Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c1b4e7-c4b8-4ef0-b405-f5add9d6efe0/1/PHC6yZXHPzeGYo-JjJE3JzKFczk.roa
File: PHC6yZXHPzeGYo-JjJE3JzKFczk.roa (raw, json)
Hash identifier: oT+Msep8SY3qx0JBq2ipqRuXLaiPPWYw5pn+V8m2ILA=
Subject key identifier: 3C:70:BA:C9:95:C7:3F:37:86:62:8F:89:8C:91:37:27:32:85:73:39
Certificate issuer: /CN=0ee51a1dd6c876c3824caca83ae4d09baa730b87
Certificate serial: 0185718C4475BE71A217B0E9EFD9D5F1683D
Authority key identifier: 0E:E5:1A:1D:D6:C8:76:C3:82:4C:AC:A8:3A:E4:D0:9B:AA:73:0B:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuUaHdbIdsOCTKyoOuTQm6pzC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c1b4e7-c4b8-4ef0-b405-f5add9d6efe0/1/PHC6yZXHPzeGYo-JjJE3JzKFczk.roa
Signing time: Mon 02 Jan 2023 08:14:56 +0000
ROA not before: Mon 02 Jan 2023 08:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 62.68.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:44:75:be:71:a2:17:b0:e9:ef:d9:d5:f1:68:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee51a1dd6c876c3824caca83ae4d09baa730b87
Validity
Not Before: Jan 2 08:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c70bac995c73f3786628f898c91372732857339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:12:a7:ad:7f:29:3a:cf:cb:80:9c:6d:09:
de:66:d1:7e:66:78:dd:6d:dc:ca:49:c5:b9:d2:a4:
c1:5e:24:d1:47:46:41:5d:29:db:1c:c5:af:9a:96:
64:91:d5:1b:65:03:98:a4:90:25:f9:dc:ae:96:20:
58:bd:e1:a5:6c:25:e8:9b:93:5f:4e:b8:ba:13:52:
2f:b4:53:8a:f2:55:38:5c:71:2b:f3:42:ed:3f:c6:
36:f4:76:fd:03:83:57:8f:01:3c:2c:73:5f:89:ea:
a2:b9:41:9d:0e:2e:2a:05:73:ce:89:57:5b:6f:0f:
5f:d3:87:e0:dd:b6:36:33:31:ee:5b:a9:83:04:ab:
dc:ec:3f:3d:b3:44:0c:ac:e7:fc:66:92:6b:7e:f0:
ff:fd:33:90:7f:55:d3:83:66:3d:8b:58:59:af:71:
f6:d3:0d:9f:68:10:0b:ea:63:c3:ff:f2:91:95:1f:
fb:9c:7f:bf:d0:e0:eb:df:41:6a:ae:08:84:12:1e:
21:c4:73:a7:21:7d:12:97:c1:b7:1c:1c:fb:e3:43:
7b:2b:d2:4c:d5:34:01:35:72:db:48:81:67:2a:27:
2c:9f:62:52:f8:ba:2c:d7:78:11:1a:ea:ed:ef:eb:
dd:40:82:85:f9:4d:1b:f0:1a:f9:5f:15:4a:6e:52:
bd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:70:BA:C9:95:C7:3F:37:86:62:8F:89:8C:91:37:27:32:85:73:39
X509v3 Authority Key Identifier:
keyid:0E:E5:1A:1D:D6:C8:76:C3:82:4C:AC:A8:3A:E4:D0:9B:AA:73:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuUaHdbIdsOCTKyoOuTQm6pzC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c1b4e7-c4b8-4ef0-b405-f5add9d6efe0/1/PHC6yZXHPzeGYo-JjJE3JzKFczk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c1b4e7-c4b8-4ef0-b405-f5add9d6efe0/1/DuUaHdbIdsOCTKyoOuTQm6pzC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:3b:3e:32:63:9a:3b:13:95:83:82:13:ce:85:46:e1:1f:7d:
bc:44:14:75:83:75:a2:44:fd:1e:2e:87:9e:0a:8b:fc:21:b9:
1f:f0:00:ee:7f:0d:c2:26:06:cc:4f:96:0e:89:8e:ac:19:02:
32:d6:0f:23:31:38:36:ef:e9:c8:40:6a:1e:ae:80:44:f3:9b:
8e:40:94:c6:c7:38:22:c9:ef:ab:43:21:d8:86:dc:ef:00:1e:
4b:cd:6d:5a:2f:ed:3d:00:c3:19:5f:47:ac:4d:52:69:7c:2c:
34:a0:59:09:bc:73:61:b5:5b:cf:4e:7a:0d:3c:33:ff:79:23:
c2:cc:83:eb:c3:f1:38:b2:d9:fc:11:b7:e9:4e:f9:ab:da:e9:
27:ed:b3:32:0f:55:3d:75:ac:d2:1e:28:e5:92:27:4e:ae:86:
80:64:a7:e6:a7:09:9d:10:b9:41:de:71:a8:b4:66:69:40:2b:
7e:45:fa:2b:fe:19:72:da:2c:4d:98:8d:90:fc:63:c2:01:15:
e5:a8:ac:b4:47:a3:93:36:44:ac:88:d0:f6:79:9f:45:7e:d8:
d2:72:8e:30:95:f9:5e:25:41:c6:e4:1f:06:7f:c3:25:61:be:
89:ff:0d:40:37:7e:50:5f:f2:a5:de:ef:63:0d:73:0b:ab:67:
04:b5:b3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:33 2024 by rpki-client on console-fra.rpki-client.org