Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/1-fyetJYu_JXkDyRf1weY4orTS-0.roa
File: 1-fyetJYu_JXkDyRf1weY4orTS-0.roa (raw, json)
Hash identifier: MgX08dh9UrdHjCitZ87xjTAAw39i6BAKQxCAKeYpHWk=
Subject key identifier: F9:FC:9E:B4:96:2E:FC:95:E4:0F:24:5F:D7:07:98:E2:8A:D3:4B:ED
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 01856DD3F07D1DC01003795A87353380578D
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/1-fyetJYu_JXkDyRf1weY4orTS-0.roa
Signing time: Sun 01 Jan 2023 14:54:44 +0000
ROA not before: Sun 01 Jan 2023 14:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49289
IP address blocks: 62.100.74.0/24 maxlen: 24
62.100.75.0/24 maxlen: 24
62.100.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:f0:7d:1d:c0:10:03:79:5a:87:35:33:80:57:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Jan 1 14:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9fc9eb4962efc95e40f245fd70798e28ad34bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:de:2e:d7:bb:d8:40:f8:c0:72:4f:3d:66:
b0:19:dc:ab:46:21:f5:87:eb:ae:53:9d:70:61:17:
8e:d4:07:83:01:c0:ec:28:ac:6e:23:ee:b1:5c:5d:
21:06:1c:b9:c0:17:a5:1f:f4:3f:12:bf:0b:1b:05:
1b:18:0a:1f:46:1d:cc:0a:5f:29:3d:78:d7:b4:15:
82:ce:e3:79:ef:34:28:7b:56:2c:00:e5:bd:c6:4a:
e4:5d:9c:2e:62:11:62:ba:57:12:2e:f5:31:0a:16:
a5:7e:35:76:4a:73:7f:45:fd:03:d8:55:80:a5:19:
d7:9a:79:84:f5:e7:9b:53:69:17:94:eb:41:42:3d:
f4:c2:3f:6e:2a:ce:f5:27:95:c3:69:07:1b:27:0c:
e3:a9:47:33:c5:81:94:6b:a9:ae:66:0b:97:f6:02:
4b:67:e3:69:a3:cc:cd:1b:e1:54:1a:1d:84:6b:ec:
86:67:f0:30:81:84:cd:91:ac:58:8b:69:37:25:1f:
b8:91:4b:2d:c1:e1:6e:f5:2c:36:ae:38:25:5a:0f:
fc:23:f8:d0:c5:25:0e:74:5f:fd:7c:e1:aa:38:63:
57:a7:17:44:3c:82:16:f1:1d:93:e4:92:ed:75:43:
ef:8c:71:1a:60:ae:dc:91:a1:88:1e:e8:18:06:fa:
84:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FC:9E:B4:96:2E:FC:95:E4:0F:24:5F:D7:07:98:E2:8A:D3:4B:ED
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/1-fyetJYu_JXkDyRf1weY4orTS-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.74.0/23
62.100.81.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:bc:f1:a2:be:d0:e4:be:b6:46:ce:4d:1f:ee:75:68:d2:be:
49:d4:20:f0:42:c3:05:d1:f5:7f:00:58:97:6d:70:f0:f1:46:
aa:c0:23:56:3c:82:61:93:37:d1:0e:a2:aa:64:c3:ef:54:a3:
b4:be:9a:48:5e:51:e6:dd:eb:91:f0:32:37:ab:a1:a5:6b:a4:
f8:0c:97:d3:36:d2:41:08:06:af:cb:2f:10:2f:5d:15:ab:4b:
e0:17:e8:0d:22:6c:d1:dd:0f:c6:89:1d:09:9e:f7:c8:b7:05:
39:d4:61:9f:8e:26:30:af:f4:e0:ff:c6:ca:05:fb:ac:6b:9a:
af:a7:0d:40:e5:e7:3b:92:a4:ac:c0:87:34:f5:14:20:0c:5a:
9d:be:61:c8:c3:3c:9e:11:0f:f2:c5:96:81:36:58:af:d2:b6:
fc:43:bd:38:a2:cc:b2:1b:2e:82:0b:78:e8:5b:8a:c0:ac:ae:
aa:3e:53:0a:de:2f:17:2b:37:19:06:b2:9e:32:f9:16:ff:14:
67:dd:40:c5:97:4a:cc:5d:9e:ba:37:12:b7:bb:0f:b7:77:28:
2d:6a:99:de:1f:04:eb:c5:4f:bb:05:d4:97:53:05:b1:7e:cd:
4f:be:0b:e0:d5:bf:0e:b5:b7:1b:b4:18:d2:4b:c2:68:5d:e7:
84:d5:67:71
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYVt0/B9HcAQA3lahzUzgFeNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYzQ5MjdhYjE5NGFlMTIzN2ZkZTJkM2JlZjY5MDM4ODkz
ZjBkYzUwHhcNMjMwMTAxMTQ1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWZjOWViNDk2MmVmYzk1ZTQwZjI0NWZkNzA3OThlMjhhZDM0YmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngHeLte72ED4wHJPPWawGdyrRiH1
h+uuU51wYReO1AeDAcDsKKxuI+6xXF0hBhy5wBelH/Q/Er8LGwUbGAofRh3MCl8p
PXjXtBWCzuN57zQoe1YsAOW9xkrkXZwuYhFiulcSLvUxChalfjV2SnN/Rf0D2FWA
pRnXmnmE9eebU2kXlOtBQj30wj9uKs71J5XDaQcbJwzjqUczxYGUa6muZguX9gJL
Z+Npo8zNG+FUGh2Ea+yGZ/AwgYTNkaxYi2k3JR+4kUstweFu9Sw2rjglWg/8I/jQ
xSUOdF/9fOGqOGNXpxdEPIIW8R2T5JLtdUPvjHEaYK7ckaGIHugYBvqEPQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPn8nrSWLvyV5A8kX9cHmOKK00vtMB8GA1UdIwQY
MBaAFB/EknqxlK4SN/3i0772kDiJPw3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODIt
OGI4YTAxYmQ3NDE0LzEvMS1meWV0Sll1X0pYa0R5UmYxd2VZNG9yVFMtMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTkvOTQzZDVkLTU2MGMtNDMxNC1hZjgyLThiOGEwMWJkNzQx
NC8xL0g4U1NlckdVcmhJM19lTFR2dmFRT0lrX0RjVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAT5kSgME
AD5kUTANBgkqhkiG9w0BAQsFAAOCAQEAm7zxor7Q5L62Rs5NH+51aNK+SdQg8ELD
BdH1fwBYl21w8PFGqsAjVjyCYZM30Q6iqmTD71SjtL6aSF5R5t3rkfAyN6uhpWuk
+AyX0zbSQQgGr8svEC9dFatL4BfoDSJs0d0PxokdCZ73yLcFOdRhn44mMK/04P/G
ygX7rGuar6cNQOXnO5KkrMCHNPUUIAxanb5hyMM8nhEP8sWWgTZYr9K2/EO9OKLM
shsuggt46FuKwKyuqj5TCt4vFys3GQaynjL5Fv8UZ91AxZdKzF2eujcSt7sPt3co
LWqZ3h8E68VPuwXUl1MFsX7NT74L4NW/DrW3G7QY0kvCaF3nhNVncQ==
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:16 2024 by rpki-client on console-ams.rpki-client.org