Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Tkr5n9I_s6e7pAFYhFbQwwZakmU.roa
File: Tkr5n9I_s6e7pAFYhFbQwwZakmU.roa (raw, json)
Hash identifier: z7ddTtKgqTUs5JsogWGefN4cUGdVZQoWUeehlrfqd6k=
Subject key identifier: 4E:4A:F9:9F:D2:3F:B3:A7:BB:A4:01:58:84:56:D0:C3:06:5A:92:65
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 01857079751863C285502D0259A4BCF0244B
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Tkr5n9I_s6e7pAFYhFbQwwZakmU.roa
Signing time: Mon 02 Jan 2023 03:14:46 +0000
ROA not before: Mon 02 Jan 2023 03:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 262287
IP address blocks: 185.89.250.0/24 maxlen: 24
62.100.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:75:18:63:c2:85:50:2d:02:59:a4:bc:f0:24:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 2 03:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e4af99fd23fb3a7bba401588456d0c3065a9265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:b8:b7:4f:c6:38:ad:85:e9:27:d5:4f:96:
4d:be:85:c1:c4:1c:65:c8:b8:ca:bb:fd:f4:75:e3:
e1:37:7c:94:90:8d:d4:d7:ba:12:19:f4:2b:76:6c:
5e:04:76:66:66:79:e9:7a:e6:4a:c6:c7:82:55:56:
d1:ba:de:82:16:2a:f4:82:f3:5f:d0:fd:86:3f:ee:
78:26:4f:a6:66:ec:ce:e7:11:ec:b2:e6:bb:33:e0:
a6:de:eb:6a:e9:94:dc:13:52:21:21:ca:22:9e:21:
b4:5c:58:9c:3b:44:41:7c:ca:f1:a2:80:9a:dd:1a:
e3:3e:e0:b4:aa:e7:10:55:3b:57:8e:7f:bc:7d:19:
05:e1:4c:da:58:56:0e:b0:d8:20:f0:5c:f8:e4:b9:
00:4a:30:87:12:94:f0:59:60:cf:a8:7d:68:fc:d0:
9e:8e:b8:45:86:e6:9b:b4:5e:83:7d:3b:78:9f:29:
3e:07:1f:8e:26:97:f3:69:96:01:fc:30:39:30:64:
d8:69:af:20:e6:1c:f0:88:38:0a:88:bf:e5:cf:3d:
66:a3:27:43:85:ca:88:3d:28:c9:72:c9:20:41:28:
bf:5c:36:50:43:df:06:07:51:02:ad:30:06:65:a4:
d1:da:87:26:9c:b4:f5:3a:c6:c4:0b:b9:da:de:a9:
05:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4A:F9:9F:D2:3F:B3:A7:BB:A4:01:58:84:56:D0:C3:06:5A:92:65
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Tkr5n9I_s6e7pAFYhFbQwwZakmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.208.0/24
185.89.250.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ba:4a:6a:bd:0c:42:c7:0c:a0:b6:7e:91:6e:96:ec:af:18:
eb:a7:96:d0:ae:4e:bc:d4:02:ed:e3:51:91:90:6b:7a:5b:e4:
d8:82:ea:37:96:57:24:89:b0:d0:2c:af:24:93:9c:25:3b:77:
66:ef:a9:6b:8d:71:ba:28:37:90:25:74:f9:27:2a:59:a5:eb:
00:99:21:ff:cd:03:b7:82:71:91:20:30:fa:d6:8b:0d:50:7e:
55:7c:97:4e:06:b1:b4:83:7e:b9:2b:e4:ee:bb:08:65:7f:3c:
b7:6b:a6:44:55:bb:85:4a:f1:0a:18:e7:c7:ff:24:fb:e7:ba:
d4:dd:87:19:a6:5c:d1:46:3f:e2:28:4e:3f:d2:7e:fd:f8:b2:
a8:7e:3a:5e:2e:17:5f:1c:b8:2d:b4:ce:c4:67:2b:c4:3a:41:
ae:39:93:d0:80:5d:30:d4:f4:d6:eb:0a:51:c8:0f:a7:24:4f:
60:e3:7f:2a:18:40:2b:d4:38:5a:e6:53:b8:96:79:03:87:26:
f2:64:f1:fb:d9:06:bb:9c:d7:5b:e8:f1:19:0d:a0:10:9a:1f:
56:58:6a:19:ee:84:1a:4c:d5:8a:29:bb:d1:fb:54:ce:f4:e2:
c9:cf:07:34:b9:9f:98:35:fa:0d:6f:60:64:4c:b1:93:53:b6:
69:d3:1d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:24 2024 by rpki-client on console-ams.rpki-client.org