Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/hEmEilZzgEMzRfi3yFMMzWgdm2o.roa
File: hEmEilZzgEMzRfi3yFMMzWgdm2o.roa (raw, json)
Hash identifier: PxGXDc8CWEG27jjIsCx60PhIsICttlMUoG1Z6NHesVs=
Subject key identifier: 84:49:84:8A:56:73:80:43:33:45:F8:B7:C8:53:0C:CD:68:1D:9B:6A
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 0185707970850AEBDFE7884CF25CF5D2CB8C
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/hEmEilZzgEMzRfi3yFMMzWgdm2o.roa
Signing time: Mon 02 Jan 2023 03:14:44 +0000
ROA not before: Mon 02 Jan 2023 03:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48806
IP address blocks: 62.100.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:70:85:0a:eb:df:e7:88:4c:f2:5c:f5:d2:cb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 2 03:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8449848a567380433345f8b7c8530ccd681d9b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:42:94:1d:a3:12:7d:8c:41:92:0d:2d:d6:77:
56:1e:3b:f8:84:25:49:1c:7d:58:1e:46:2c:79:76:
32:d7:03:f1:19:5e:95:87:bb:be:b3:0e:5f:c9:13:
3f:30:bf:2c:a5:d8:c7:d0:af:8a:6b:fd:08:f5:c9:
50:dd:cc:b7:c8:08:97:4b:88:d5:c7:a3:1a:09:b9:
43:6c:11:b8:eb:ac:48:01:2e:3c:2f:50:91:c8:95:
77:0d:44:d1:64:fd:46:ca:56:7b:73:44:a9:c9:9b:
f5:60:84:b4:9c:10:30:4a:78:a1:ad:0d:24:1c:e1:
b2:46:da:c3:67:9b:62:be:f9:73:43:66:21:67:60:
8a:7d:ae:83:9d:87:4e:09:09:bc:5c:1c:62:9c:f3:
d2:61:30:4a:bc:43:52:43:b0:ad:45:48:ec:90:df:
9c:a0:a6:be:f0:e5:d8:ae:24:ac:d7:0c:b7:7b:33:
31:07:f4:71:66:d4:52:b2:54:3b:09:06:35:44:12:
6a:7b:37:d9:c7:a3:db:2d:9c:04:18:7d:b4:b2:bd:
67:87:11:b4:73:24:03:ee:4c:0f:69:af:b2:45:d5:
d8:76:13:00:3c:b8:49:97:71:4d:fa:fd:e0:fe:76:
3f:4d:eb:ea:ac:88:a2:d0:8c:9f:c9:4e:57:e8:f7:
ad:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:49:84:8A:56:73:80:43:33:45:F8:B7:C8:53:0C:CD:68:1D:9B:6A
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/hEmEilZzgEMzRfi3yFMMzWgdm2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.210.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3b:91:86:34:0f:dd:95:d9:df:58:77:6e:00:18:2d:2c:6c:
33:24:34:76:e0:7d:8b:f4:ba:25:5c:6a:4f:64:95:39:b6:97:
7f:b3:14:97:c6:c4:10:8b:40:e2:08:2e:f2:1c:47:a5:bb:20:
a6:3b:5a:b9:8e:eb:1e:18:bb:f8:12:a9:a6:6b:39:67:f6:07:
2c:6c:d0:ce:f0:27:8b:e5:26:85:10:9a:c9:d4:90:07:11:ba:
5a:3a:f5:d9:1b:b4:aa:08:c8:40:87:da:55:de:8a:e7:3e:31:
44:0c:05:c0:b7:87:92:e1:cc:bb:96:8d:4a:5f:13:68:49:ce:
6a:56:4c:be:f1:c8:db:84:5b:30:df:3f:d4:80:9c:ba:6d:8c:
e5:f1:39:4f:d7:be:ea:f3:2e:7e:44:89:54:4a:a3:2d:a0:af:
7b:a8:ef:48:b5:e8:a8:0b:c0:62:ea:a1:1a:63:87:8a:f2:25:
d8:e0:dc:ee:ed:3b:06:eb:fb:16:86:fe:f7:58:77:b2:2c:75:
24:a2:5f:d1:32:cc:0c:3a:2a:65:de:14:32:ea:51:c7:5e:61:
c6:d3:d8:a8:44:a7:54:bd:e2:b5:12:01:a8:bb:0f:c0:aa:b5:
e4:be:90:ca:65:7e:31:8f:72:5a:03:ed:6e:14:3f:2d:ec:28:
b4:1b:2d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:24 2024 by rpki-client on console-ams.rpki-client.org