Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/S1XwS5UcntgENWndmLbnI9uzbkk.roa
File: S1XwS5UcntgENWndmLbnI9uzbkk.roa (raw, json)
Hash identifier: dduCYA9LdpJ5K9mEjBDscgVzlov3vkMvbcO1b42sovA=
Subject key identifier: 4B:55:F0:4B:95:1C:9E:D8:04:35:69:DD:98:B6:E7:23:DB:B3:6E:49
Certificate issuer: /CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Certificate serial: 0185710BEE2D76A5B5B3FBD13D4C19C0D4C2
Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/S1XwS5UcntgENWndmLbnI9uzbkk.roa
Signing time: Mon 02 Jan 2023 05:54:45 +0000
ROA not before: Mon 02 Jan 2023 05:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24753
IP address blocks: 62.145.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0b:ee:2d:76:a5:b5:b3:fb:d1:3d:4c:19:c0:d4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Validity
Not Before: Jan 2 05:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b55f04b951c9ed8043569dd98b6e723dbb36e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:8a:cc:f4:e5:f2:ba:ae:46:13:b8:76:3d:
7c:00:d9:de:0b:13:29:53:f8:d9:24:12:9a:d7:6e:
6e:a3:7b:01:5f:62:8e:d2:36:b0:e9:9d:ee:05:68:
00:b4:2f:a0:08:f2:6b:90:7d:b9:50:5f:5d:70:28:
8f:1b:63:65:81:dc:b0:35:12:af:ae:e7:2c:13:38:
05:25:e4:77:ef:6e:24:01:21:45:33:a4:f0:02:40:
3f:31:56:fe:98:cc:63:b8:17:b3:cf:db:4f:93:01:
fe:e6:92:58:30:46:84:99:46:30:1e:7c:6c:08:25:
37:0f:4a:15:8d:af:c2:31:bc:69:7a:13:eb:ac:b7:
8e:22:f0:da:c8:47:90:b2:43:45:f8:de:84:77:8d:
7c:94:2c:ab:cf:a0:e8:0b:57:32:7a:67:dc:c8:09:
10:2d:de:84:44:f8:49:4a:1d:c9:20:88:f9:82:ad:
4d:b7:6d:0d:68:bf:af:6d:19:d9:33:5b:63:9f:c5:
89:c8:73:06:a3:76:e1:bd:72:eb:50:47:fc:fb:e7:
e6:e5:fa:7d:76:19:8e:30:08:fd:a2:61:73:f6:4d:
2e:bd:e5:2a:29:75:6b:c3:44:12:e9:36:1e:67:cb:
06:a6:3a:fe:a9:24:5b:98:d6:59:fc:0a:6a:65:23:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:55:F0:4B:95:1C:9E:D8:04:35:69:DD:98:B6:E7:23:DB:B3:6E:49
X509v3 Authority Key Identifier:
keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/S1XwS5UcntgENWndmLbnI9uzbkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.145.126.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f2:01:a7:a4:dc:24:9e:28:b9:f4:52:02:02:9d:a5:f6:91:
b0:52:c1:75:65:9e:c4:1f:2c:91:36:49:ac:02:6c:1f:39:d6:
39:64:85:e9:1d:fa:d2:72:63:4d:bc:cc:11:56:53:3f:6b:65:
bb:8e:ad:09:d0:e3:4a:82:60:db:e1:bc:4b:8d:ad:fa:b0:9b:
5c:47:bf:9f:58:9e:c4:27:3c:42:d0:30:6a:ce:df:f4:94:5d:
c4:b7:0e:48:da:60:10:7f:34:fe:57:9d:3e:b1:b6:9d:47:30:
03:0c:36:ec:ee:fb:c6:fc:2e:cb:38:93:eb:05:f8:23:c6:a9:
22:bf:de:81:d3:54:9b:75:3d:68:82:05:e5:79:3f:c5:47:1e:
24:e1:cc:09:61:64:98:4a:21:4e:eb:1e:bf:68:aa:38:08:c3:
60:a8:cf:c9:a6:66:70:56:8d:2d:c4:6f:b3:f9:56:7a:00:a4:
b9:c1:6b:50:8a:55:02:fb:a3:fb:11:75:30:5d:ec:6c:3a:4e:
1a:4b:d0:f8:23:3e:da:44:02:c7:3f:86:e3:5e:82:e6:9b:f9:
91:18:02:1b:31:11:72:ac:0b:31:00:7c:d2:c2:f5:06:21:13:
8b:d9:eb:59:7f:cf:4e:63:d9:da:a6:da:dd:73:15:2a:bc:69:
1e:72:a3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:31 2024 by rpki-client on console-fra.rpki-client.org