Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/_hRgq0v0g4ocoXjZVGw0TS1ddqU.roa
File: _hRgq0v0g4ocoXjZVGw0TS1ddqU.roa (raw, json)
Hash identifier: nIigvU/F7OsW8hxlkjKAI5PQlJcqMkQPSrMJCr3T5gI=
Subject key identifier: FE:14:60:AB:4B:F4:83:8A:1C:A1:78:D9:54:6C:34:4D:2D:5D:76:A5
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 01857095178404A3B2249AD0B9C78F00038D
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/_hRgq0v0g4ocoXjZVGw0TS1ddqU.roa
Signing time: Mon 02 Jan 2023 03:44:57 +0000
ROA not before: Mon 02 Jan 2023 03:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31349
IP address blocks: 62.201.16.0/20 maxlen: 24
185.185.128.0/22 maxlen: 24
2a06:8080::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:17:84:04:a3:b2:24:9a:d0:b9:c7:8f:00:03:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Jan 2 03:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe1460ab4bf4838a1ca178d9546c344d2d5d76a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:d2:86:ce:26:44:0f:31:fb:d5:3c:24:e9:
d2:ee:d1:3d:7e:3e:fc:9a:f9:60:48:f2:c1:6e:af:
1d:31:9c:c1:7c:78:1f:b1:92:9a:15:99:fd:b3:dc:
79:62:e9:4c:e3:38:ea:69:ec:fe:55:a9:8c:59:23:
ba:7b:a3:86:bd:45:71:1c:de:68:af:0f:87:a6:ed:
8e:b0:21:37:2e:1e:8c:dc:da:8a:28:1c:c7:ff:97:
1d:23:a9:cf:2e:cc:53:ea:e6:81:d1:13:3d:d7:75:
f8:4b:b3:b4:6b:d4:85:8a:c5:09:fa:e4:e4:0b:4d:
77:90:8f:21:e3:5f:b7:50:87:2b:19:cb:26:4b:9b:
62:da:90:0c:12:6a:4b:f7:88:71:bd:11:ef:ac:9d:
44:13:f8:7d:ec:66:69:a1:c2:a5:e7:d7:8e:7b:b5:
48:20:53:cd:78:39:39:8a:99:81:02:8a:8c:fc:d7:
c2:de:5e:37:1c:23:95:1f:d6:00:b7:4a:18:5d:5f:
29:e6:de:df:b3:fe:d7:73:d8:09:e1:8f:28:3c:a0:
5a:95:7a:c2:32:be:f6:34:51:64:64:64:ed:56:b1:
9d:7c:5d:ec:1b:ae:cc:14:fd:84:32:25:59:b8:a4:
46:0f:e1:69:8a:5c:63:75:84:b0:96:6b:a5:07:8c:
56:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:14:60:AB:4B:F4:83:8A:1C:A1:78:D9:54:6C:34:4D:2D:5D:76:A5
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/_hRgq0v0g4ocoXjZVGw0TS1ddqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.16.0/20
185.185.128.0/22
IPv6:
2a06:8080::/29
Signature Algorithm: sha256WithRSAEncryption
58:bf:be:87:35:8e:d3:54:92:44:29:9e:2e:b3:5f:52:05:21:
d6:bb:df:37:8e:c3:71:6a:6b:6b:e6:07:c8:1d:ac:1c:70:ef:
ae:03:23:ae:87:bc:16:9e:e7:06:5a:a1:a8:85:41:c6:27:af:
8e:99:8c:71:9c:b4:de:cf:26:69:6f:0c:0b:14:b5:a0:a4:14:
1d:27:03:7a:d9:4c:f8:73:e4:48:f8:72:f8:4a:ae:2e:53:55:
55:2c:cc:e7:b8:fa:1d:a3:8d:b4:75:da:8a:d3:c0:76:e9:90:
f7:77:8f:00:f5:02:3a:af:c8:4c:be:66:46:9c:85:87:65:83:
3c:3c:fb:d7:bf:79:a3:cd:39:d4:cd:b0:07:00:c6:bb:2e:b6:
89:55:45:e9:6b:88:9f:a4:0b:13:6c:d6:12:2b:af:de:cf:d5:
69:d2:e5:93:2a:ee:ff:e8:5d:64:9f:a1:4c:e8:67:da:82:55:
be:c7:21:93:b5:02:e9:5e:7c:be:cd:5c:7a:3f:61:f8:03:b7:
3b:72:2e:dd:0d:04:17:c9:e7:b2:b9:e7:cd:df:f7:7a:77:2b:
78:ca:1c:51:3d:69:b5:d7:73:cd:ee:d1:5b:fe:2f:34:76:6e:
15:97:a5:3d:d1:ce:25:d2:0d:dd:2c:b5:98:3b:8d:43:61:c9:
4f:94:e6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:12 2024 by rpki-client on console-ams.rpki-client.org