Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/SHvBTn_MsuUJRfOfCC0FJ5SIXAE.roa
File: SHvBTn_MsuUJRfOfCC0FJ5SIXAE.roa (raw, json)
Hash identifier: JGZhMIbtmJFYuWbrqfhr1Z/WqJz5oBjVano62Wa3Huk=
Subject key identifier: 48:7B:C1:4E:7F:CC:B2:E5:09:45:F3:9F:08:2D:05:27:94:88:5C:01
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 01856E2F8796E7848F489A1BE5FDA9BE04FF
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/SHvBTn_MsuUJRfOfCC0FJ5SIXAE.roa
Signing time: Sun 01 Jan 2023 16:34:46 +0000
ROA not before: Sun 01 Jan 2023 16:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30781
IP address blocks: 149.62.152.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:87:96:e7:84:8f:48:9a:1b:e5:fd:a9:be:04:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Jan 1 16:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=487bc14e7fccb2e50945f39f082d052794885c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:c3:45:dd:c2:e7:b8:15:57:83:e2:8f:f8:
c5:8a:b9:a5:79:d9:fc:ca:d9:6d:3e:af:54:1b:3b:
16:38:24:02:9e:84:ef:d5:c6:1d:b2:df:da:44:23:
0c:80:1a:68:ec:7c:38:7e:4c:fa:a4:f4:23:cd:3a:
8e:f7:00:27:ed:92:bd:cc:81:0c:53:cd:75:af:71:
40:9a:be:f3:34:91:8c:ac:e7:01:7b:57:54:69:cc:
8f:99:00:bc:ef:44:e5:e8:64:21:6c:5f:f0:c9:04:
d7:b8:b2:06:3f:d2:90:fc:29:d0:e1:9d:40:06:d4:
4a:9e:c4:8e:c9:4c:5b:fd:bf:b0:24:e5:1e:cf:32:
8a:f3:83:54:07:6b:d7:c7:fc:87:fb:7d:c1:a3:63:
24:50:d8:3e:75:35:fa:55:b3:fe:9e:10:37:d8:8a:
97:4c:38:7c:37:14:4b:e2:09:80:88:b4:2c:d2:f7:
5f:14:08:40:9d:d5:cb:20:ce:3c:11:53:6c:e1:2f:
50:ec:35:8f:a2:62:72:8c:0c:85:12:c0:90:37:4a:
f0:87:52:86:6e:83:14:bd:ca:fd:97:c7:a8:67:8c:
7b:05:d3:63:87:6c:64:82:01:ab:42:7c:73:af:6e:
de:db:d1:71:cf:20:19:70:cf:16:06:75:30:0d:3d:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7B:C1:4E:7F:CC:B2:E5:09:45:F3:9F:08:2D:05:27:94:88:5C:01
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/SHvBTn_MsuUJRfOfCC0FJ5SIXAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.152.0/21
Signature Algorithm: sha256WithRSAEncryption
c1:73:66:bf:c1:0c:ce:c8:e5:fb:d5:11:ca:66:a6:a3:54:e2:
f3:2e:7d:08:08:1e:13:14:7c:b4:de:d5:8c:84:58:0d:45:3c:
52:42:e1:7b:4a:43:5b:a7:a6:76:9e:fe:21:b9:45:2b:0f:25:
3d:77:c2:4a:b5:e7:f2:53:1f:77:57:c3:27:96:06:9e:b3:3e:
f8:44:83:dd:4a:65:14:d4:28:0e:8b:d9:4f:53:38:e9:50:e1:
9b:31:27:5a:98:07:ef:bd:a8:28:99:3d:50:eb:8e:51:87:8c:
49:c3:d6:c8:10:8f:3a:49:1a:5b:97:0d:9d:ab:53:fd:21:67:
52:74:55:2e:7a:18:24:68:4e:99:b5:1a:53:2b:14:29:41:3a:
09:3c:16:7e:61:40:b9:86:33:47:09:4c:74:6a:17:3a:a6:32:
54:0b:36:93:ef:5a:c4:77:d7:3e:bc:40:1d:2e:d9:65:f1:b0:
96:83:dd:88:55:73:ee:22:92:a3:5a:79:8e:34:1a:e9:d1:56:
39:d3:a8:7a:ae:36:1c:01:8f:10:18:58:d5:88:0a:9d:98:e4:
5e:59:67:8b:cc:0b:94:d3:9e:55:e0:fa:05:90:da:69:be:95:
4f:ee:99:b7:ed:f4:ae:f8:d8:8e:a0:f8:85:e7:f0:27:ec:7a:
9e:33:95:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:34 2024 by rpki-client on console-ams.rpki-client.org