4:29:ea:
8b:ef:13:66:c5:0e:84:c4:8a:8a:56:14:d3:f4:a0:
50:2e:da:56:9e:71:6f:72:75:e4:5e:2d:c2:87:34:
ef:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:97:CC:01:54:30:12:55:14:EC:6D:EE:A3:71:58:C4:93:FD:91:36
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/y5fMAVQwElUU7G3uo3FYxJP9kTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.237.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b7:e4:6f:b5:93:78:16:df:f3:ae:72:10:e5:cb:a9:e5:be:
d8:9c:af:57:ea:e8:32:43:81:36:ef:67:d5:dd:3f:41:34:bd:
8f:e2:49:98:a1:6c:b7:91:cc:74:c8:a8:2c:42:64:cb:ca:11:
ae:a4:2c:f8:66:0b:e2:4a:1c:89:ac:65:69:35:3a:4b:53:17:
ca:16:b2:63:80:bb:b6:1a:58:b5:36:0e:46:17:93:48:33:c7:
1d:7b:18:72:1d:1a:2b:c1:d7:ab:34:cc:57:ab:35:74:1d:df:
64:c3:77:22:d4:14:b4:e6:58:1b:b0:07:21:9b:8a:de:30:dc:
02:16:17:3d:3a:d8:dc:cc:df:f7:eb:fa:60:f0:72:c7:5a:fe:
d0:c3:a0:4a:96:9e:97:20:18:a5:81:3c:2b:c4:53:f2:86:69:
85:2a:d5:a3:69:00:69:67:bf:9e:b8:a7:9c:f4:8f:b2:13:d2:
0b:02:63:c5:79:e9:2f:fe:67:3d:7f:83:88:fb:d0:7c:fa:ac:
5d:f7:97:aa:24:47:73:65:a3:55:c4:0d:b3:c3:f6:a8:0c:4d:
31:4c:4f:e5:4c:5f:c4:6f:6e:2d:27:db:78:5b:21:17:ea:66:
71:86:8c:e2:71:c5:7d:72:44:ca:70:d4:59:d3:dd:05:a4:5d:
d4:ce:b3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org