Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/EkkYSBbg_FaKMUV9r_s6DPTuVHE.roa
File: EkkYSBbg_FaKMUV9r_s6DPTuVHE.roa (raw, json)
Hash identifier: vSc6C227KHuwW+qNHyQ1wZU7NesT+j6x0ZqCOKDDElE=
Subject key identifier: 12:49:18:48:16:E0:FC:56:8A:31:45:7D:AF:FB:3A:0C:F4:EE:54:71
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018C7BA654DF1C7AA380D96C9C2ECE9B123C
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/EkkYSBbg_FaKMUV9r_s6DPTuVHE.roa
Signing time: Mon 18 Dec 2023 06:39:07 +0000
ROA not before: Mon 18 Dec 2023 06:39:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 62.106.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7b:a6:54:df:1c:7a:a3:80:d9:6c:9c:2e:ce:9b:12:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Dec 18 06:39:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1249184816e0fc568a31457daffb3a0cf4ee5471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:1c:66:b8:46:7b:13:08:75:a0:d3:80:e6:
74:d0:0e:ca:2d:39:d2:86:c6:73:d0:89:a7:82:a2:
d2:bf:f4:f2:ef:c1:18:4d:c9:dc:ce:a1:47:cc:72:
49:a7:12:52:80:89:c3:05:4a:ed:b3:0f:86:8a:fb:
fa:d4:6d:de:57:0b:54:28:c4:d7:6c:75:0e:d7:93:
8b:22:81:e0:27:6b:96:1e:da:40:cb:bc:02:9e:61:
1f:a3:3c:1b:8d:0f:82:94:bf:c0:3f:e1:08:4e:bf:
a0:c0:56:a7:0f:3e:0d:73:97:c6:2c:67:98:f3:c4:
64:91:d3:a2:67:61:90:37:a5:a9:88:1c:de:70:77:
a2:ff:26:34:3d:c8:10:a3:c3:e5:24:0f:5f:6f:60:
bb:aa:c6:05:72:81:85:05:bf:ac:da:6f:0a:55:a0:
d3:87:06:58:fe:e7:59:36:86:d6:de:b7:db:6b:86:
85:c6:e9:d9:37:e6:05:8f:32:8b:97:2f:23:76:9f:
c5:38:4b:67:54:ba:d9:93:cd:ad:79:af:ad:d7:69:
5e:b4:03:24:5b:cc:35:94:5e:20:cc:fd:3e:8e:99:
3c:42:dc:88:b9:a1:b5:bf:b8:5f:63:17:bd:59:18:
83:dc:29:a0:c1:1d:9b:eb:d4:d6:9c:5d:2a:9b:ba:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:49:18:48:16:E0:FC:56:8A:31:45:7D:AF:FB:3A:0C:F4:EE:54:71
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/EkkYSBbg_FaKMUV9r_s6DPTuVHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.84.0/24
Signature Algorithm: sha256WithRSAEncryption
06:5c:b6:4a:d0:92:6d:bd:32:5e:1b:f7:98:07:d2:c0:66:5d:
24:54:cc:97:4b:fd:e9:c2:1c:23:1c:d6:ac:0c:a9:98:2e:f0:
ff:ba:16:df:30:d3:eb:a3:5f:62:82:e0:cd:9f:84:c7:48:2f:
65:1f:f9:c7:42:5c:fb:0e:59:af:32:de:85:e0:84:c8:0f:32:
66:01:0c:a6:7b:92:f2:e4:fa:87:25:d5:69:43:6b:de:c4:2e:
64:02:df:0f:01:79:91:45:52:22:ac:63:b3:f0:75:a4:7c:fc:
1b:ff:85:0b:52:b1:54:a5:e4:b6:0e:4e:5c:70:6b:4b:02:16:
bb:35:0e:8b:91:8e:3e:c2:97:83:3b:b0:21:e2:20:75:cd:67:
64:05:ee:98:be:33:80:f4:10:dc:f7:d7:ea:bc:4d:cd:52:04:
fe:20:28:59:81:8c:c2:0a:d1:6f:33:e3:0a:72:50:8a:75:2b:
79:50:6d:4b:79:fd:c5:1c:bc:b7:cb:af:87:37:a3:25:11:ae:
5a:7f:dd:26:98:e8:c9:98:22:47:3b:8f:d4:ec:5d:af:99:d3:
78:29:e9:27:ed:65:1f:d3:8e:f0:5b:42:86:53:51:38:51:51:
68:b0:b3:0d:0f:05:4e:b2:2d:25:2d:b4:b8:04:33:7a:c1:3a:
09:a7:e5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org