Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e55563-ccf7-4e79-a3e9-7adbd2136ac1/1/1nfizmE5GHzAVbJgWp22-nD7kXA.roa
File: 1nfizmE5GHzAVbJgWp22-nD7kXA.roa (raw, json)
Hash identifier: 6v7ARspV6S/S98DXWsD4BgG5bUrjUxEna8mrtdw4rt8=
Subject key identifier: D6:77:E2:CE:61:39:18:7C:C0:55:B2:60:5A:9D:B6:FA:70:FB:91:70
Certificate issuer: /CN=e39176c5a602527533c2b541406ae83f209e620c
Certificate serial: 018730E1AD7B8464CB90CDB1F737FF36C6F3
Authority key identifier: E3:91:76:C5:A6:02:52:75:33:C2:B5:41:40:6A:E8:3F:20:9E:62:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45F2xaYCUnUzwrVBQGroPyCeYgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e55563-ccf7-4e79-a3e9-7adbd2136ac1/1/1nfizmE5GHzAVbJgWp22-nD7kXA.roa
Signing time: Thu 30 Mar 2023 04:58:28 +0000
ROA not before: Thu 30 Mar 2023 04:58:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 62.68.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:30:e1:ad:7b:84:64:cb:90:cd:b1:f7:37:ff:36:c6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39176c5a602527533c2b541406ae83f209e620c
Validity
Not Before: Mar 30 04:58:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d677e2ce6139187cc055b2605a9db6fa70fb9170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:de:25:a3:91:24:49:46:b0:7c:5d:38:9f:aa:
2f:be:6c:24:24:a4:15:f6:36:0e:d0:3f:bb:6e:da:
56:c7:7f:f3:53:7d:1f:d2:e6:bb:04:cf:54:2b:83:
4f:40:81:ab:92:aa:18:e8:0e:2c:fc:a0:b5:67:46:
79:33:5e:9b:6f:20:4e:2b:26:c3:62:00:2c:4d:6c:
22:bb:24:92:13:74:c1:6d:25:64:45:1d:cd:ab:4d:
2c:95:a8:03:f6:62:d1:e1:61:81:fa:cc:bc:7f:b3:
a8:64:2e:60:ef:10:ff:47:14:05:0c:42:51:74:51:
8a:7f:f5:be:fe:ec:8a:e7:51:35:3e:1f:ac:61:bb:
f4:1a:bb:6e:65:08:c7:01:18:92:54:28:40:0d:56:
c6:41:54:7a:c5:31:ab:91:25:6c:2e:26:9b:5b:ad:
eb:19:cf:6e:4e:b9:76:7c:3e:15:ff:64:a7:8a:e6:
e3:d7:f3:95:1d:02:b6:ac:a1:a0:86:9e:84:f3:c2:
fd:ff:39:da:4c:38:25:5a:3a:61:50:8b:75:97:83:
3f:e2:c3:06:3f:94:da:b1:35:3e:0a:22:46:0a:d3:
c6:82:e6:2d:23:3c:17:c9:ab:16:69:c3:82:0a:04:
e3:b9:c9:c4:d5:84:23:26:4e:54:e3:ac:30:de:b5:
00:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:77:E2:CE:61:39:18:7C:C0:55:B2:60:5A:9D:B6:FA:70:FB:91:70
X509v3 Authority Key Identifier:
keyid:E3:91:76:C5:A6:02:52:75:33:C2:B5:41:40:6A:E8:3F:20:9E:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45F2xaYCUnUzwrVBQGroPyCeYgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e55563-ccf7-4e79-a3e9-7adbd2136ac1/1/1nfizmE5GHzAVbJgWp22-nD7kXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e55563-ccf7-4e79-a3e9-7adbd2136ac1/1/45F2xaYCUnUzwrVBQGroPyCeYgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.68.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d6:be:de:38:49:f0:54:97:fb:c1:de:4e:17:01:1b:76:bb:
1e:ab:55:75:52:11:29:38:dd:ed:17:db:96:a1:d2:be:b3:f4:
22:7b:0b:3a:e6:66:a1:06:47:cb:26:71:0e:b4:83:a4:ab:11:
80:43:c3:08:7d:fc:4e:0d:1d:1c:03:9c:65:6c:f7:bf:6b:0b:
2f:cc:d5:6b:a0:f8:81:c5:cd:89:8c:c5:f5:f2:22:07:ea:c9:
15:2c:b7:00:d2:98:27:4a:a3:23:36:a9:6f:1d:87:0c:8d:1f:
ea:40:bc:72:06:07:1f:15:9e:09:0b:16:54:b1:0b:0a:e0:b4:
fe:d0:03:4b:8b:1a:b1:08:1d:e2:ad:57:5d:35:67:98:6a:a5:
26:ef:de:b6:99:cc:1a:ac:7a:5f:31:df:76:b4:63:6d:c6:d3:
45:09:5a:b7:a1:de:80:a1:de:e4:e3:66:a9:31:de:cc:cc:3a:
d3:e2:d4:a5:de:48:90:c6:e0:92:98:d1:47:47:93:e6:2b:53:
7c:d5:67:2d:b5:5c:d9:1e:66:de:88:64:91:2c:dc:44:db:fd:
29:fb:b1:80:80:67:c6:28:cc:c2:47:e7:68:e7:e1:a2:de:20:
74:ac:79:a2:94:a0:15:a2:db:06:d5:fe:cb:0d:1b:fc:06:a5:
d0:7a:7f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:43 2023 by rpki-client on console-ams.rpki-client.org