Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/gfKBzg1vKceqQSrGxogGugMP8og.roa
File: gfKBzg1vKceqQSrGxogGugMP8og.roa (raw, json)
Hash identifier: hMZ2oKjmA8vHQFidsntTaKJHD3zgQ3hwZLP49syBzYs=
Subject key identifier: 81:F2:81:CE:0D:6F:29:C7:AA:41:2A:C6:C6:88:06:BA:03:0F:F2:88
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 018572034B6BF848BFB8C1110D07ABDD66EE
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/gfKBzg1vKceqQSrGxogGugMP8og.roa
Signing time: Mon 02 Jan 2023 10:24:56 +0000
ROA not before: Mon 02 Jan 2023 10:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6786
IP address blocks: 62.169.4.0/24 maxlen: 24
62.169.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:4b:6b:f8:48:bf:b8:c1:11:0d:07:ab:dd:66:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Jan 2 10:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81f281ce0d6f29c7aa412ac6c68806ba030ff288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:45:7e:74:bd:86:12:a3:93:dc:a1:d8:84:5b:
07:2c:c7:eb:e2:8d:07:6a:10:db:6f:58:85:2a:92:
a0:04:2c:af:d7:a2:5a:cb:8a:73:1f:a1:a3:b0:9d:
95:eb:27:9c:9f:29:13:4d:4a:9c:13:ee:1b:52:fc:
38:5a:1c:04:80:85:11:e1:ff:b7:f4:f1:c3:ab:38:
68:c9:e6:2d:6a:20:ee:bc:4d:b1:fb:ae:42:b1:81:
b3:1c:81:0e:a5:74:37:b7:55:35:45:d5:d0:c0:1c:
3d:66:62:09:3d:87:02:ac:ce:f5:c5:2e:4a:b4:fa:
aa:f3:5c:98:95:69:9a:59:33:f0:36:70:da:4f:b8:
06:e6:6d:89:48:8a:b6:0e:6e:06:e4:19:16:92:68:
81:98:72:47:ba:6a:dc:22:07:3b:6d:32:32:4a:33:
11:ed:19:0d:8f:dc:32:83:2e:71:2a:6e:10:c1:a4:
4a:a4:bc:e5:3a:4b:cd:b9:89:f3:dd:b8:ca:53:2d:
08:b4:c5:f8:54:8f:4a:9c:c9:1a:cc:76:c5:ad:87:
c1:88:81:8a:06:d5:35:6a:99:96:da:59:1a:ce:0d:
5e:b6:1b:f7:fe:43:7f:47:af:9f:08:28:6b:ce:60:
3c:b3:b0:a4:8d:72:77:e4:6e:3b:0f:77:91:b0:ac:
f9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F2:81:CE:0D:6F:29:C7:AA:41:2A:C6:C6:88:06:BA:03:0F:F2:88
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/gfKBzg1vKceqQSrGxogGugMP8og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.4.0/24
62.169.7.0/24
Signature Algorithm: sha256WithRSAEncryption
12:0d:c9:24:08:76:42:07:a2:ad:8d:15:3f:d0:9c:1d:4a:a8:
8a:a5:a6:e4:dc:42:ed:c6:c4:0d:32:be:16:af:52:02:6c:2d:
a4:c7:d3:0f:a1:97:0d:81:32:45:57:7f:3d:77:a4:34:3e:e7:
0e:3a:06:6a:57:0e:49:89:9f:92:18:6f:4c:49:8e:b3:b3:35:
81:43:8e:12:49:12:25:f9:ee:74:a2:5f:c2:f2:73:03:a6:45:
3f:ca:59:bf:bc:1c:fa:4b:81:07:18:c9:a6:95:5f:86:b7:94:
74:09:f6:8a:d3:6b:7b:2b:5b:5b:a5:8c:09:c0:d7:39:2d:17:
42:02:0e:9c:5a:3d:5f:66:d1:96:20:dc:2b:cf:6d:ff:71:6a:
cd:81:69:a3:49:73:f8:84:47:b2:dd:1d:d8:6d:43:a1:c0:4a:
f9:8a:78:9b:2d:52:d2:a2:3b:42:ef:c4:56:ba:ee:ae:9e:76:
01:49:14:e0:9f:38:98:9a:6e:e4:39:cc:27:83:ae:f8:52:8a:
2d:84:99:d5:e2:69:35:4f:a5:a2:c5:b8:04:07:0b:b7:d8:41:
02:9e:17:5d:0f:62:38:c6:e6:26:8b:64:6d:ac:79:5a:eb:cb:
eb:81:44:93:76:d5:37:5d:e6:d1:ea:ca:c0:9b:96:cb:9b:1d:
9c:e2:aa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:11 2024 by rpki-client on console-ams.rpki-client.org