Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/TUHhsMfj4Tn18UbN_000T1SUEFw.roa
File: TUHhsMfj4Tn18UbN_000T1SUEFw.roa (raw, json)
Hash identifier: tdtds4lUDFz4PdMT1aSkcNjgcBewrAnykc5kRtvHpOI=
Subject key identifier: 4D:41:E1:B0:C7:E3:E1:39:F5:F1:46:CD:FF:4D:34:4F:54:94:10:5C
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 0185707970F898FAA00B87EE945859005B2F
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/TUHhsMfj4Tn18UbN_000T1SUEFw.roa
Signing time: Mon 02 Jan 2023 03:14:45 +0000
ROA not before: Mon 02 Jan 2023 03:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54103
IP address blocks: 62.100.216.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:70:f8:98:fa:a0:0b:87:ee:94:58:59:00:5b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 2 03:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d41e1b0c7e3e139f5f146cdff4d344f5494105c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:dc:1e:38:f5:e4:9f:e1:be:41:6d:b8:55:
06:40:8b:45:e4:7b:0f:7f:54:a6:cf:e2:74:b9:55:
96:16:9c:c7:03:af:64:93:43:c5:fb:2c:b1:27:16:
af:97:e2:3b:ae:35:0a:44:a2:2d:7b:ab:85:e9:b0:
69:2a:d6:c5:58:96:27:36:f7:bd:2c:3c:4e:ae:03:
bc:31:f9:4c:ca:a7:14:cc:58:78:9e:a9:01:52:7d:
ba:f4:ee:cd:97:c7:f1:4e:80:be:9f:02:7d:ae:1a:
b1:b3:5c:39:14:98:35:85:00:5d:59:cb:51:74:8c:
45:d0:d1:eb:4a:5d:58:76:c6:5b:be:ed:c5:ca:f7:
3e:ff:24:f3:9f:d6:74:8c:23:b6:cf:63:58:3a:87:
4e:5f:17:ab:b9:72:e8:ad:00:49:f3:67:74:62:1e:
84:97:b9:6c:2e:3d:4d:b0:d0:e2:ba:88:e3:ca:b5:
ba:82:ed:8c:94:6d:b3:95:79:c0:2c:29:3a:31:9e:
0c:84:76:6e:3d:27:00:da:2d:c4:0e:ab:6f:75:dc:
19:62:52:04:24:8b:e2:af:99:16:f2:ab:df:8c:dd:
89:0b:69:9b:cc:57:08:01:32:52:55:1e:3a:2e:f5:
49:cf:db:13:94:bd:7b:5c:da:f9:70:71:7c:0e:4a:
fc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:41:E1:B0:C7:E3:E1:39:F5:F1:46:CD:FF:4D:34:4F:54:94:10:5C
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/TUHhsMfj4Tn18UbN_000T1SUEFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.216.0/22
Signature Algorithm: sha256WithRSAEncryption
27:bd:da:e8:8c:ef:74:e0:ad:8a:2d:68:92:a1:87:c9:2d:6d:
bd:84:0e:ef:e6:66:1c:2d:30:2b:b3:e0:99:95:89:ce:7b:ce:
01:5e:f8:5f:38:7b:6f:e1:f3:5f:c9:66:8c:99:6e:4b:d6:7f:
5c:9a:cd:9b:35:32:71:e1:b3:a8:57:4e:22:84:31:02:83:d8:
fd:8a:55:e2:21:05:ab:8f:66:ac:7c:df:95:34:2f:c1:26:af:
d5:e8:d7:ac:53:a4:9c:b6:9e:6f:58:a1:d5:b2:10:2f:4e:77:
91:3b:19:dc:b3:de:bd:48:4e:4a:ae:75:f8:73:f5:ee:30:28:
3f:bb:10:f3:11:35:53:98:ea:5a:51:98:7f:ec:9f:32:77:7b:
47:37:0b:27:2b:6d:ba:4c:1f:8a:b8:ce:1c:77:0f:83:06:08:
60:c0:b2:f3:da:f5:4e:6c:d6:5a:d6:86:88:1d:16:7e:c3:5d:
66:9c:c1:2b:6c:48:53:46:6b:7c:4b:e2:64:46:7d:cc:12:a7:
34:ff:ca:7e:c9:02:e6:0e:12:64:e2:97:5f:f3:b7:ca:c3:33:
84:d7:e8:a6:0f:c7:37:f2:0a:20:76:08:c9:e6:25:92:d8:fa:
36:ac:ef:71:fe:62:d9:c8:9c:6d:9a:dd:56:de:42:2e:e3:a4:
31:09:a2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:31 2024 by rpki-client on console-fra.rpki-client.org