Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/9daNALtNwNn2u_MEDzWMJgVeymw.roa
File: 9daNALtNwNn2u_MEDzWMJgVeymw.roa (raw, json)
Hash identifier: wKMXbZNXdaqqbrraKAb5DPNta6qFErHwG37JK5UHrwc=
Subject key identifier: F5:D6:8D:00:BB:4D:C0:D9:F6:BB:F3:04:0F:35:8C:26:05:5E:CA:6C
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 01856DD3EF7DDE93459E9F572E12832396FF
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/9daNALtNwNn2u_MEDzWMJgVeymw.roa
Signing time: Sun 01 Jan 2023 14:54:44 +0000
ROA not before: Sun 01 Jan 2023 14:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15472
IP address blocks: 62.100.64.0/21 maxlen: 21
185.193.188.0/22 maxlen: 22
62.100.72.0/23 maxlen: 23
62.100.85.0/24 maxlen: 24
62.100.88.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:ef:7d:de:93:45:9e:9f:57:2e:12:83:23:96:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Jan 1 14:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5d68d00bb4dc0d9f6bbf3040f358c26055eca6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2a:78:9d:9b:2a:a9:e1:3a:36:d5:12:aa:df:
e7:94:e7:de:1b:a4:dd:ce:20:8a:63:61:33:1e:96:
dd:ff:3f:11:13:ba:a1:ac:85:3b:b9:e0:f6:27:a3:
ec:93:37:3b:6a:51:4e:0c:93:8d:35:00:9e:a9:3f:
26:3a:cc:39:23:55:0a:43:6e:a9:dd:6a:a1:21:7c:
25:cc:e6:0e:30:bc:58:b1:cd:32:bc:67:c9:13:00:
69:8f:86:81:66:ae:46:63:50:02:6d:5f:66:b5:7e:
dc:9c:8a:8e:b7:74:8e:53:b4:ff:f6:8b:31:5d:cc:
41:97:a6:6d:6c:2a:9d:e3:eb:3d:07:b7:58:8b:fb:
96:d6:a4:b5:54:25:7e:82:ea:a4:bf:ab:38:79:71:
89:03:8d:a3:84:a6:31:0a:72:32:55:f9:75:e5:51:
db:8c:2f:a0:17:80:33:64:5a:3a:26:b9:b5:ce:43:
ba:b8:d0:4a:c7:43:71:a1:79:ab:08:6d:36:9d:93:
b3:72:a5:9b:13:ea:7e:6a:08:b7:69:24:ec:bc:38:
4e:21:4c:a0:73:29:12:0d:fb:5b:04:64:61:93:7b:
f8:63:5f:61:66:51:6a:e8:a8:4c:85:de:1e:58:4e:
eb:9d:a6:1d:7c:31:3a:c9:de:a0:9b:9e:66:64:84:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D6:8D:00:BB:4D:C0:D9:F6:BB:F3:04:0F:35:8C:26:05:5E:CA:6C
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/9daNALtNwNn2u_MEDzWMJgVeymw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.64.0-62.100.73.255
62.100.85.0/24
62.100.88.0/21
185.193.188.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:17:9b:03:0c:f2:2a:fb:32:6c:ae:98:c6:44:7d:b8:7d:69:
8b:52:28:a7:eb:e0:39:b4:33:1f:cd:a5:9a:ec:0e:7b:a0:53:
75:a1:0f:1c:52:d0:aa:76:45:81:c8:87:88:49:cd:e1:98:85:
22:8a:68:d6:b4:2d:3b:95:b3:e7:e0:f3:b0:6c:d6:31:23:21:
e9:dd:dc:69:7d:b3:ce:ac:1f:b7:89:ed:ed:97:f5:6b:be:3d:
99:a7:36:08:64:0f:33:4e:11:e4:66:82:72:80:d1:2a:12:d4:
0b:53:60:7d:04:1a:c9:f6:68:fd:84:6d:a6:59:6b:58:8a:bb:
f4:ae:bf:79:66:6d:e6:37:e2:2a:a9:0a:13:65:1b:e0:d0:28:
f6:0d:ae:d3:e3:fa:8c:44:8f:51:c7:de:22:75:85:a5:0e:10:
46:c5:81:3d:f4:e2:0f:52:7e:eb:cd:b4:4c:9c:bf:8b:96:72:
e0:6f:29:5c:13:83:a5:87:69:80:d1:02:22:6b:ae:5e:ad:e9:
77:44:65:62:7d:54:da:3b:cb:d8:fe:ba:9c:79:d8:d1:a1:c9:
9b:a2:dd:12:19:1f:0c:f6:10:21:2a:96:47:3e:26:9b:ac:29:
e8:d1:d3:1e:2d:ce:10:cc:5b:53:49:d7:f4:e8:73:39:38:ce:
4d:a2:f8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:16 2024 by rpki-client on console-ams.rpki-client.org