Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/_KQzCUqdBCVDYEHoQJYt_PinFE8.roa
File: _KQzCUqdBCVDYEHoQJYt_PinFE8.roa (raw, json)
Hash identifier: 28+7fM9489nkjpLgPnqGi7UGXxO1deceeGA9ANEhg14=
Subject key identifier: FC:A4:33:09:4A:9D:04:25:43:60:41:E8:40:96:2D:FC:F8:A7:14:4F
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 0185707970130E9D6A7F15F8CFE30CBB7D26
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/_KQzCUqdBCVDYEHoQJYt_PinFE8.roa
Signing time: Mon 02 Jan 2023 03:14:44 +0000
ROA not before: Mon 02 Jan 2023 03:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42831
IP address blocks: 62.100.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:70:13:0e:9d:6a:7f:15:f8:cf:e3:0c:bb:7d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 2 03:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fca433094a9d0425436041e840962dfcf8a7144f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:a7:0d:f1:3e:a6:19:2c:65:25:c8:22:a0:
2b:05:99:67:5a:b8:ca:6c:f1:a6:f3:b9:0c:e2:75:
0e:f3:13:20:8f:c0:6e:ce:22:da:5f:b9:99:19:5b:
10:2b:16:f5:d5:1e:9d:31:61:a4:20:18:2f:d6:a6:
6d:96:7c:62:05:73:e2:60:64:e5:1a:0b:38:50:55:
aa:10:18:90:23:7d:b6:11:55:80:c3:58:84:9d:c6:
49:88:91:ec:e8:b6:09:02:68:a7:d9:c4:b2:6e:1e:
c3:69:66:32:ae:c0:b2:c4:17:da:9f:c1:2b:e5:44:
9b:83:5f:c0:8c:6e:aa:6c:21:37:2e:a7:1c:7e:7f:
80:a6:62:de:71:12:98:09:46:e8:56:46:6d:05:e4:
e2:fe:e2:b3:b3:e9:fb:85:22:ec:3d:11:2a:42:99:
cb:5d:f7:a8:6c:7e:c1:3f:65:2f:67:c4:c0:4c:59:
08:8c:ef:92:94:76:c7:33:2e:b3:4b:67:6b:8e:d8:
31:3f:df:06:a4:59:47:15:fa:b1:48:2b:ce:d6:d5:
fe:ec:24:3f:69:d9:3a:93:3f:be:d3:63:55:2c:22:
e2:30:18:35:53:03:cc:43:f0:47:a2:03:5e:47:a7:
9f:07:02:a5:52:e8:ca:36:73:9f:99:0a:7c:58:ce:
a0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A4:33:09:4A:9D:04:25:43:60:41:E8:40:96:2D:FC:F8:A7:14:4F
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/_KQzCUqdBCVDYEHoQJYt_PinFE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.211.0/24
Signature Algorithm: sha256WithRSAEncryption
68:0c:99:44:72:08:41:58:9c:62:c7:cf:65:8b:44:bc:70:0b:
2f:f5:57:3e:ee:e8:25:83:c5:f0:d2:b7:08:df:a6:8b:e4:ff:
f9:86:d7:02:b4:42:5c:2c:62:06:08:82:70:ea:d3:23:5d:12:
8d:86:35:81:58:62:ec:5d:bb:09:35:7b:2d:6e:84:f5:7f:c9:
8c:a6:f1:22:fe:50:15:c2:a8:51:c9:10:51:82:03:1d:4d:83:
e1:db:e2:fe:8c:d3:aa:0f:ce:8a:0e:4a:e1:95:fb:71:92:5a:
07:21:3f:75:49:2d:e7:03:54:16:92:e0:90:f7:29:bc:35:c8:
c4:07:7a:ea:41:6d:70:cc:94:74:ee:9c:79:4d:e0:10:65:4d:
89:10:48:9d:0f:e2:e1:62:fb:7a:54:26:93:30:34:62:e5:18:
25:c9:91:95:05:e6:18:1c:85:59:e0:18:b9:ad:52:a8:0c:05:
4e:82:5a:55:2c:d5:4b:e3:c7:77:95:72:86:81:a8:ff:6e:f1:
61:3a:aa:70:da:95:66:a3:0c:e2:b7:53:ac:10:7f:87:94:b7:
fa:eb:b0:96:79:39:0c:1f:10:9f:a2:1e:db:9a:45:b8:98:d1:
0e:12:93:97:e8:b5:6e:59:2d:c7:b7:6b:09:8e:a0:09:79:40:
d8:01:45:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:31 2024 by rpki-client on console-fra.rpki-client.org