Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/R__jretAeHOb0zX_9zp1bk5LMOI.roa
File: R__jretAeHOb0zX_9zp1bk5LMOI.roa (raw, json)
Hash identifier: eheEUXFZIjL7W+5gpnMHecfIoRhGarWgI2QsnUaiClY=
Subject key identifier: 47:FF:E3:AD:EB:40:78:73:9B:D3:35:FF:F7:3A:75:6E:4E:4B:30:E2
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 018570796D7D01E8860AF41479935DAA5F99
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/R__jretAeHOb0zX_9zp1bk5LMOI.roa
Signing time: Mon 02 Jan 2023 03:14:44 +0000
ROA not before: Mon 02 Jan 2023 03:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14178
IP address blocks: 62.100.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:6d:7d:01:e8:86:0a:f4:14:79:93:5d:aa:5f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 2 03:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47ffe3adeb4078739bd335fff73a756e4e4b30e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:f8:63:8d:54:1f:37:e8:1e:7f:80:f3:ef:
db:ad:d7:d2:d6:f6:e2:fb:ef:f3:d6:c4:c3:37:d1:
ec:49:38:72:c6:d8:ac:09:37:f1:e8:db:f5:c4:8b:
96:f5:e7:19:f4:5f:bc:9a:50:13:cc:98:a2:ff:e6:
38:ff:91:91:74:67:f8:79:da:2e:cd:2f:f0:05:0d:
64:51:67:dd:2e:9d:b0:43:fb:fe:96:6a:bb:c5:25:
f7:ce:69:cb:9f:c7:c1:63:9e:f9:91:44:fb:a5:2c:
e9:7b:9a:dd:b5:26:22:20:6d:21:9e:9a:12:f8:a8:
9d:8f:a9:ec:f2:00:7e:20:ab:76:d4:7f:cc:7a:9c:
f2:09:46:fb:dd:a6:97:58:33:08:ef:65:fa:36:1d:
88:9b:56:42:3c:8d:de:c6:fc:c2:45:1b:aa:1e:e5:
6b:b7:37:d1:fb:91:65:8a:48:3a:81:37:42:dd:d5:
5e:65:3d:46:dc:8e:ef:99:45:0c:0c:9e:08:c9:7b:
84:ae:6d:57:a2:09:52:cb:25:61:57:a1:c7:71:c1:
48:d2:d7:36:75:b5:aa:d2:b8:5e:74:62:aa:94:fc:
d5:d4:c8:09:18:f0:af:42:61:8f:0d:f6:5c:72:c2:
54:e6:58:21:56:91:82:d9:f7:84:ac:b9:c6:91:7a:
b7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FF:E3:AD:EB:40:78:73:9B:D3:35:FF:F7:3A:75:6E:4E:4B:30:E2
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/R__jretAeHOb0zX_9zp1bk5LMOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.209.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:be:3a:d7:46:88:4a:36:a0:c6:8e:bd:31:ab:cb:14:7f:ff:
45:9a:52:f0:5e:a3:71:d8:e0:e0:59:ee:59:d7:34:1d:0f:23:
d1:2c:52:36:4b:69:31:9b:f0:c7:6c:a4:68:9c:51:04:12:45:
e9:91:07:6f:d0:87:1b:cc:b6:f6:91:78:e2:80:72:bf:8b:13:
c8:43:30:00:e4:8b:fc:e7:1e:f8:40:bf:38:5d:bb:f1:e9:62:
91:ab:75:a6:5a:4c:fa:b1:b0:04:db:a5:02:12:e1:95:6a:5e:
45:42:4c:59:c6:a6:d2:a2:be:dc:42:22:b9:94:a6:53:0f:e6:
ca:fd:9f:9d:3c:3b:6e:9e:ff:82:26:c4:e3:96:2e:09:e7:a0:
23:0d:02:96:12:b9:eb:fc:7c:6c:7e:3f:95:55:d3:c3:79:67:
f9:75:83:33:ac:e5:c9:0b:ac:b3:4f:db:f2:bb:00:61:a3:7b:
eb:76:64:b9:bf:df:d8:97:ca:eb:fb:c3:a1:93:f6:8c:9a:ed:
15:be:38:ce:42:c3:61:69:8d:e0:c3:8e:cd:f1:69:a9:8c:bc:
8e:0a:78:e8:18:bc:21:ad:ed:62:f9:d1:50:10:15:aa:a8:cc:
f9:07:e6:f6:3f:87:29:a4:78:1c:95:dc:09:5a:2b:0c:41:72:
b5:21:63:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:31 2024 by rpki-client on console-fra.rpki-client.org