Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/xmxcEnBgyoBRsyBv40jPQOpS9oM.roa
File: xmxcEnBgyoBRsyBv40jPQOpS9oM.roa (raw, json)
Hash identifier: Czlaj0klpOLvOuXxM4Et6bedChkdE5mkmmHtNrv9VMk=
Subject key identifier: C6:6C:5C:12:70:60:CA:80:51:B3:20:6F:E3:48:CF:40:EA:52:F6:83
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 018570797169394F3336F714311F543A472C
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/xmxcEnBgyoBRsyBv40jPQOpS9oM.roa
Signing time: Mon 02 Jan 2023 03:14:45 +0000
ROA not before: Mon 02 Jan 2023 03:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55081
IP address blocks: 62.100.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:71:69:39:4f:33:36:f7:14:31:1f:54:3a:47:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 2 03:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c66c5c127060ca8051b3206fe348cf40ea52f683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:55:8e:c4:b4:90:fe:14:da:97:d3:7c:a1:06:
77:0b:f0:94:6e:98:b4:f5:98:28:92:fe:1c:c8:30:
37:67:49:f4:ed:de:2b:8c:74:88:6d:7c:b5:1a:8a:
98:c2:ec:e7:dd:74:3b:9e:66:d2:89:49:bf:cb:e7:
c5:82:8f:46:08:3f:38:98:93:17:cd:e8:4f:2f:0e:
74:26:7c:0f:52:30:5a:3b:3d:2d:eb:03:68:15:50:
09:25:d2:b8:26:1c:21:75:de:59:37:20:40:25:12:
9c:d4:5b:1b:7f:49:d2:53:d8:a0:b6:4c:00:48:c3:
33:dc:b5:4a:2e:04:29:d8:22:42:52:9d:b3:f6:1d:
86:c9:e7:87:a7:41:8c:7a:a3:f8:04:d2:39:dc:b0:
c9:33:15:7a:c4:46:cd:ee:f0:86:a0:49:1c:7d:5f:
e3:c8:3f:b8:5c:70:16:b2:70:aa:c1:47:1a:5e:83:
bf:6b:bf:93:9f:ea:75:3a:9e:53:b6:42:4c:4c:e8:
0e:f3:84:cb:63:33:85:21:8c:17:09:78:55:0c:56:
dc:72:62:70:7b:84:7a:b6:83:e2:94:a3:0e:54:3d:
7d:9f:f4:8b:eb:47:cc:a2:52:0b:a4:0e:84:7a:c3:
8b:f9:fb:d4:8f:39:4f:e6:00:3f:b1:e8:54:8d:a3:
3d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6C:5C:12:70:60:CA:80:51:B3:20:6F:E3:48:CF:40:EA:52:F6:83
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/xmxcEnBgyoBRsyBv40jPQOpS9oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.211.0/24
Signature Algorithm: sha256WithRSAEncryption
15:19:bb:44:30:96:b1:0d:be:f5:c4:41:47:31:b3:56:47:c9:
d9:66:89:d2:24:e8:11:9b:8f:9d:ac:02:c5:eb:8c:a8:24:9f:
f5:5e:a4:72:2c:12:c1:fb:d4:e8:7b:a8:1c:db:5d:de:e8:93:
bd:c9:4c:00:5a:aa:5e:d5:98:02:b2:6d:89:4a:eb:bd:0a:91:
eb:d8:3b:46:dd:92:26:6a:50:23:3c:10:62:cf:e4:c4:6b:eb:
18:8a:6d:27:2c:de:ad:fb:e3:45:ea:42:7a:fa:f4:ca:10:b5:
d6:07:2c:fb:5a:f5:a9:3d:0f:3c:49:9d:f3:1c:bd:fe:18:40:
b5:2b:36:c0:8a:38:f9:c5:fa:80:ca:49:bc:93:60:de:45:c0:
35:b9:24:5d:86:52:36:53:a3:9f:67:47:f6:ba:9c:db:2c:03:
e6:55:2c:00:ad:40:56:f6:f5:bb:62:b4:3e:b2:b6:0d:55:af:
0c:16:61:64:5c:8e:e4:b2:b4:1c:10:d2:1c:18:d6:8e:bb:f8:
a6:60:76:d6:1a:3a:5b:07:57:81:ef:6b:43:c3:85:47:00:02:
9b:df:cb:6d:2c:bf:86:9e:83:a0:77:2d:88:33:70:33:1a:0e:
db:18:8a:1c:e6:31:b3:fa:ca:73:55:f7:6e:19:f9:47:b7:84:
9a:ab:4b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:31 2024 by rpki-client on console-fra.rpki-client.org