Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2992da-60d9-442f-9331-7f1da6827447/1/x3XktT_s9wdiDIoUiqmyfeYedv0.roa
File: x3XktT_s9wdiDIoUiqmyfeYedv0.roa (raw, json)
Hash identifier: k1rXe8UWht8see9uaxTmmC1SryOuFgglIoD/k7DjY9I=
Subject key identifier: C7:75:E4:B5:3F:EC:F7:07:62:0C:8A:14:8A:A9:B2:7D:E6:1E:76:FD
Certificate issuer: /CN=e39b1000e786b4fd6d61737790e4f3429892650e
Certificate serial: 01856F66D660A929C11764883BC9846341E6
Authority key identifier: E3:9B:10:00:E7:86:B4:FD:6D:61:73:77:90:E4:F3:42:98:92:65:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45sQAOeGtP1tYXN3kOTzQpiSZQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/2992da-60d9-442f-9331-7f1da6827447/1/x3XktT_s9wdiDIoUiqmyfeYedv0.roa
Signing time: Sun 01 Jan 2023 22:14:48 +0000
ROA not before: Sun 01 Jan 2023 22:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207728
IP address blocks: 62.204.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:d6:60:a9:29:c1:17:64:88:3b:c9:84:63:41:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39b1000e786b4fd6d61737790e4f3429892650e
Validity
Not Before: Jan 1 22:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c775e4b53fecf707620c8a148aa9b27de61e76fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:db:0e:0a:d6:21:f8:dc:c5:20:66:01:dd:
16:80:45:f5:51:23:de:e7:e4:c0:70:1d:4b:fa:10:
8a:94:8a:da:55:11:11:8c:f4:db:c7:60:56:b9:9c:
01:38:ee:95:35:aa:e7:51:a3:ca:5c:bb:c8:aa:fe:
4a:78:13:f4:4c:0e:76:8d:3e:38:f2:37:14:f5:91:
88:47:d4:6c:92:ad:a6:c3:97:4c:64:66:2d:94:3d:
c8:60:c6:6b:02:c7:7e:d9:a6:0d:44:84:84:47:ad:
20:35:70:32:e9:55:54:b1:9e:02:cf:56:87:f9:29:
75:9c:ef:e3:37:01:fa:92:f5:b2:06:7a:d3:19:1f:
59:a0:43:7e:81:e2:a3:8f:69:83:a7:72:e5:2e:bc:
15:9e:82:e0:b9:0b:70:e7:ea:1e:57:da:f5:fa:84:
f2:a9:0c:85:2c:bd:fd:50:83:2a:73:1c:82:2d:0a:
1b:a6:af:c4:e5:fd:9e:8d:c4:81:c2:fd:36:4a:ee:
d8:bc:64:af:a5:4e:54:4c:5c:f4:39:20:cb:d5:ee:
07:5c:a4:78:55:e9:4f:52:6d:fc:70:56:89:59:ec:
bc:29:ea:40:0f:cf:78:1c:b5:0e:74:a1:ca:60:c4:
7f:94:81:7c:2a:9a:58:9b:00:e0:5d:ca:6e:83:1a:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:75:E4:B5:3F:EC:F7:07:62:0C:8A:14:8A:A9:B2:7D:E6:1E:76:FD
X509v3 Authority Key Identifier:
keyid:E3:9B:10:00:E7:86:B4:FD:6D:61:73:77:90:E4:F3:42:98:92:65:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45sQAOeGtP1tYXN3kOTzQpiSZQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2992da-60d9-442f-9331-7f1da6827447/1/x3XktT_s9wdiDIoUiqmyfeYedv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2992da-60d9-442f-9331-7f1da6827447/1/45sQAOeGtP1tYXN3kOTzQpiSZQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.42.0/24
Signature Algorithm: sha256WithRSAEncryption
40:fe:75:b8:2e:af:27:16:0a:86:be:da:d8:ff:4c:c4:ea:84:
b4:48:0f:34:7a:7f:46:d2:17:f7:e8:15:e9:d2:a5:6d:dd:a8:
9f:89:ef:93:26:e9:f9:24:f9:c2:e7:3b:a6:67:0f:60:80:0a:
ba:25:00:75:de:d7:7c:dd:9d:4b:47:1a:92:b8:df:b4:d8:b2:
29:a4:c1:8d:5a:d1:b4:b7:7a:d7:2f:05:88:f3:1c:38:c3:70:
65:17:54:c1:d5:76:b1:8e:57:ab:69:75:9c:7f:6a:ac:16:c1:
80:31:f2:cb:cb:19:c8:ee:e6:31:0c:f3:22:9b:bf:a9:f3:39:
67:6f:6a:4e:a1:ff:32:53:fc:b6:bf:e1:9e:6e:ee:a5:5b:e4:
46:8f:fa:fd:1c:76:09:1c:6a:75:08:86:35:74:85:a0:9b:8c:
4d:d1:dc:9e:22:62:e7:3f:8f:dc:d3:33:2c:fc:73:d6:5e:94:
3d:f1:70:d2:34:29:6f:1b:1e:03:70:56:e5:51:93:94:28:c3:
be:7e:5a:96:1d:7c:70:08:cd:39:cb:30:39:83:61:92:6f:d6:
d7:52:87:36:c0:d5:69:75:a5:b0:d5:d3:cb:8d:fa:ec:e1:61:
bf:60:36:46:0e:ab:53:2e:56:07:61:92:a6:e9:63:c0:a8:52:
85:1f:d9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:29 2024 by rpki-client on console-fra.rpki-client.org