Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/zgSuVdAgPxRvCFhmS-cYF9N9Uv8.roa
File: zgSuVdAgPxRvCFhmS-cYF9N9Uv8.roa (raw, json)
Hash identifier: SiY92pj4NX7ru/QgKvrs6gtauNMW1r3A+b/xnKeJm/w=
Subject key identifier: CE:04:AE:55:D0:20:3F:14:6F:08:58:66:4B:E7:18:17:D3:7D:52:FF
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 01856F5DC1F0F8641476C1EA81B5669CB83A
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/zgSuVdAgPxRvCFhmS-cYF9N9Uv8.roa
Signing time: Sun 01 Jan 2023 22:04:53 +0000
ROA not before: Sun 01 Jan 2023 22:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52081
IP address blocks: 62.215.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c1:f0:f8:64:14:76:c1:ea:81:b5:66:9c:b8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Jan 1 22:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce04ae55d0203f146f0858664be71817d37d52ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:1b:7b:c9:2d:45:ce:3b:1e:7a:b8:56:d6:
09:ae:8f:6c:11:7e:91:b9:20:b9:bf:65:3a:b4:1b:
0e:ae:28:e2:1c:d1:ca:15:99:78:b2:73:ad:db:70:
f8:a8:7a:87:98:da:05:7e:70:db:b1:79:02:0c:be:
cd:09:32:a7:3f:09:b6:f9:73:15:08:da:14:58:53:
13:d6:c5:99:37:b5:fa:0c:47:da:05:cc:be:b8:4d:
e6:1e:50:3b:92:3f:8b:69:e2:42:00:be:28:d0:65:
3a:70:20:3b:18:48:e7:62:0c:72:0f:0b:38:4f:cc:
99:9a:79:10:ab:0a:f4:f1:34:62:e2:ea:92:f0:b5:
5a:9c:68:aa:39:ee:59:44:18:9d:4d:97:80:f0:10:
71:a0:8a:7f:06:7c:11:dc:e4:b7:e1:74:9f:32:36:
65:c1:3a:60:d6:e7:35:00:57:80:57:1a:ef:3b:f1:
d1:e2:b2:01:ef:1e:37:3b:5b:08:8e:57:0e:cb:d4:
a9:fd:df:9c:b2:28:51:a0:c2:8d:75:5b:1e:15:a3:
4a:33:b4:8b:1b:64:ca:0d:50:e2:64:68:cb:00:3a:
95:6a:37:b7:80:74:40:4b:43:5c:6f:4e:50:99:e5:
76:4c:d0:37:46:b9:60:f6:97:ea:40:aa:12:a1:7b:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:04:AE:55:D0:20:3F:14:6F:08:58:66:4B:E7:18:17:D3:7D:52:FF
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/zgSuVdAgPxRvCFhmS-cYF9N9Uv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.215.49.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d6:ec:b4:53:48:46:af:be:83:ef:68:85:6b:c4:a0:8c:bc:
72:a0:39:f2:21:dc:05:9a:2c:0a:19:8f:5b:ea:fa:48:73:0b:
30:d8:b8:ad:c6:36:4d:41:0f:6a:0b:2a:11:57:93:c6:26:31:
6e:2a:48:35:f4:09:37:99:5f:5a:fd:5f:6a:3d:e7:47:11:d2:
62:e4:e7:0d:9b:b4:fd:74:39:8e:d3:60:cc:1d:e8:63:11:4f:
96:fb:95:07:e5:72:17:9f:62:d9:49:bc:1e:ed:31:67:b5:23:
49:f4:b7:fe:be:bc:8f:18:8a:e2:a6:39:b5:b9:95:48:8c:5a:
65:21:32:4e:a0:f1:5d:a1:ec:05:75:3d:26:d1:eb:a6:55:4c:
92:1a:5c:4a:0f:90:5a:5f:75:9d:27:de:5d:82:69:97:14:2b:
b8:12:77:80:2e:19:aa:78:fa:c5:78:38:21:3a:ad:ed:fa:59:
76:f1:8e:2a:1e:5a:10:b8:6b:df:78:72:cc:28:4c:a7:7a:dd:
a8:1c:05:5a:7e:cf:d6:1a:4a:60:cd:59:b6:23:e6:23:ab:05:
e6:f9:c4:48:cb:44:5b:3f:cf:2d:f0:db:b3:1d:86:92:38:5b:
39:3f:13:d3:f9:b2:41:c0:16:f8:e3:63:5b:27:9c:b7:c3:3c:
0a:35:5a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:57 2024 by rpki-client on console-fra.rpki-client.org