Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8xNaVH5E8qleqAu9mgiCRmVlsNs.roa
File: 8xNaVH5E8qleqAu9mgiCRmVlsNs.roa (raw, json)
Hash identifier: jxbtQCDPbdgTgIlYlaIlvJkp5ncEJuuGZ03AgUUjo0g=
Subject key identifier: F3:13:5A:54:7E:44:F2:A9:5E:A8:0B:BD:9A:08:82:46:65:65:B0:DB
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018B1832104B90B2C85E2F68C357AB4BDAAC
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8xNaVH5E8qleqAu9mgiCRmVlsNs.roa
Signing time: Tue 10 Oct 2023 06:06:55 +0000
ROA not before: Tue 10 Oct 2023 06:06:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57152
IP address blocks: 62.106.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Dec 2023 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:18:32:10:4b:90:b2:c8:5e:2f:68:c3:57:ab:4b:da:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 10 06:06:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3135a547e44f2a95ea80bbd9a0882466565b0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:29:9e:d2:e1:94:dd:ba:df:50:d9:c3:76:16:
a1:98:41:eb:28:c4:fb:2b:23:21:c5:19:ef:5c:21:
5d:d0:6c:fd:9c:c0:4c:20:0d:85:50:b4:d3:37:37:
aa:21:c6:2e:05:69:9f:c5:99:b8:3a:15:54:17:fc:
93:a6:11:10:30:2e:2e:0a:0e:9c:4d:e3:f3:48:7e:
dd:95:38:61:d3:b3:87:61:55:04:43:11:9d:49:85:
22:d9:47:e6:20:d5:b4:5c:f5:26:d7:8a:a0:c2:e2:
98:86:93:2a:13:77:17:fe:38:10:e3:51:d1:d2:f4:
6d:9e:0b:ba:e5:41:d7:53:dc:7e:53:c4:36:71:a9:
04:4a:71:9a:12:6f:82:cf:38:ef:be:c1:dc:8f:37:
02:02:61:8c:a7:3c:50:a7:c2:5c:ff:28:03:58:4f:
dd:b7:fa:d6:ec:f1:96:37:9a:41:7e:74:03:6b:6a:
a3:76:fb:31:79:0d:49:84:65:ae:6d:ce:6b:7f:19:
5d:5c:06:0f:31:df:cc:6b:f4:70:83:17:46:26:e9:
1e:9d:c5:e7:ac:a7:79:ee:99:05:bd:5e:24:5b:a4:
a7:a8:57:dd:b5:32:3e:c1:55:77:ba:c5:37:01:75:
c0:1d:24:7f:d5:c3:f0:97:f4:52:48:c0:19:c1:a4:
8f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:13:5A:54:7E:44:F2:A9:5E:A8:0B:BD:9A:08:82:46:65:65:B0:DB
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8xNaVH5E8qleqAu9mgiCRmVlsNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.84.0/24
Signature Algorithm: sha256WithRSAEncryption
71:65:35:62:06:bd:c6:22:ec:9a:e3:e2:2a:d2:9f:ea:04:d3:
d7:d5:a5:57:03:d1:2d:e2:fb:ab:f9:c9:cf:b0:71:d2:f5:d0:
65:a1:54:53:15:fe:a4:82:c5:d7:08:31:06:60:c8:28:40:89:
a8:bd:a7:26:bc:4a:71:0e:2d:24:0c:0d:ab:1d:e1:71:5d:0b:
ee:be:59:a6:3a:97:af:c1:86:6e:94:c2:2b:71:6c:c9:d7:83:
dc:98:db:e2:21:c7:0b:ad:9e:00:39:36:96:e8:8e:76:9c:f1:
53:e2:9f:90:5a:7f:a0:16:96:e9:79:f6:0b:c1:33:c7:4e:9a:
82:c4:cc:9f:3e:3f:f1:3e:85:9d:ca:51:06:e7:5b:7a:0b:fe:
dc:11:b1:ae:de:3f:5b:0e:24:33:fe:cd:f6:3c:cf:14:a5:6d:
4e:8f:e4:94:9f:20:84:e3:dc:c4:d8:da:26:a1:5b:c5:c7:ff:
33:a6:7f:20:f6:7e:98:07:52:33:a7:25:44:4b:ab:d5:67:61:
ef:be:df:e6:79:83:76:06:17:4e:c8:9c:25:7c:74:54:88:ad:
ab:ef:66:18:a4:bf:48:7b:81:8c:3a:57:6f:5d:40:cc:89:03:
20:c5:74:6f:b8:5d:21:87:85:28:ad:b0:a8:5a:ee:d8:a8:86:
d3:9b:3d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org