Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/keEVpECUu2V6Ji9RD1sSGbv4Rho.roa
File: keEVpECUu2V6Ji9RD1sSGbv4Rho.roa (raw, json)
Hash identifier: eti/PjO1J0EgQmKZGDlvOKfVIZEK2EnqWhvuF8YuS9Q=
Subject key identifier: 91:E1:15:A4:40:94:BB:65:7A:26:2F:51:0F:5B:12:19:BB:F8:46:1A
Certificate issuer: /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial: 0185700272B812C297C7FB6B3F2E95EB9D97
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/keEVpECUu2V6Ji9RD1sSGbv4Rho.roa
Signing time: Mon 02 Jan 2023 01:04:46 +0000
ROA not before: Mon 02 Jan 2023 01:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28717
IP address blocks: 62.122.160.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:72:b8:12:c2:97:c7:fb:6b:3f:2e:95:eb:9d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Validity
Not Before: Jan 2 01:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91e115a44094bb657a262f510f5b1219bbf8461a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:74:48:54:d8:fb:2f:cc:d7:e9:d5:00:c3:
91:fd:ef:a1:a3:e7:5f:b9:af:00:f5:76:86:e3:e2:
8b:2d:56:d5:b9:94:5c:43:28:ce:bd:ab:d0:9d:39:
4f:40:1d:cc:9e:e2:f1:4a:0c:14:80:85:0f:46:da:
cf:75:f7:c0:cb:0f:0e:68:24:2f:70:9c:df:c1:80:
99:dc:6b:40:38:6f:73:f3:27:73:a1:01:4c:99:a3:
16:31:c2:71:ec:21:f1:fd:79:a7:bc:55:58:e6:fc:
63:50:e3:6c:4d:a1:f8:b5:4b:05:8a:d7:29:f0:bf:
99:c2:0c:7a:48:18:55:e5:7d:8d:62:90:50:35:2a:
de:28:a7:fd:0e:d9:55:91:ac:2e:c1:4f:c0:80:d3:
86:ab:ef:49:2b:59:3e:a5:16:53:f0:0d:0e:1d:68:
7e:22:dc:8f:bb:68:ce:60:4c:1f:d9:6b:51:18:d6:
61:39:fd:95:44:52:52:f0:f5:69:c5:42:25:d8:af:
b1:48:64:e2:63:b2:9e:d7:d3:8e:1e:94:ca:cf:28:
f0:8e:d9:a9:c8:60:aa:94:f6:fd:f9:ca:1f:6e:88:
40:44:27:11:98:a2:f3:27:40:b9:e6:02:04:61:4f:
2a:96:12:8f:cd:2d:5a:79:15:94:f1:6b:39:c1:45:
7f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E1:15:A4:40:94:BB:65:7A:26:2F:51:0F:5B:12:19:BB:F8:46:1A
X509v3 Authority Key Identifier:
keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/keEVpECUu2V6Ji9RD1sSGbv4Rho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.160.0/21
Signature Algorithm: sha256WithRSAEncryption
42:e7:5f:71:8b:f0:23:07:3e:18:90:e6:eb:27:02:f7:86:36:
4a:0f:2e:66:e1:12:e5:7a:7f:d0:3b:a3:a3:bc:52:a5:55:3c:
1c:22:10:d7:96:c6:15:6c:c8:9c:a9:0f:4a:fe:1b:81:1b:f0:
4f:ca:78:1e:6e:22:c1:3a:9b:d5:05:97:8c:7e:2b:99:7a:bc:
b1:5c:1d:10:26:ac:da:7a:aa:94:c0:aa:86:e0:ba:b7:4f:3d:
e1:a8:54:2a:8e:2d:35:ba:10:92:02:da:9e:9c:53:41:fd:92:
72:db:d3:13:5e:99:92:47:c8:f4:3f:7f:0d:d2:4c:94:91:0b:
c3:ef:7d:ec:c2:48:05:21:f2:4c:a7:e4:f2:c0:ec:27:3f:e4:
02:76:f7:b9:fd:1d:8d:9c:e1:8b:95:a5:00:52:5c:a7:e2:e3:
6e:cf:01:ed:57:d7:42:fd:2e:2e:b7:85:d1:74:89:88:43:35:
81:17:e1:78:d9:c2:96:a7:bc:42:9f:84:c8:b2:f0:06:3e:bb:
8d:5a:78:23:48:35:ca:15:7e:7e:35:65:f3:b9:84:18:6b:5f:
b9:44:4f:9f:5e:8b:fb:9f:cf:07:cc:33:86:7f:24:e0:be:f7:
29:44:d0:cd:80:14:d9:80:bd:17:b7:e4:5e:e3:a7:96:2a:cb:
4c:2c:35:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwAnK4EsKXx/trPy6V652XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMzZmMmU0MjUyMmU5OGQzNzZiZTM4YTg5ZTVkZDUxYWJi
Zjc5OTYwHhcNMjMwMTAyMDEwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWUxMTVhNDQwOTRiYjY1N2EyNjJmNTEwZjViMTIxOWJiZjg0NjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+90SFTY+y/M1+nVAMOR/e+ho+df
ua8A9XaG4+KLLVbVuZRcQyjOvavQnTlPQB3MnuLxSgwUgIUPRtrPdffAyw8OaCQv
cJzfwYCZ3GtAOG9z8ydzoQFMmaMWMcJx7CHx/XmnvFVY5vxjUONsTaH4tUsFitcp
8L+Zwgx6SBhV5X2NYpBQNSreKKf9DtlVkawuwU/AgNOGq+9JK1k+pRZT8A0OHWh+
ItyPu2jOYEwf2WtRGNZhOf2VRFJS8PVpxUIl2K+xSGTiY7Ke19OOHpTKzyjwjtmp
yGCqlPb9+cofbohARCcRmKLzJ0C55gIEYU8qlhKPzS1aeRWU8Ws5wUV/UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJHhFaRAlLtleiYvUQ9bEhm7+EYaMB8GA1UdIwQY
MBaAFLI28uQlIumNN2vjionl3VGrv3mWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xOGI1MmItNTAxMS00MzA5LWJmYmYt
NmVhYTFjODk4MjRhLzEva2VFVnBFQ1V1MlY2Smk5UkQxc1NHYnY0UmhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xOGI1MmItNTAxMS00MzA5LWJmYmYtNmVhYTFjODk4MjRh
LzEvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDPnqgMA0G
CSqGSIb3DQEBCwUAA4IBAQBC519xi/AjBz4YkObrJwL3hjZKDy5m4RLlen/QO6Oj
vFKlVTwcIhDXlsYVbMicqQ9K/huBG/BPyngebiLBOpvVBZeMfiuZeryxXB0QJqza
eqqUwKqG4Lq3Tz3hqFQqji01uhCSAtqenFNB/ZJy29MTXpmSR8j0P38N0kyUkQvD
733swkgFIfJMp+TywOwnP+QCdve5/R2NnOGLlaUAUlyn4uNuzwHtV9dC/S4ut4XR
dImIQzWBF+F42cKWp7xCn4TIsvAGPruNWngjSDXKFX5+NWXzuYQYa1+5RE+fXov7
n88HzDOGfyTgvvcpRNDNgBTZgL0Xt+Re46eWKstMLDVK
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:33 2024 by rpki-client on console-ams.rpki-client.org