Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/ZRistE5qzZ5A_XYaVRY2Pk4lwd8.roa
File: ZRistE5qzZ5A_XYaVRY2Pk4lwd8.roa (raw, json)
Hash identifier: EWkBgwgCHpc7Wj39G6DGUIIYvTIFJEZbSAAN1Bll5Ro=
Subject key identifier: 65:18:AC:B4:4E:6A:CD:9E:40:FD:76:1A:55:16:36:3E:4E:25:C1:DF
Certificate issuer: /CN=dc9c7e17781e628ef6eb1c44bcdcb2e335621d2f
Certificate serial: 018A44D945C952F6D29D5ABAC8A3D8843FB0
Authority key identifier: DC:9C:7E:17:78:1E:62:8E:F6:EB:1C:44:BC:DC:B2:E3:35:62:1D:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Jx-F3geYo726xxEvNyy4zViHS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/ZRistE5qzZ5A_XYaVRY2Pk4lwd8.roa
Signing time: Wed 30 Aug 2023 05:10:04 +0000
ROA not before: Wed 30 Aug 2023 05:10:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34558
IP address blocks: 62.173.0.0/20 maxlen: 20
62.173.0.0/19 maxlen: 19
62.173.16.0/21 maxlen: 21
62.173.13.0/24 maxlen: 24
62.173.20.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:44:d9:45:c9:52:f6:d2:9d:5a:ba:c8:a3:d8:84:3f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc9c7e17781e628ef6eb1c44bcdcb2e335621d2f
Validity
Not Before: Aug 30 05:10:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6518acb44e6acd9e40fd761a5516363e4e25c1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:81:be:f7:8e:d7:12:d3:60:d9:18:1b:97:e5:
e9:c2:6a:f5:23:bb:31:07:d6:2d:f1:50:b1:df:f0:
d7:8f:37:e9:83:28:db:24:56:a3:dc:e2:0b:88:16:
95:e8:35:d2:e0:ee:83:db:cd:a2:9a:03:df:60:0d:
dc:71:53:15:fb:03:2c:3d:85:33:d6:f5:a8:17:2a:
1b:61:c3:c4:0f:41:a7:3a:5d:9a:e4:ea:ac:42:7b:
ce:1d:50:9a:95:da:a7:86:bb:d1:12:0b:61:9d:9d:
64:b7:09:27:12:54:e5:ef:17:7d:d5:85:b8:b8:d4:
a2:e4:cd:21:59:9c:73:8a:4e:79:de:27:2d:69:37:
50:24:97:32:bc:f3:79:61:63:74:b5:1d:b0:b1:a5:
e3:9e:08:cb:4d:79:5c:6c:14:ea:10:ca:24:40:bc:
f8:50:33:6a:24:e4:1e:3a:d9:21:12:b3:28:87:00:
80:37:e8:bb:ed:b3:00:03:c1:75:5e:8b:11:c2:99:
ef:79:d2:51:01:cc:30:44:5f:3e:e5:82:72:e3:e0:
4e:97:b8:fc:2b:b9:1b:e2:7e:5a:e3:99:d5:95:01:
8e:25:9c:2d:a6:75:1e:b3:52:3e:cc:ab:28:4f:78:
03:7c:a9:03:05:6a:63:e7:dc:70:e4:e3:15:43:8d:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:18:AC:B4:4E:6A:CD:9E:40:FD:76:1A:55:16:36:3E:4E:25:C1:DF
X509v3 Authority Key Identifier:
keyid:DC:9C:7E:17:78:1E:62:8E:F6:EB:1C:44:BC:DC:B2:E3:35:62:1D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Jx-F3geYo726xxEvNyy4zViHS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/ZRistE5qzZ5A_XYaVRY2Pk4lwd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/3Jx-F3geYo726xxEvNyy4zViHS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.173.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:05:5d:a9:d5:41:5e:f9:26:a3:18:fe:76:3f:7a:cc:65:96:
6c:73:cf:4f:71:c0:73:f0:dc:ed:ba:55:d9:b4:9d:8d:46:76:
a4:24:90:20:c4:46:e3:f7:c0:46:ca:21:e3:1e:5a:b4:5f:3f:
44:fd:27:49:77:23:67:a7:ad:1c:dc:da:e6:b3:d7:46:1b:e9:
81:90:8d:93:b0:8d:18:03:c2:2e:bc:5d:bb:a8:42:fd:2b:5a:
a9:45:2b:c8:b1:02:fa:bc:18:82:18:09:20:6d:bd:03:c9:38:
a4:54:7e:04:06:0d:3f:22:a5:93:e1:aa:e0:c9:18:4e:06:cf:
c5:96:0a:d4:f6:b9:1b:6f:ad:90:06:41:8d:1d:eb:19:f9:01:
8f:d1:5b:cf:25:68:b6:69:e4:b4:1d:2e:29:b5:d8:06:5a:59:
f3:ea:3a:8f:15:d4:d3:c8:bc:29:47:be:d0:fe:c1:8a:23:c3:
84:a7:ef:94:0c:cf:93:73:44:e3:74:32:93:21:2c:69:dc:23:
7c:03:02:73:93:30:60:8d:a6:f2:70:d8:07:11:01:2d:8b:09:
ea:ff:0f:93:88:64:d9:c3:33:8a:3b:d6:c8:00:a2:e4:da:47:
2d:cf:00:e7:72:7a:8c:d8:31:f1:fd:67:7f:2c:50:84:d4:eb:
11:7b:2c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 06:26:46 2023 by rpki-client on console-fra.rpki-client.org