Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Rt9CIh01OBvg9NNYVeZ0ziyJmrs.roa
File: Rt9CIh01OBvg9NNYVeZ0ziyJmrs.roa (raw, json)
Hash identifier: Axht1g2HGM5kcSIivJNjPtmXlvNUZ9ld+myXUdNVOUE=
Subject key identifier: 46:DF:42:22:1D:35:38:1B:E0:F4:D3:58:55:E6:74:CE:2C:89:9A:BB
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01878E53AF5A50AEEB8DA49D231A9E57EF3B
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Rt9CIh01OBvg9NNYVeZ0ziyJmrs.roa
Signing time: Mon 17 Apr 2023 08:27:41 +0000
ROA not before: Mon 17 Apr 2023 08:27:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 62.56.208.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:53:af:5a:50:ae:eb:8d:a4:9d:23:1a:9e:57:ef:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Apr 17 08:27:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46df42221d35381be0f4d35855e674ce2c899abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:62:c3:87:42:a4:5c:53:92:f4:03:8c:08:da:
c0:ca:82:ff:c3:28:85:3a:aa:68:5e:19:6e:7d:54:
75:0b:5b:c6:cd:e4:4a:9c:53:74:3b:c3:22:9e:98:
a2:98:f8:1d:94:d0:32:2c:ef:5f:73:cc:02:7e:f1:
08:1c:49:23:7e:d0:33:92:9f:53:b6:d8:2a:d3:91:
69:b1:b4:66:63:a6:f9:34:0b:3e:ba:81:0e:59:c9:
4c:52:71:de:8c:eb:9b:7d:e9:f0:fb:76:c7:b8:b1:
3a:1c:77:5d:75:4e:b0:3d:d0:42:e1:6e:a1:cd:17:
f1:1c:89:51:74:75:0f:51:a3:8a:b9:ad:df:2f:bd:
60:f1:e0:f9:61:80:52:58:2b:a1:45:37:3b:24:a2:
e3:a5:0d:d3:1c:bb:ab:a0:7b:f4:ee:af:73:3a:5b:
d2:e1:5d:d7:f9:14:37:95:2a:0f:97:fd:15:6d:17:
71:6b:d8:2a:f6:f0:e2:a1:15:01:ca:bc:2f:f2:c4:
39:a0:4d:74:c5:a2:12:61:1a:e8:ea:95:cb:7a:7f:
be:4f:ba:23:a0:18:ab:4d:f6:98:0d:1a:e0:08:55:
60:57:a7:41:fd:c1:e9:9c:bc:7d:fa:99:59:58:fe:
ba:8c:1a:0c:75:7d:20:61:05:8f:1b:60:64:e1:24:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DF:42:22:1D:35:38:1B:E0:F4:D3:58:55:E6:74:CE:2C:89:9A:BB
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Rt9CIh01OBvg9NNYVeZ0ziyJmrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.208.0/21
Signature Algorithm: sha256WithRSAEncryption
18:a7:5c:5b:20:47:b5:ce:6a:f4:17:dd:aa:01:65:5f:c6:47:
10:70:b8:9a:73:6e:89:6c:40:42:34:3f:f4:dd:b3:3b:3f:06:
a1:fb:dc:43:78:b7:28:b2:34:83:b6:54:5f:cd:a6:29:3c:c3:
da:a1:e6:83:6e:49:9d:68:6a:19:f9:84:d3:17:95:d0:ff:cb:
29:e8:8a:c4:e4:a6:f3:bd:1a:62:d6:c3:67:30:ef:0f:90:21:
c1:c4:1d:b5:63:f9:aa:f4:f9:2a:31:b3:93:37:60:c8:f9:de:
c5:d0:d6:ec:28:d6:2b:97:ae:e1:2c:f8:91:61:99:37:5c:38:
16:78:0c:5f:7b:7f:0d:fb:ae:a4:7b:97:25:13:d6:34:c7:dc:
8d:1b:83:80:8b:7c:8b:91:4d:9a:ce:f3:a0:6e:23:5c:15:55:
f6:f8:2c:23:27:3a:b8:2c:a5:4e:c8:68:c5:dd:02:71:fb:1f:
de:03:c4:8e:fb:4f:f0:06:cf:8b:4e:6f:1d:97:c8:45:a4:f9:
7d:d7:7d:7f:80:d2:6c:48:c7:aa:f3:fd:7a:c8:3e:3a:6e:ab:
d8:df:ad:12:c9:76:f8:23:8f:f5:8a:f7:08:58:7e:b5:93:51:
cc:97:a4:86:13:2e:c0:88:d3:66:a2:92:20:9e:ec:42:42:39:
c3:24:11:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:21 2024 by rpki-client on console-fra.rpki-client.org