Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/LsegpQ-DC7-hvPIv_UY4SMYylIU.roa
File: LsegpQ-DC7-hvPIv_UY4SMYylIU.roa (raw, json)
Hash identifier: bNlA2DNfg6I/WkBcbikij7Xr7aqoqYIn5OhYsYKBCCE=
Subject key identifier: 2E:C7:A0:A5:0F:83:0B:BF:A1:BC:F2:2F:FD:46:38:48:C6:32:94:85
Certificate issuer: /CN=1034068b5e9f7314277e2be9726c732131b1756c
Certificate serial: 018571276FE864F40522670062F8DA912ECB
Authority key identifier: 10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/LsegpQ-DC7-hvPIv_UY4SMYylIU.roa
Signing time: Mon 02 Jan 2023 06:24:48 +0000
ROA not before: Mon 02 Jan 2023 06:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50010
IP address blocks: 62.231.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:6f:e8:64:f4:05:22:67:00:62:f8:da:91:2e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1034068b5e9f7314277e2be9726c732131b1756c
Validity
Not Before: Jan 2 06:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ec7a0a50f830bbfa1bcf22ffd463848c6329485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:70:cd:f6:0d:cc:e3:f2:4a:81:8e:04:9c:
51:75:55:24:7e:6a:17:ba:cc:75:f8:b1:4b:53:6f:
69:0d:d1:bd:2c:98:4d:e6:d7:b4:dd:0e:c1:38:73:
44:11:94:f2:b7:0d:b6:93:1d:d0:f0:ad:5f:00:6a:
17:6a:e6:fa:bb:3b:d2:8b:ab:47:fe:5b:d8:09:4b:
fd:99:19:e1:98:3f:a0:1f:87:7d:25:35:71:f5:61:
79:4d:83:99:22:d0:07:d7:35:17:d7:92:a5:60:1c:
66:b0:33:9f:d3:0d:44:1c:21:c1:35:0d:27:d9:59:
e0:82:ea:75:01:a1:61:dc:ac:7c:07:6f:66:c6:6a:
67:d6:3d:cb:b7:a7:a6:f4:20:30:c3:39:5c:d9:10:
5c:b3:67:b1:48:33:f2:8d:30:35:0b:37:a0:5b:27:
9f:8f:75:57:95:b7:9a:bf:27:6b:5c:c5:cb:42:a7:
be:4b:0b:09:aa:ef:aa:33:ba:dd:c1:c3:5c:d1:7c:
12:39:77:69:c9:71:30:37:9d:48:73:60:80:57:13:
ec:7a:3d:89:76:fe:67:cd:9e:e4:68:a3:b5:27:ef:
cf:2a:b7:d6:90:b3:ea:cf:a6:89:c3:b2:c4:30:45:
7f:15:59:d7:74:05:52:43:43:8a:a1:10:26:8c:b5:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C7:A0:A5:0F:83:0B:BF:A1:BC:F2:2F:FD:46:38:48:C6:32:94:85
X509v3 Authority Key Identifier:
keyid:10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/LsegpQ-DC7-hvPIv_UY4SMYylIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.231.248.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:db:1b:22:3f:20:f2:4a:21:65:29:4b:1a:23:b3:9e:8d:98:
d3:3f:d7:3c:56:50:07:f1:3b:b8:28:50:71:82:06:c0:0b:e1:
d7:42:35:59:81:1f:17:c1:da:9d:5c:7c:34:1d:03:2c:7c:0e:
f5:88:af:e3:2c:8d:6b:eb:d9:49:91:c8:41:cd:5a:d1:c2:b6:
a7:0f:b5:29:97:dc:7d:ac:67:d4:24:c0:b1:f7:60:f3:ae:71:
b7:d6:cb:1c:6a:df:d0:a3:3e:e7:bd:d3:20:98:42:05:45:73:
52:c6:67:46:a0:12:d4:86:19:d1:de:03:00:12:7d:b8:8d:38:
c6:45:d6:af:2d:74:c2:2b:e7:54:b4:c0:fc:61:0e:a1:98:b1:
06:9a:a7:5f:27:93:49:70:55:bd:f9:5b:88:3b:3f:d2:a7:90:
72:cf:ab:35:cc:f5:4e:ca:55:b0:f3:71:e0:cc:16:2d:56:90:
80:f8:ff:bb:1f:91:bf:60:1f:a0:2c:51:eb:a6:b6:5b:8d:4d:
a2:53:a5:b0:16:7a:81:ff:ab:79:eb:07:5a:a8:26:5f:a1:39:
b2:92:7f:27:8a:51:38:b4:50:2b:1d:71:ef:65:c9:4c:74:c4:
87:0a:94:ef:db:44:a5:35:eb:53:b2:a6:73:bf:0d:5f:4a:97:
d4:f3:db:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxJ2/oZPQFImcAYvjakS7LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMzQwNjhiNWU5ZjczMTQyNzdlMmJlOTcyNmM3MzIxMzFi
MTc1NmMwHhcNMjMwMTAyMDYyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWM3YTBhNTBmODMwYmJmYTFiY2YyMmZmZDQ2Mzg0OGM2MzI5NDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydhwzfYNzOPySoGOBJxRdVUkfmoX
usx1+LFLU29pDdG9LJhN5te03Q7BOHNEEZTytw22kx3Q8K1fAGoXaub6uzvSi6tH
/lvYCUv9mRnhmD+gH4d9JTVx9WF5TYOZItAH1zUX15KlYBxmsDOf0w1EHCHBNQ0n
2Vnggup1AaFh3Kx8B29mxmpn1j3Lt6em9CAwwzlc2RBcs2exSDPyjTA1CzegWyef
j3VXlbeavydrXMXLQqe+SwsJqu+qM7rdwcNc0XwSOXdpyXEwN51Ic2CAVxPsej2J
dv5nzZ7kaKO1J+/PKrfWkLPqz6aJw7LEMEV/FVnXdAVSQ0OKoRAmjLXEZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC7HoKUPgwu/obzyL/1GOEjGMpSFMB8GA1UdIwQY
MBaAFBA0Boten3MUJ34r6XJscyExsXVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRURRR2kxNmZjeFFuZml2cGNteHpJVEd4ZFd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hMDQ1MGUtNTYzNC00NThkLTkxOGYt
MTAzZDkzZDI1MWFiLzEvTHNlZ3BRLURDNy1odlBJdl9VWTRTTVl5bElVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hMDQ1MGUtNTYzNC00NThkLTkxOGYtMTAzZDkzZDI1MWFi
LzEvRURRR2kxNmZjeFFuZml2cGNteHpJVEd4ZFd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPuf4MA0G
CSqGSIb3DQEBCwUAA4IBAQAr2xsiPyDySiFlKUsaI7OejZjTP9c8VlAH8Tu4KFBx
ggbAC+HXQjVZgR8XwdqdXHw0HQMsfA71iK/jLI1r69lJkchBzVrRwranD7Upl9x9
rGfUJMCx92DzrnG31sscat/Qoz7nvdMgmEIFRXNSxmdGoBLUhhnR3gMAEn24jTjG
RdavLXTCK+dUtMD8YQ6hmLEGmqdfJ5NJcFW9+VuIOz/Sp5Byz6s1zPVOylWw83Hg
zBYtVpCA+P+7H5G/YB+gLFHrprZbjU2iU6WwFnqB/6t56wdaqCZfoTmykn8nilE4
tFArHXHvZclMdMSHCpTv20SlNetTsqZzvw1fSpfU89tE
-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:33 2024 by rpki-client on console-fra.rpki-client.org