Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ElSjsYeSmueWlSL4eAypGUeP0-U.roa
File: ElSjsYeSmueWlSL4eAypGUeP0-U.roa (raw, json)
Hash identifier: BKxjVAVNX50dNRLcRqoyUtypUGz/Xq8b9JtHmY4LapQ=
Subject key identifier: 12:54:A3:B1:87:92:9A:E7:96:95:22:F8:78:0C:A9:19:47:8F:D3:E5
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018C482FA0E7B858BED4154E5A1CE9429D2B
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ElSjsYeSmueWlSL4eAypGUeP0-U.roa
Signing time: Fri 08 Dec 2023 06:48:50 +0000
ROA not before: Fri 08 Dec 2023 06:48:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 62.106.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Dec 2023 21:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:48:2f:a0:e7:b8:58:be:d4:15:4e:5a:1c:e9:42:9d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Dec 8 06:48:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1254a3b187929ae7969522f8780ca919478fd3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:27:bf:63:c3:ab:d1:9e:e6:67:8c:21:b4:
ac:76:33:2c:c5:36:e5:39:95:39:26:4b:d6:53:be:
d0:25:85:72:b2:59:8c:d2:0d:ca:4a:c5:5c:7a:8a:
54:cf:21:ad:00:e9:5f:b1:fe:71:0e:68:ab:69:42:
ab:b5:f1:31:c8:c7:3c:c4:84:44:90:63:07:eb:36:
b8:dd:59:f1:c1:b8:70:03:e3:5e:da:4c:1c:3c:0a:
1d:fe:c7:37:fa:e8:ad:2b:39:e2:75:3e:75:30:93:
a0:1e:1f:0a:b6:b2:14:d8:f2:a6:56:63:28:cc:d9:
ba:e9:54:ba:11:01:58:d5:f1:24:b7:ec:66:c7:91:
e9:5d:d4:65:fe:93:08:04:9c:48:f0:10:7d:33:57:
ad:4f:e9:63:2e:3c:a9:44:fc:b4:b0:4b:ca:fc:64:
2a:37:61:27:45:77:b7:68:c6:8e:5c:fd:a3:81:cb:
4a:c8:e7:a9:a2:81:aa:66:cc:f3:b8:94:8a:08:e4:
f6:3c:97:4b:f6:cc:b9:77:ff:36:f3:53:c0:e9:98:
cb:6b:5e:56:09:65:26:d1:de:4e:41:50:d9:94:e6:
9a:75:92:45:26:c1:7d:03:68:65:70:0d:37:e1:ea:
9d:d5:03:cf:17:68:e6:08:34:9e:ae:1e:80:19:8d:
6c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:54:A3:B1:87:92:9A:E7:96:95:22:F8:78:0C:A9:19:47:8F:D3:E5
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ElSjsYeSmueWlSL4eAypGUeP0-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.84.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:20:8c:2a:07:57:41:97:f3:3a:fa:20:b1:33:ae:66:9e:92:
5d:fc:73:ab:29:51:72:33:6f:a7:a4:d6:08:73:1c:ff:5e:d1:
90:41:81:61:e0:88:1d:ce:ca:d6:0e:f7:57:81:09:04:c4:de:
d0:09:90:24:ae:28:6e:03:46:5c:5a:2c:31:5c:b4:cb:b4:66:
64:91:e2:2f:48:56:84:fa:e0:75:cb:29:1a:5b:62:aa:01:b9:
ed:25:1e:02:be:25:6b:46:b7:4c:1a:ed:24:b0:6b:73:ec:51:
5b:66:ef:06:16:cd:05:06:cc:0e:1b:50:d0:19:3c:f0:06:b6:
70:3b:6a:8c:43:b2:d8:3b:89:27:9b:8d:8a:d8:0f:a7:28:94:
e3:8e:9f:56:95:7d:4b:d0:22:b8:39:00:13:5e:3c:cb:92:9f:
9d:be:79:a4:cf:b4:6d:57:9d:03:9b:91:6d:21:b8:a1:dc:57:
69:e2:88:ed:c7:f4:7a:53:f9:86:a9:33:6a:1f:47:5d:a4:28:
ce:31:12:4d:45:c7:74:b3:d0:d8:5e:0d:23:11:4a:7a:ea:c7:
ee:84:91:ea:08:d6:c5:c1:cc:b1:ad:45:38:a7:39:0d:da:9a:
8c:56:ea:58:88:5d:6c:45:7f:c5:b7:81:f2:25:e7:0c:28:06:
53:a6:69:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxIL6DnuFi+1BVOWhzpQp0rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMxMjA4MDY0ODUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjU0YTNiMTg3OTI5YWU3OTY5NTIyZjg3ODBjYTkxOTQ3OGZkM2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqEnv2PDq9Ge5meMIbSsdjMsxTbl
OZU5JkvWU77QJYVyslmM0g3KSsVceopUzyGtAOlfsf5xDmiraUKrtfExyMc8xIRE
kGMH6za43VnxwbhwA+Ne2kwcPAod/sc3+uitKznidT51MJOgHh8KtrIU2PKmVmMo
zNm66VS6EQFY1fEkt+xmx5HpXdRl/pMIBJxI8BB9M1etT+ljLjypRPy0sEvK/GQq
N2EnRXe3aMaOXP2jgctKyOepooGqZszzuJSKCOT2PJdL9sy5d/8281PA6ZjLa15W
CWUm0d5OQVDZlOaadZJFJsF9A2hlcA034eqd1QPPF2jmCDSerh6AGY1sXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBJUo7GHkprnlpUi+HgMqRlHj9PlMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvRWxTanNZZVNtdWVXbFNMNGVBeXBHVWVQMC1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmpUMA0G
CSqGSIb3DQEBCwUAA4IBAQCOIIwqB1dBl/M6+iCxM65mnpJd/HOrKVFyM2+npNYI
cxz/XtGQQYFh4IgdzsrWDvdXgQkExN7QCZAkrihuA0ZcWiwxXLTLtGZkkeIvSFaE
+uB1yykaW2KqAbntJR4CviVrRrdMGu0ksGtz7FFbZu8GFs0FBswOG1DQGTzwBrZw
O2qMQ7LYO4knm42K2A+nKJTjjp9WlX1L0CK4OQATXjzLkp+dvnmkz7RtV50Dm5Ft
Ibih3Fdp4ojtx/R6U/mGqTNqH0ddpCjOMRJNRcd0s9DYXg0jEUp66sfuhJHqCNbF
wcyxrUU4pzkN2pqMVupYiF1sRX/Ft4HyJecMKAZTpmlD
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org