Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/6FIjXehyWKGq0miruhD_XATBHJk.roa
File: 6FIjXehyWKGq0miruhD_XATBHJk.roa (raw, json)
Hash identifier: aHI4RI8eMEs19DWplfjBkfAxryVAAG/rUsSasKWai4M=
Subject key identifier: E8:52:23:5D:E8:72:58:A1:AA:D2:68:AB:BA:10:FF:5C:04:C1:1C:99
Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial: 0187B7066172D09EE3A66E7880EFF247F467
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/6FIjXehyWKGq0miruhD_XATBHJk.roa
Signing time: Tue 25 Apr 2023 06:07:41 +0000
ROA not before: Tue 25 Apr 2023 06:07:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 62.108.64.0/22 maxlen: 24
62.108.68.0/22 maxlen: 24
62.108.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:06:61:72:d0:9e:e3:a6:6e:78:80:ef:f2:47:f4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Validity
Not Before: Apr 25 06:07:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e852235de87258a1aad268abba10ff5c04c11c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:22:69:99:36:29:cf:76:e7:41:a8:ee:5d:59:
d2:18:fb:da:28:40:bf:dc:e0:3a:38:37:78:62:b4:
21:b1:8a:87:59:59:ce:0c:1e:a3:82:79:91:55:c1:
9c:df:75:35:5e:a0:5d:2d:2a:86:b0:e0:ad:b2:57:
a0:aa:e8:10:63:2c:39:48:8a:d4:e0:bb:b3:ad:03:
94:e2:26:8d:d0:f7:11:97:c4:1b:26:2e:f2:da:05:
07:06:72:43:e0:4c:86:27:b9:cb:3d:af:b5:ca:0b:
05:c6:be:28:9e:b3:f5:3a:c0:7c:69:93:14:8f:a4:
89:cf:1d:d3:d5:ab:bf:c3:d9:97:70:44:54:8a:48:
a4:2e:77:04:38:f5:b6:f7:ea:81:19:e8:56:19:dc:
3e:13:d2:3f:d6:36:7b:02:0d:7f:24:c9:96:a8:ef:
0a:a1:c1:05:07:cf:ff:b5:20:08:18:05:29:42:7f:
49:80:ea:80:70:2b:91:4e:16:14:84:65:3e:7a:14:
02:67:9f:55:74:e2:ee:9a:e9:a1:0e:e3:3c:09:0d:
9f:cb:fe:e1:36:20:5b:a4:33:d5:4f:4a:eb:84:f7:
d9:d2:e2:02:ce:89:68:1e:a2:5e:47:26:1f:bf:c4:
61:07:c9:e1:21:ee:83:5a:ea:2a:25:f6:19:86:d6:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:52:23:5D:E8:72:58:A1:AA:D2:68:AB:BA:10:FF:5C:04:C1:1C:99
X509v3 Authority Key Identifier:
keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/6FIjXehyWKGq0miruhD_XATBHJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.64.0-62.108.75.255
Signature Algorithm: sha256WithRSAEncryption
87:69:ea:af:d7:72:af:97:61:6d:36:8f:5d:5c:7f:61:23:f6:
f4:a1:ce:7a:41:dd:bd:44:c8:e9:fb:81:b1:b9:65:97:26:2e:
74:c2:f9:6f:4d:21:af:32:96:0e:9b:41:e2:fc:b3:8e:ae:31:
08:92:cf:02:72:9e:41:05:9c:37:c4:c0:e6:9b:f9:ff:81:47:
05:eb:78:38:08:cd:9a:3b:09:4f:02:ae:07:49:2f:2e:ba:87:
93:bd:e1:6d:64:5e:11:24:1e:e7:2f:13:2a:61:17:91:f7:a5:
3d:f0:57:66:e8:bc:41:e6:d4:f8:71:30:0c:17:0b:ba:18:9f:
9b:85:92:24:8d:93:b8:78:f9:9d:6d:4d:79:52:f9:7d:8d:a2:
05:47:13:cc:19:7a:db:d4:48:ff:d2:26:4c:d1:41:9f:56:18:
42:0e:9a:ab:c0:91:aa:68:e2:92:0c:24:c9:c1:da:ee:f8:8b:
9f:79:1b:fa:07:0c:8f:a5:87:23:3c:ee:e7:da:19:c8:21:25:
da:97:65:6f:b5:80:c8:23:bc:ec:9f:f0:2e:b0:df:f8:3b:dd:
6b:45:8c:44:32:c1:d3:b9:6a:73:92:b2:11:c7:91:dd:3c:1c:
c2:bc:d7:6f:76:7b:87:0c:aa:b8:60:40:5e:b3:c7:6d:fa:f5:
5f:28:d1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:23 2024 by rpki-client on console-fra.rpki-client.org