Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/RfBWWUPpJqg1kJz_qanNNvP9_tA.roa
File: RfBWWUPpJqg1kJz_qanNNvP9_tA.roa (raw, json)
Hash identifier: Sml/MlFD+pVEuoVrmNX/IBz6jLu5Uwf0EYx+BUlJer8=
Subject key identifier: 45:F0:56:59:43:E9:26:A8:35:90:9C:FF:A9:A9:CD:36:F3:FD:FE:D0
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 018CC500E152E897A540B10C49601A8D6B16
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/RfBWWUPpJqg1kJz_qanNNvP9_tA.roa
Signing time: Mon 01 Jan 2024 12:30:18 +0000
ROA not before: Mon 01 Jan 2024 12:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54103
IP address blocks: 62.100.216.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 29 Apr 2024 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e1:52:e8:97:a5:40:b1:0c:49:60:1a:8d:6b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 12:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45f0565943e926a835909cffa9a9cd36f3fdfed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:0a:d2:20:78:c9:91:2f:7c:1b:7f:9f:ac:
b4:54:5e:b9:c2:b6:ec:03:a1:46:4b:47:bc:52:84:
d2:12:13:b6:97:02:56:ab:95:47:38:d9:4e:18:e9:
c6:a2:35:62:db:89:bf:8b:40:70:28:8f:ef:a2:70:
04:8c:c6:9d:67:d5:88:f5:04:ee:c2:15:9d:68:b7:
f1:68:f4:ad:8f:83:92:63:52:05:23:c3:63:9c:30:
b0:57:a3:66:ce:0f:a7:2c:2d:74:de:fc:2d:a5:cb:
0d:f5:25:af:54:4f:47:bc:e2:8a:d2:b6:d8:64:11:
19:ac:87:85:98:59:b3:12:68:b4:dd:76:2b:5d:77:
1b:77:10:f7:4b:f7:18:27:61:f0:55:f0:c2:38:5f:
38:fc:3a:92:08:bb:83:fc:14:2e:88:0e:00:db:df:
e6:38:06:8b:c4:4c:4d:3a:83:a9:ce:b6:58:fb:b1:
dd:12:66:41:ff:73:bc:00:3c:72:bd:bd:dd:f8:2f:
66:5d:85:54:0d:48:ed:af:ce:c7:f3:4e:be:24:6a:
00:3e:84:8f:07:08:21:1e:58:42:e6:58:02:5a:73:
0e:de:0a:94:4d:53:6f:41:08:e8:2c:16:f4:a2:92:
5b:52:01:0d:de:69:4d:c0:d7:23:3e:99:d7:b8:46:
25:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F0:56:59:43:E9:26:A8:35:90:9C:FF:A9:A9:CD:36:F3:FD:FE:D0
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/RfBWWUPpJqg1kJz_qanNNvP9_tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.216.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:c5:0e:7d:7b:99:21:9f:2a:24:d2:72:df:cc:ae:da:9f:8c:
68:38:38:d5:1b:b4:9a:2f:51:b2:de:8e:cf:23:70:db:b6:08:
8f:ae:6d:f3:69:3e:14:bc:b4:fa:a7:d0:8f:d5:c3:f1:9f:75:
d3:6f:1f:b6:7c:27:16:32:64:4d:53:a5:32:6e:30:03:d2:e4:
56:cb:93:77:0e:00:cb:5e:2b:6b:8f:b1:38:1a:63:3f:7c:fd:
10:fd:7c:33:08:59:b1:3e:3b:a4:ea:27:16:34:b4:a6:33:68:
8b:1a:24:b7:32:e8:58:3a:68:4a:09:44:3e:b4:02:1b:e6:28:
0e:fc:66:af:c1:7a:2e:41:30:f3:6e:39:70:d0:9b:9d:4c:3b:
48:3f:e1:4f:e0:23:54:a5:13:8e:87:70:3c:68:30:17:d0:ef:
98:88:f0:f6:5e:0a:b4:00:16:fd:cc:dc:cb:b3:d3:bf:51:c2:
c5:04:e4:88:ac:2b:0a:0e:06:f6:4a:b3:ef:15:00:cd:6d:44:
b7:73:2f:51:8f:29:53:ba:65:3a:77:19:ba:2d:54:9c:67:ff:
92:9f:cf:d3:6d:04:59:cd:34:99:ff:ae:f4:fa:7c:56:d8:73:
4f:eb:db:dc:36:5a:fc:b3:b9:56:3c:b4:19:77:04:7a:44:e1:
a6:9a:2d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:26 2024 by rpki-client on console-fra.rpki-client.org