Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/viVuG3r7wjZZSiM1F6mFDTo6M4s.roa
File: viVuG3r7wjZZSiM1F6mFDTo6M4s.roa (raw, json)
Hash identifier: hwZ56uq8zKKo7gcVOrtEint8+fpFp0KO4F0B1Nz5TkM=
Subject key identifier: BE:25:6E:1B:7A:FB:C2:36:59:4A:23:35:17:A9:85:0D:3A:3A:33:8B
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0191317879A95CC81EB1B7D5DF1916D926FA
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/viVuG3r7wjZZSiM1F6mFDTo6M4s.roa
Signing time: Thu 08 Aug 2024 10:11:04 +0000
ROA not before: Thu 08 Aug 2024 10:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.233.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Aug 2024 08:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:78:79:a9:5c:c8:1e:b1:b7:d5:df:19:16:d9:26:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Aug 8 10:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be256e1b7afbc236594a233517a9850d3a3a338b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:13:5d:20:b5:ab:f9:63:a0:fd:2f:da:e3:
62:bc:60:64:5f:05:da:15:b2:8b:36:e4:fe:61:2a:
79:4a:95:66:26:36:7e:e2:97:2e:26:55:ab:8b:a8:
2e:0b:28:a0:dd:24:87:6e:08:4a:d3:99:f0:f3:0a:
e4:53:87:61:84:94:54:69:8b:d3:3b:ee:81:11:4b:
a8:1f:5d:40:6b:09:fa:09:5a:e8:db:86:fa:54:be:
5d:d7:87:2c:d6:f8:59:99:2b:bd:58:c7:83:3b:d5:
d8:6e:61:92:7d:09:6b:44:c3:9d:e3:ab:a1:91:06:
61:08:97:26:e0:53:cc:6e:c0:3b:23:42:87:40:0b:
f4:be:2c:16:ac:cf:a3:3c:f2:f6:1b:ff:d2:6e:31:
3c:64:f3:96:82:ec:9f:6e:2b:e6:91:01:7a:4c:32:
8f:42:cc:11:1c:2a:64:90:3e:d2:32:9f:62:85:9f:
3c:35:0f:59:9e:20:0a:84:00:60:27:dc:4b:d5:93:
54:52:dd:27:73:07:7f:cc:4e:29:c6:e1:2c:82:8a:
8b:83:5f:0e:42:39:a2:89:d6:d1:77:91:89:9a:10:
61:00:2f:95:04:d3:05:4e:f2:b6:90:7f:20:75:66:
68:e0:cf:09:bb:ba:35:4a:eb:0a:b5:ff:b0:17:ed:
d8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:25:6E:1B:7A:FB:C2:36:59:4A:23:35:17:A9:85:0D:3A:3A:33:8B
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/viVuG3r7wjZZSiM1F6mFDTo6M4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.59.0/24
Signature Algorithm: sha256WithRSAEncryption
57:9c:08:6f:f3:55:6d:63:28:a2:4c:ca:6a:46:7e:b6:69:02:
5f:fd:3b:69:3f:cf:83:6e:46:36:f4:45:2f:f3:b9:c4:72:aa:
7c:f1:24:bd:ae:63:33:a0:79:bb:0e:86:20:e7:83:9a:28:3f:
2a:d2:d0:01:fe:e9:d4:12:33:81:7d:fc:bd:11:7f:3c:f9:c1:
18:aa:de:73:f0:5e:a3:57:06:d4:d0:d4:41:09:2f:13:dd:e4:
6c:f2:b2:38:e8:b9:05:42:0d:44:62:e4:ea:a6:07:dd:c8:da:
ed:52:c1:1c:f2:4f:86:52:b0:e2:0e:f1:0b:e9:56:17:b5:5c:
f2:ff:64:af:e0:2b:51:28:7b:12:9c:c8:90:74:3e:1a:c5:3e:
7d:84:5e:fc:4e:a0:83:b4:52:3e:08:21:e2:03:f7:d9:12:cd:
b5:0d:7a:68:77:91:ca:5f:d2:cd:58:29:3a:e9:e6:01:4d:fb:
3f:e9:dc:0b:2a:91:ef:50:ce:3b:3d:8f:9a:8f:13:22:47:e1:
17:9f:8b:34:79:0a:de:98:84:dc:a1:92:8f:87:d1:0d:92:89:
c4:90:1d:e1:d7:a2:57:53:81:c1:e1:26:f9:c8:04:b4:38:98:
49:63:4a:b2:be:d4:0e:a4:25:50:4b:83:c6:55:08:10:47:ef:
6b:0d:7b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 09:58:55 2024 by rpki-client on console-ams.rpki-client.org