Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/ULxUuqlbJNq3-AEYIOznLSGOM_I.roa
File: ULxUuqlbJNq3-AEYIOznLSGOM_I.roa (raw, json)
Hash identifier: Y0s5KTeK/919uj/TuNxjV1qpwD7geoYliATbFDfk0JU=
Subject key identifier: 50:BC:54:BA:A9:5B:24:DA:B7:F8:01:18:20:EC:E7:2D:21:8E:33:F2
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 01856DD3EFF5173803EBB91F118B503B3A46
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/ULxUuqlbJNq3-AEYIOznLSGOM_I.roa
Signing time: Sun 01 Jan 2023 14:54:44 +0000
ROA not before: Sun 01 Jan 2023 14:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30848
IP address blocks: 62.100.87.0/24 maxlen: 24
62.100.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:ef:f5:17:38:03:eb:b9:1f:11:8b:50:3b:3a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Jan 1 14:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50bc54baa95b24dab7f8011820ece72d218e33f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:c6:10:ca:b9:04:32:42:22:40:a9:bc:9e:
2b:92:27:39:4e:e8:8c:0e:e0:9b:5a:11:5e:2c:b8:
06:ea:08:be:21:e9:a8:0c:ad:5a:65:a1:6d:6b:40:
6d:08:f2:3d:5f:f3:9e:ba:5a:5c:15:68:a6:f2:22:
1c:9d:63:96:ca:cc:f9:20:49:48:1b:6b:29:1a:6c:
e9:98:74:e9:62:aa:96:83:1d:26:c1:ee:4a:ae:88:
68:43:4a:92:a7:fd:2d:a4:b5:59:c5:f8:74:f0:92:
92:73:a7:cd:ef:27:75:71:35:2e:a7:4e:ba:df:18:
35:b5:37:00:ee:8e:a4:e9:03:da:41:dc:7c:5b:39:
6a:5c:ea:3c:60:f9:47:77:47:1e:fd:1d:22:bf:73:
a1:09:79:86:af:03:db:89:ce:e9:78:44:4d:97:d7:
3b:14:1a:bb:6c:8f:24:89:65:13:52:d0:fb:30:86:
94:13:70:41:bf:70:ca:a7:92:ef:33:61:d6:c2:3c:
14:1c:c8:74:d6:20:0c:c7:81:31:ed:21:1c:24:6a:
c4:2e:41:48:b5:f0:5c:34:f5:b6:52:5b:74:2c:f0:
e7:2e:fa:18:46:86:dc:71:84:06:30:b6:00:ef:35:
1b:53:b0:68:50:d0:30:e9:59:5f:8e:be:b5:06:16:
62:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BC:54:BA:A9:5B:24:DA:B7:F8:01:18:20:EC:E7:2D:21:8E:33:F2
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/ULxUuqlbJNq3-AEYIOznLSGOM_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.86.0/23
Signature Algorithm: sha256WithRSAEncryption
35:95:11:34:08:54:bd:30:b2:32:10:f6:5e:d7:a1:e6:b5:64:
16:4d:02:cb:eb:9e:fa:7e:a1:35:dd:90:ae:74:19:59:5b:22:
c2:1f:23:a1:5e:bc:cc:fe:0b:77:f2:58:c3:72:d8:6e:a3:b2:
b4:50:ca:27:2a:04:ff:da:df:28:d1:8b:9d:5b:db:7c:19:b7:
6e:0d:79:1d:73:5f:90:53:dc:6b:15:cb:bd:f6:e0:00:0f:c5:
1e:47:5d:89:af:31:d8:2b:83:8a:39:df:c1:c5:00:14:53:f0:
d0:d8:53:06:88:2e:0d:37:1c:ae:31:17:33:10:65:52:09:68:
44:c2:43:a8:5c:a4:e1:42:33:af:95:80:75:76:b2:91:cc:54:
8e:a0:f2:bf:07:66:12:46:12:ff:3a:f9:7a:62:5c:cf:3b:fb:
b3:31:47:be:f9:9f:85:ad:39:0b:83:3e:06:de:2e:e4:c2:aa:
b0:85:d5:ac:89:ea:5f:b3:ba:0d:79:24:cd:2d:e6:21:01:49:
fb:5b:05:37:4a:64:15:be:93:da:cf:50:a2:ee:f1:3a:71:03:
70:2c:a6:dd:03:aa:c8:93:42:0d:90:9b:36:95:f9:1d:ee:74:
49:4e:0f:b6:ce:9b:03:74:8d:cd:f4:36:38:a2:66:d5:fe:6f:
30:51:02:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:16 2024 by rpki-client on console-ams.rpki-client.org