Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/CvRV4v233QkWbA3r-VftnKfT0TU.roa
File: CvRV4v233QkWbA3r-VftnKfT0TU.roa (raw, json)
Hash identifier: Rrf9J/KZyxalTkHFeIzag9SkuYYn+LfiI9AvycbE+04=
Subject key identifier: 0A:F4:55:E2:FD:B7:DD:09:16:6C:0D:EB:F9:57:ED:9C:A7:D3:D1:35
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 018ED5BF974A6CD4FA3FA67FFB8E4DBF3065
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/CvRV4v233QkWbA3r-VftnKfT0TU.roa
Signing time: Sat 13 Apr 2024 04:38:06 +0000
ROA not before: Sat 13 Apr 2024 04:38:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198160
IP address blocks: 62.169.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 13:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d5:bf:97:4a:6c:d4:fa:3f:a6:7f:fb:8e:4d:bf:30:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Apr 13 04:38:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0af455e2fdb7dd09166c0debf957ed9ca7d3d135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b2:89:90:2b:33:9b:bb:f2:b9:ae:00:6e:15:
87:a2:e6:98:27:de:1d:41:23:c0:d9:9b:2d:ff:b0:
62:d5:8e:29:c8:24:57:6e:e8:b3:80:1a:3e:8b:c3:
d4:bd:ef:33:09:40:b3:b1:80:32:7d:fb:f9:41:b6:
c6:35:f3:d3:fc:d7:ed:d5:bd:cf:ff:41:ca:da:0d:
d2:88:ff:8a:3b:d0:77:98:e5:f5:44:8d:d3:7c:78:
e1:d2:ca:a8:46:fd:ff:63:58:70:d5:95:a9:89:e3:
e9:ad:9b:de:8e:27:ca:5c:5f:12:28:74:e1:4d:c5:
ae:e9:e0:22:d3:77:86:2f:23:c3:ad:61:37:e6:b4:
43:be:87:eb:34:42:ce:64:4f:92:25:97:f5:71:ea:
ab:0d:d7:89:fd:61:06:de:47:13:61:0a:1d:eb:93:
ff:aa:06:2f:6d:1d:37:b1:66:5b:9c:c2:d7:e7:29:
45:c8:53:a5:e7:41:9b:49:c0:06:7e:39:24:2e:63:
80:14:da:35:99:06:89:64:11:cd:45:a7:09:6c:9f:
7b:1c:dc:bc:2d:58:24:a2:f6:97:9f:5e:3b:e0:4d:
3e:b6:af:99:70:5c:fe:b8:79:a6:4f:4c:1f:d9:5f:
8a:dd:4b:4d:45:a2:4d:49:03:72:fd:ed:f7:60:7d:
64:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F4:55:E2:FD:B7:DD:09:16:6C:0D:EB:F9:57:ED:9C:A7:D3:D1:35
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/CvRV4v233QkWbA3r-VftnKfT0TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.152.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:29:82:6a:82:32:c6:31:9b:5d:c3:bf:ca:07:75:a4:60:a7:
e8:43:8f:4c:8d:9b:45:89:27:99:9d:36:c8:d2:1b:ee:e2:bf:
20:a3:e1:5f:70:64:ae:5d:0b:d4:84:e5:7c:99:ca:1c:8e:e1:
7e:04:b3:d1:ef:c5:91:35:00:dc:73:50:5a:4c:29:74:69:ab:
0f:0c:3f:12:c1:47:4d:d3:16:2d:ef:b3:4d:7f:e4:c7:dc:4e:
40:82:f2:db:d8:f8:e9:a6:b7:1e:85:59:fc:f8:b8:55:9a:61:
f7:ff:20:4d:ab:58:9d:55:b6:bc:01:91:34:fb:10:60:18:9b:
b9:92:b2:a0:27:f1:75:65:07:e0:1f:b2:52:59:a1:67:05:cb:
3b:19:35:5a:3d:f6:82:04:c7:af:75:1a:d7:53:49:5c:63:af:
8a:2c:5e:a1:dc:2a:ff:aa:ed:e4:fc:8d:ef:ef:67:21:83:84:
20:39:4c:9e:63:cb:61:a3:b1:45:b2:f7:cb:c1:8b:90:4d:53:
a1:f7:b3:77:4e:82:e0:06:34:54:88:3d:07:ea:89:e8:6a:29:
72:57:44:cb:33:0a:1a:cb:b8:a5:d3:ed:af:1f:18:ca:69:ef:
90:db:49:e1:03:da:87:9d:e0:3e:1d:ed:61:85:9c:0a:fb:43:
d5:79:b9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:44 2024 by rpki-client on console-fra.rpki-client.org