Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/eHkLk16kkP0nUkVmZ36B4ggRILg.roa
File: eHkLk16kkP0nUkVmZ36B4ggRILg.roa (raw, json)
Hash identifier: zAWNdrTetLFeGp+0SscJmqQd05eoAOHFDK/3WH6hWC8=
Subject key identifier: 78:79:0B:93:5E:A4:90:FD:27:52:45:66:67:7E:81:E2:08:11:20:B8
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 01856F5DC414B22447FBD30B0C800F27B2DC
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/eHkLk16kkP0nUkVmZ36B4ggRILg.roa
Signing time: Sun 01 Jan 2023 22:04:54 +0000
ROA not before: Sun 01 Jan 2023 22:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196820
IP address blocks: 62.215.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c4:14:b2:24:47:fb:d3:0b:0c:80:0f:27:b2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Jan 1 22:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78790b935ea490fd27524566677e81e2081120b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:19:34:20:ab:d9:26:e0:7e:75:a8:3d:15:38:
8b:c9:58:ae:a2:40:b6:e8:95:35:4f:aa:dc:f7:04:
86:dc:58:4e:6f:41:1c:26:67:e9:f5:4e:b1:bc:52:
3c:46:22:db:f8:8b:6a:9b:2f:16:d2:2a:12:d9:d8:
54:dc:9a:1f:e8:9d:50:98:b7:f8:cb:16:3c:d8:c8:
ee:58:29:8e:4f:c1:79:60:b0:23:cc:f5:d5:fb:df:
e6:5c:5a:c3:4d:11:fb:f1:0a:58:4e:2b:a2:3d:5b:
af:44:a2:27:9f:1c:2f:77:d3:2e:02:c6:d9:56:9b:
16:63:6a:bc:1d:1a:ba:60:80:de:19:c0:0c:f5:a7:
af:a3:c5:5a:72:76:1c:35:a4:82:88:b2:14:3e:03:
51:a3:c5:cc:b7:50:2c:00:ba:17:7e:a6:01:c1:69:
96:30:1a:5b:9f:93:fd:9f:5e:13:c9:45:02:ea:96:
96:a3:46:42:c5:ed:2d:ac:c3:bf:ac:47:a3:c2:03:
77:cd:e0:2e:f5:ed:84:ea:35:fc:63:5a:f1:93:8c:
38:ec:5f:3c:f1:a0:72:03:78:68:c7:9d:f1:3e:41:
fe:a1:9c:fd:38:7a:b8:bc:84:78:20:70:9b:e1:bb:
81:23:ec:1a:f9:6a:65:a7:df:f6:c6:42:de:21:f3:
b6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:79:0B:93:5E:A4:90:FD:27:52:45:66:67:7E:81:E2:08:11:20:B8
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/eHkLk16kkP0nUkVmZ36B4ggRILg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.215.111.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1e:18:b7:33:0c:24:5b:65:5d:e7:4e:d6:85:44:35:92:92:
cc:24:1f:76:a9:42:72:17:71:2f:03:26:2b:38:bd:98:4b:c0:
db:f1:ed:d9:ce:92:a4:d5:8d:a7:82:65:5b:65:d8:fc:43:4d:
91:ae:8f:fe:ec:24:78:4f:b3:f8:0a:ba:8f:7b:79:84:e2:8f:
a4:d6:2a:52:b1:2d:1c:71:0a:59:3b:cb:eb:a7:0f:7d:2b:8d:
95:c0:a0:55:94:a3:96:94:21:61:7b:90:d0:69:41:ff:a9:13:
d9:6a:99:6c:5a:72:d9:90:44:07:ed:8f:3b:20:3a:98:b5:a6:
5a:85:9b:a1:3c:b5:38:e8:39:ae:37:0e:39:a4:82:dc:50:32:
19:80:5e:e8:f9:61:c2:51:4c:18:61:41:a6:d1:9c:49:00:78:
f9:f1:28:46:bc:13:06:60:87:89:0c:7a:94:0d:d2:40:1b:ca:
d5:d6:11:96:33:22:e9:b2:80:b2:e9:4d:6c:b9:42:4d:c0:61:
a6:f3:32:3e:2c:3d:74:a1:57:0d:c0:dc:12:20:c3:45:dc:8b:
13:c3:50:60:5a:4d:61:e7:9d:ed:b2:97:66:ad:cd:65:99:06:
e8:fb:64:cb:3c:53:6f:4f:70:a0:72:19:5d:32:6b:7f:c5:07:
9a:11:62:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:57 2024 by rpki-client on console-fra.rpki-client.org