Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/2580qbcu9pMquYIdjhDgP8A2TVs.roa
File: 2580qbcu9pMquYIdjhDgP8A2TVs.roa (raw, json)
Hash identifier: NA0tezcf+RCe6h8EIaTSyCJJ/EmLBNIc8B5Pf2Betto=
Subject key identifier: DB:9F:34:A9:B7:2E:F6:93:2A:B9:82:1D:8E:10:E0:3F:C0:36:4D:5B
Certificate issuer: /CN=181e4d608152fc244afffba2dc72b851b19b2527
Certificate serial: 018CC8017EC20BC48F5A9481E38D70C71AF4
Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/2580qbcu9pMquYIdjhDgP8A2TVs.roa
Signing time: Tue 02 Jan 2024 02:29:50 +0000
ROA not before: Tue 02 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50427
IP address blocks: 86.62.4.0/23 maxlen: 23
86.62.4.0/24 maxlen: 24
86.62.5.0/24 maxlen: 24
86.62.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 06:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7e:c2:0b:c4:8f:5a:94:81:e3:8d:70:c7:1a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527
Validity
Not Before: Jan 2 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db9f34a9b72ef6932ab9821d8e10e03fc0364d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:0b:30:b5:7c:ed:65:a2:dc:40:74:86:f8:
57:ef:87:40:0c:8f:08:00:ef:a9:f6:c4:8b:b4:82:
78:74:2e:5f:62:ab:45:01:70:43:22:d7:84:2c:46:
f3:18:45:c3:b0:02:97:e5:f7:d2:5a:53:85:3f:1e:
46:cc:b7:f2:07:a1:ac:8f:14:8e:12:b7:10:8f:e7:
e5:63:87:fa:96:8b:a1:ae:37:e3:ad:2e:b3:17:6c:
35:a8:4f:c5:f7:d5:15:1f:ee:5e:a8:b9:ee:8f:a6:
15:9a:89:b1:de:4e:42:26:75:83:25:8f:cd:4a:99:
d3:93:ca:99:4c:7d:a6:de:61:f3:92:8b:61:cd:6e:
6b:a4:8f:4c:1b:0f:84:7f:f6:4c:5c:d4:d8:8d:5d:
91:ec:a9:2e:b7:d1:f7:9d:b3:2c:7f:b7:74:3b:52:
87:f2:ff:ea:57:e5:89:06:52:87:a4:6d:08:ac:ec:
93:90:90:b9:7a:fc:33:34:48:94:93:5f:73:cc:4f:
cf:52:d3:f9:9d:f6:51:e8:a1:c5:3f:e7:f2:91:f2:
fe:43:81:9c:40:c9:f2:06:a4:ed:2b:01:1e:36:9a:
1d:79:51:0c:eb:75:d9:37:bd:14:24:34:b9:4a:f5:
86:a8:07:d0:b5:34:cf:d5:1e:5a:7e:c2:41:bc:74:
9f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9F:34:A9:B7:2E:F6:93:2A:B9:82:1D:8E:10:E0:3F:C0:36:4D:5B
X509v3 Authority Key Identifier:
keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/2580qbcu9pMquYIdjhDgP8A2TVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.4.0-86.62.6.255
Signature Algorithm: sha256WithRSAEncryption
87:bc:04:e2:4a:c3:09:b2:3d:4c:44:08:77:71:a0:73:35:c6:
14:d7:ff:96:5d:46:43:ef:ef:d8:fe:c6:77:4c:cd:eb:c8:02:
f7:a7:58:97:43:77:6f:0a:02:f2:c3:53:42:43:fe:1c:e6:f9:
87:9e:31:73:f8:0d:39:85:cf:23:7d:10:92:96:a0:84:ff:0d:
d0:e0:00:ce:08:21:b2:5e:f2:d5:b5:2a:f6:5c:83:58:15:f5:
5a:18:0f:67:98:39:f7:f6:bc:c5:f8:90:e9:3d:5d:95:42:38:
a2:37:d4:4e:44:c7:ab:8f:47:62:cc:a8:ab:31:1e:3f:f6:02:
49:e6:17:d9:91:fb:39:9d:c1:d5:81:6a:37:64:ea:1a:ee:47:
92:db:7e:07:84:b5:de:31:2d:3a:37:4f:51:31:d8:84:23:fc:
55:9d:49:f0:99:30:6d:4d:56:2a:3e:d4:96:ce:73:2e:49:58:
b3:2e:e2:f7:b3:c3:a3:de:9b:04:c8:8f:6f:f0:ab:64:23:b2:
7e:85:f7:2a:55:cd:af:af:8a:a5:c6:d9:0c:d4:4b:39:68:10:
2f:9d:7c:f8:bf:1f:61:81:f3:09:d3:51:56:f6:09:54:46:2e:
74:e2:e9:e0:dd:85:49:4a:2b:dd:3b:fe:41:d3:c2:24:b8:b9:
61:4a:7e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 07:49:42 2024 by rpki-client on console-fra.rpki-client.org