Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d8f6ab-1c9e-482d-8298-4b150e99834a/1/PkPKgIcs7jigSOsxbKpwzKMLiFg.roa
File: PkPKgIcs7jigSOsxbKpwzKMLiFg.roa (raw, json)
Hash identifier: LkIYePpKagctLcOKhjHeoz/+MaD7Z6iwKJ10XMfw/mI=
Subject key identifier: 3E:43:CA:80:87:2C:EE:38:A0:48:EB:31:6C:AA:70:CC:A3:0B:88:58
Certificate issuer: /CN=401c09ffe74b2bc812ec95a2bdd11561023d1777
Certificate serial: 018682CFFF716D30C2C99DB7F91A2B66D992
Authority key identifier: 40:1C:09:FF:E7:4B:2B:C8:12:EC:95:A2:BD:D1:15:61:02:3D:17:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBwJ_-dLK8gS7JWivdEVYQI9F3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d8f6ab-1c9e-482d-8298-4b150e99834a/1/PkPKgIcs7jigSOsxbKpwzKMLiFg.roa
Signing time: Fri 24 Feb 2023 09:45:14 +0000
ROA not before: Fri 24 Feb 2023 09:45:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 62.233.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:cf:ff:71:6d:30:c2:c9:9d:b7:f9:1a:2b:66:d9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=401c09ffe74b2bc812ec95a2bdd11561023d1777
Validity
Not Before: Feb 24 09:45:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e43ca80872cee38a048eb316caa70cca30b8858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:b9:8e:aa:48:82:a4:a8:6d:80:56:7b:39:
20:93:a3:f4:56:c5:a8:bf:cc:be:c6:4c:b3:56:3b:
b1:2d:07:c7:ca:c0:cc:ef:f5:32:0f:2c:d1:56:f0:
2d:a6:ed:bc:9c:34:7a:87:34:50:e8:d8:8b:8c:87:
83:bb:68:e9:9a:dc:ed:a8:f6:22:b1:78:e0:c8:46:
66:fc:4d:15:01:b6:d0:47:c2:31:b0:1f:6d:f2:88:
64:56:a8:53:a6:80:51:ae:b1:e2:d2:1e:3b:8c:df:
79:d2:b5:02:56:ad:24:10:8a:9b:58:34:ca:fc:18:
1c:f4:3f:1b:f4:df:d5:3c:b4:9e:c0:3b:00:be:6d:
20:ad:9b:0b:b0:dc:75:3d:f1:49:cd:7f:bd:df:f2:
37:64:a5:8d:96:3f:55:e7:ab:1c:e1:3d:4e:ce:4b:
09:aa:30:03:e0:57:90:fe:56:95:e3:9b:d9:33:03:
a2:23:f9:af:d2:7d:e0:15:d0:ba:1e:37:6b:bf:0a:
64:4d:4c:c9:0b:7e:6e:42:3c:2c:b9:fd:00:55:99:
e7:6e:0a:ed:51:ff:b1:c8:5d:b0:4a:17:f5:a2:e4:
71:6d:82:dc:9a:e0:e9:44:46:d0:18:36:ef:d6:9c:
a3:c9:d4:15:54:f1:c6:2f:2a:d9:9a:47:d7:72:08:
ce:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:43:CA:80:87:2C:EE:38:A0:48:EB:31:6C:AA:70:CC:A3:0B:88:58
X509v3 Authority Key Identifier:
keyid:40:1C:09:FF:E7:4B:2B:C8:12:EC:95:A2:BD:D1:15:61:02:3D:17:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBwJ_-dLK8gS7JWivdEVYQI9F3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d8f6ab-1c9e-482d-8298-4b150e99834a/1/PkPKgIcs7jigSOsxbKpwzKMLiFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d8f6ab-1c9e-482d-8298-4b150e99834a/1/QBwJ_-dLK8gS7JWivdEVYQI9F3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.36.0/24
Signature Algorithm: sha256WithRSAEncryption
85:25:b4:24:31:34:b4:2f:bf:22:78:28:05:da:6d:70:c8:2b:
c3:5c:5e:f8:c3:63:c3:87:85:b4:2a:8f:88:aa:08:8c:01:a4:
4e:d4:43:3c:a2:38:fa:7f:b1:22:4b:25:93:46:24:74:b4:a1:
b9:01:0b:96:31:bc:03:6e:96:2e:45:34:f7:9e:fd:1f:cf:3d:
d8:ce:96:10:b9:4b:09:60:24:a7:40:d0:ff:22:b2:41:b4:78:
c6:c9:85:b5:e2:43:3e:59:e0:16:9c:6f:20:fd:f4:45:a4:84:
6e:83:b7:04:03:52:37:a4:3d:7a:ae:25:06:c0:a0:3f:e2:5f:
39:19:92:bf:e5:72:ca:c8:ed:f4:88:b7:9b:e0:37:3b:1c:72:
02:6c:93:90:8b:c8:7e:ff:bc:d8:b7:b8:1a:52:be:90:51:75:
e4:6f:2f:68:71:a0:a8:7a:a8:f0:d6:80:b7:38:33:fd:d4:55:
0d:39:a2:9a:54:80:00:86:25:69:81:70:ee:57:e4:8f:53:b8:
e4:1e:e3:09:bc:88:cd:c4:8b:65:7c:7b:d4:a1:67:f6:67:6b:
a6:4b:33:2d:3c:2c:3c:1b:4f:40:1a:2e:76:57:cc:ea:e1:33:
a7:81:8c:7e:cd:f4:87:a9:78:2c:11:dc:8b:58:d7:4c:58:d5:
b7:48:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:35 2023 by rpki-client on console-fra.rpki-client.org