Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/J8YgZPtoaDnuzx7OpZngbkbZzs0.roa
File: J8YgZPtoaDnuzx7OpZngbkbZzs0.roa (raw, json)
Hash identifier: DmYSb5+MpGWnA0AScWyAB7FF8dtjoj0qGBXZBhEqdfo=
Subject key identifier: 27:C6:20:64:FB:68:68:39:EE:CF:1E:CE:A5:99:E0:6E:46:D9:CE:CD
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 018CC500E10423FFD54CB9A9146FE4FA6669
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/J8YgZPtoaDnuzx7OpZngbkbZzs0.roa
Signing time: Mon 01 Jan 2024 12:30:18 +0000
ROA not before: Mon 01 Jan 2024 12:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48806
IP address blocks: 62.100.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 13:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e1:04:23:ff:d5:4c:b9:a9:14:6f:e4:fa:66:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 12:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27c62064fb686839eecf1ecea599e06e46d9cecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:25:67:be:ab:00:d4:ef:1b:4e:8a:fa:38:a0:
96:72:2a:18:ef:49:b2:8a:39:97:0d:24:fe:db:4c:
3e:53:2b:6c:b0:32:6b:39:e3:aa:99:b6:71:7e:9e:
85:47:4d:6a:a7:cc:2c:8d:8e:ed:3a:2a:79:cf:bf:
3c:4b:f7:b1:4b:3a:a3:24:7a:56:6a:2d:46:d4:77:
de:3f:d0:c1:bf:d0:33:ec:a5:63:9c:12:a2:ed:b3:
66:7f:15:04:4e:ed:12:aa:5a:18:43:ac:4f:ec:04:
4b:b9:a5:7a:d1:9f:88:36:98:21:96:d2:ef:67:01:
89:3d:0d:01:55:cf:cd:2a:df:5a:bb:38:17:c4:2e:
4a:98:49:62:4f:63:65:f2:5a:d0:55:c7:8d:6b:64:
a8:98:f7:50:e7:af:62:27:09:e4:fe:bf:f0:d0:c9:
ed:51:8f:aa:4b:e9:07:79:7c:8a:d8:8c:52:bf:3e:
de:62:99:30:a4:92:06:4d:c3:a8:74:ea:15:8b:82:
97:05:fc:1f:67:83:3d:d3:9f:c8:73:a8:2f:40:b7:
47:5e:63:4b:d7:21:2f:98:63:64:6b:b5:39:b0:ee:
28:fa:d7:ad:90:e3:5c:c6:34:6b:ea:dd:99:ff:5b:
ba:bc:7a:6d:dc:b5:ed:28:36:c8:b4:8b:64:76:a6:
d3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C6:20:64:FB:68:68:39:EE:CF:1E:CE:A5:99:E0:6E:46:D9:CE:CD
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/J8YgZPtoaDnuzx7OpZngbkbZzs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.210.0/24
Signature Algorithm: sha256WithRSAEncryption
56:9c:c7:8a:61:dd:e2:a5:5f:ce:92:09:09:01:b5:37:3d:bb:
7e:0c:c3:ea:37:cb:0f:37:0a:b7:de:01:73:cf:a4:4a:35:44:
57:37:a9:bf:cc:4d:d1:29:8e:60:6c:6b:80:61:1d:e3:65:19:
f6:87:b6:24:d1:22:70:73:13:12:d4:01:19:fd:8e:d0:e7:dd:
ab:10:c1:b3:41:e7:ce:01:9e:21:6a:8b:e4:83:9b:59:55:c2:
49:3c:b0:22:cc:4b:be:12:b5:40:cf:c9:4e:45:2b:bd:c3:e4:
8f:19:87:7c:dc:1d:42:5c:91:1d:ac:95:6d:51:bf:63:ee:fd:
f3:0f:83:4b:34:18:f2:79:12:3e:6e:e6:e1:2d:35:57:41:a9:
fa:59:88:01:8b:b9:81:f7:a8:e2:33:ec:2b:38:7b:72:2b:01:
50:b5:5d:6f:db:85:3e:64:76:ce:9e:e2:1b:1f:0d:90:c3:6b:
14:a5:91:e9:c5:91:a1:74:5e:55:2d:72:06:ce:98:2b:81:93:
12:9e:9b:90:4c:08:d4:5c:8c:db:e1:9c:c7:41:55:a8:44:f6:
aa:71:11:8c:85:ef:02:2b:f0:c5:aa:41:23:0f:25:a2:57:6b:
db:7f:ab:f5:3a:a6:c8:48:a5:07:0b:6f:7d:ae:a9:27:49:ee:
1c:86:af:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 16:13:23 2024 by rpki-client on console-fra.rpki-client.org