Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/N35oBJOan14_7_wZAEl6H5Jy0Xs.roa
File: N35oBJOan14_7_wZAEl6H5Jy0Xs.roa (raw, json)
Hash identifier: gChqwqAKk2GeUTEAXzBtr10eXNVhxJEIDFL3b1xeCRw=
Subject key identifier: 37:7E:68:04:93:9A:9F:5E:3F:EF:FC:19:00:49:7A:1F:92:72:D1:7B
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019223DDC2C73BF65E7A0C0586F603E7FBE5
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/N35oBJOan14_7_wZAEl6H5Jy0Xs.roa
Signing time: Tue 24 Sep 2024 11:49:48 +0000
ROA not before: Tue 24 Sep 2024 11:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1
IP address blocks: 62.233.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 12:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:23:dd:c2:c7:3b:f6:5e:7a:0c:05:86:f6:03:e7:fb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Sep 24 11:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=377e6804939a9f5e3feffc1900497a1f9272d17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:9d:cf:95:af:04:d5:6b:5c:f5:e4:58:da:
81:73:ef:f5:ed:15:84:e9:25:48:40:33:07:24:d3:
00:d5:5c:05:bf:69:34:25:4e:20:1b:bc:9a:c2:fa:
c4:82:d1:3a:61:f4:60:3f:ef:a2:e7:48:e2:b8:44:
ae:b0:21:87:ab:12:9b:3a:b4:55:33:f6:e4:c2:cc:
9b:a0:81:81:60:8f:8f:c6:de:f9:58:1f:0e:b6:48:
fb:72:19:3e:31:09:e8:25:e9:0d:5a:21:51:e2:d6:
b7:5e:90:fa:9a:12:d0:b7:1a:f0:c6:92:e2:c3:67:
50:9c:48:01:ba:65:0c:f0:ee:d4:f2:7f:b1:fc:b6:
00:86:fd:14:15:83:e6:69:31:e2:53:60:15:2d:bd:
ef:ea:47:46:b5:71:9c:23:23:30:21:e6:90:05:40:
ff:1c:c7:07:1c:f0:ed:5c:b8:66:6e:74:5b:37:bb:
73:9d:bd:9e:9b:18:8d:62:f9:81:31:b7:fd:62:e0:
ef:09:7e:0b:1d:61:07:15:e7:23:00:68:d3:e8:6d:
53:23:7a:26:65:a0:7b:21:af:10:bf:ff:7e:0d:5a:
f1:9c:26:72:c4:f2:19:a3:3f:e2:c7:ce:a2:aa:a1:
99:82:5c:f8:dc:24:0a:2e:69:85:fb:fa:cd:d4:88:
bc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7E:68:04:93:9A:9F:5E:3F:EF:FC:19:00:49:7A:1F:92:72:D1:7B
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/N35oBJOan14_7_wZAEl6H5Jy0Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.59.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f1:91:4a:0d:9e:81:d2:5c:11:ef:f1:36:66:0c:fa:51:85:
d5:47:59:85:2b:82:55:72:b9:19:37:09:5c:a7:5e:39:b0:0c:
53:fe:cc:3d:f6:86:40:58:25:c5:e1:8a:0b:10:a7:8f:9d:07:
a2:93:74:16:25:49:9e:b3:b9:51:a8:78:45:a3:cb:7f:23:06:
51:43:ab:ca:a3:22:d5:c6:da:4e:ce:1a:a9:31:6a:99:60:fc:
2f:f7:b4:ea:7d:e1:8f:1b:12:10:f3:62:96:28:30:e0:4c:c3:
68:9c:69:e7:60:ba:e1:01:23:3f:54:fa:5b:8a:2b:1b:b6:9e:
38:e4:cd:55:b6:79:ed:12:a7:b4:83:dc:c5:8f:21:24:78:19:
01:a5:95:a5:f9:2a:13:cc:04:41:3b:31:d4:2f:d7:56:a2:79:
e8:72:d8:26:87:93:e2:f8:41:ae:61:77:2f:7c:fc:71:c7:7e:
3e:bf:78:82:c5:3d:e8:04:d1:9d:e1:4c:ec:d8:2f:c0:03:4b:
1a:72:07:94:52:7c:d3:32:28:ea:9a:39:7a:1b:35:7c:32:5f:
94:19:50:68:c2:14:38:eb:24:26:bb:9d:39:8a:77:6c:bf:bd:
74:5a:76:41:c8:27:fd:03:ad:4a:4f:cc:77:bc:9e:50:29:0e:
fe:fa:74:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 17:34:43 2024 by rpki-client on console-ams.rpki-client.org