Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/OdkhwRqs5a_jqZhfUXlJByOtEzk.roa
File: OdkhwRqs5a_jqZhfUXlJByOtEzk.roa (raw, json)
Hash identifier: Apz4KqGjJBqHjUSG13WXnL1P9I76ALSLw5VRTi0Nvx4=
Subject key identifier: 39:D9:21:C1:1A:AC:E5:AF:E3:A9:98:5F:51:79:49:07:23:AD:13:39
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 018A1727E36291E9967D5D042604285457E2
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/OdkhwRqs5a_jqZhfUXlJByOtEzk.roa
Signing time: Mon 21 Aug 2023 08:13:24 +0000
ROA not before: Mon 21 Aug 2023 08:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216468
IP address blocks: 62.108.104.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:27:e3:62:91:e9:96:7d:5d:04:26:04:28:54:57:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Aug 21 08:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39d921c11aace5afe3a9985f5179490723ad1339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:34:12:79:de:a6:d0:98:36:09:9c:9b:0d:
7c:ab:cf:50:d8:fc:d6:d7:7f:75:96:19:ac:aa:47:
0a:49:10:0b:b9:e1:35:51:e7:8a:10:e5:3d:0f:42:
0d:09:81:a9:28:a7:f3:94:d2:20:2d:43:ed:fa:ef:
83:d5:02:f6:08:4f:6f:b9:ed:30:82:88:6f:c3:25:
85:d8:d2:40:3e:f4:f2:64:37:5d:0a:4f:a8:3f:bf:
e2:a1:f7:e9:6d:0d:b3:eb:3b:32:da:11:f6:4a:e5:
35:6d:0d:f3:d5:ce:d1:ac:13:2a:7b:8e:e6:27:ff:
70:d3:1f:94:2c:96:fc:7f:77:a8:53:d7:94:2c:c2:
6b:1e:47:47:14:56:d1:2a:bd:00:fb:61:af:48:27:
00:32:ec:fa:7c:98:d8:be:1c:b5:c0:5c:95:d9:59:
70:48:3d:b0:99:6b:61:f5:03:72:8c:7e:31:bc:c6:
61:d9:a9:11:cb:2a:1f:26:6f:dd:6a:40:eb:26:90:
38:85:47:0b:b6:68:55:f8:7a:14:a8:19:fb:3c:1e:
8d:24:46:d7:11:51:45:e5:94:9c:c7:64:65:83:c1:
0d:2f:17:36:9d:2d:db:cb:b8:bd:99:38:5c:e1:91:
5f:70:ee:d5:0d:14:e7:04:cb:df:35:d3:5c:ac:e0:
2e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D9:21:C1:1A:AC:E5:AF:E3:A9:98:5F:51:79:49:07:23:AD:13:39
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/OdkhwRqs5a_jqZhfUXlJByOtEzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.104.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:8c:b3:8a:42:f7:45:75:98:11:dc:8e:96:16:36:8e:dc:5c:
ca:7b:fb:50:f3:aa:88:73:2b:aa:16:c8:e5:ac:a1:0c:8e:d9:
dd:d0:1c:68:05:cc:7c:e8:9c:cb:28:de:7f:08:40:c0:a5:33:
f0:c4:f0:da:9c:dd:8a:c6:ab:56:7e:c4:58:b0:60:51:0d:59:
18:bb:ec:70:09:7b:2c:48:d6:d7:51:8d:f5:5d:8d:b3:50:be:
d8:c5:ad:c9:b1:08:92:ae:c9:3e:19:cc:1e:98:ba:9f:e7:1f:
c4:f8:bb:c9:0d:6e:4e:26:58:4c:23:90:20:45:14:94:a7:3d:
1f:d3:21:bd:37:cf:b3:43:b2:3f:60:60:61:2c:1a:d8:f4:49:
81:98:84:bc:e1:f9:70:4f:7c:66:70:33:79:96:ad:a9:34:2f:
fc:b3:bd:0a:c1:81:30:07:43:03:6f:76:a1:bd:f7:2d:04:40:
7a:37:07:ce:89:b5:b6:2d:4b:28:83:18:5c:dc:e3:a8:3e:86:
3a:77:af:11:f9:09:5e:23:7e:40:e5:48:f7:65:5b:a5:a1:90:
51:51:7e:59:75:60:04:76:2d:ba:51:60:e8:a8:d6:a0:1f:e5:
2e:4b:4b:82:e6:a6:11:c2:9a:c8:45:a4:48:bd:a9:ae:c5:09:
4f:14:ef:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:30 2024 by rpki-client on console-fra.rpki-client.org