Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/9KQP53fs2WnIrU_eKHk8Da24_QE.roa
File: 9KQP53fs2WnIrU_eKHk8Da24_QE.roa (raw, json)
Hash identifier: fSbgLcSgxI46chzvzEM/sgd7N+pg4aMroR+cJBjRQ+U=
Subject key identifier: F4:A4:0F:E7:77:EC:D9:69:C8:AD:4F:DE:28:79:3C:0D:AD:B8:FD:01
Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial: 01874ACB94C7B7EF80A1744B8707DE64B2FA
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/9KQP53fs2WnIrU_eKHk8Da24_QE.roa
Signing time: Tue 04 Apr 2023 05:44:28 +0000
ROA not before: Tue 04 Apr 2023 05:44:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8831
IP address blocks: 62.108.64.0/22 maxlen: 24
62.108.68.0/22 maxlen: 24
62.108.72.0/22 maxlen: 22
62.108.88.0/21 maxlen: 21
62.108.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 06 Apr 2023 05:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4a:cb:94:c7:b7:ef:80:a1:74:4b:87:07:de:64:b2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Validity
Not Before: Apr 4 05:44:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4a40fe777ecd969c8ad4fde28793c0dadb8fd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:af:b5:8b:c2:a7:9e:17:77:16:0e:b4:3f:7b:
0f:83:1a:1b:30:f3:53:49:a0:6a:08:09:dd:0c:25:
25:a4:20:91:4c:a5:9c:99:44:c0:0c:8d:de:8f:bb:
31:bd:f2:7c:6a:d1:4e:ae:b5:0d:58:be:22:c7:64:
3c:0b:06:72:4b:df:7d:86:d1:1b:24:97:0d:27:51:
90:40:20:19:02:50:4a:f6:74:87:46:15:ce:42:d3:
72:64:f2:0e:a1:0d:ab:b1:b5:59:a3:d5:db:ba:33:
cf:74:33:29:ae:10:a9:cf:21:0e:9c:51:49:23:e1:
1c:e8:63:3b:8b:ff:ce:8d:81:22:1b:33:a3:59:8b:
1a:99:9a:63:ab:d1:a4:e1:1e:14:e6:45:f7:41:5a:
3f:6b:18:60:24:f7:28:6a:5b:bf:d1:ff:89:0d:2b:
b4:4d:0e:56:df:27:33:21:ef:89:5f:f7:c0:9b:34:
5b:01:1c:a6:6a:2e:fa:c2:f7:cc:b9:59:2b:32:23:
87:94:ba:4a:f0:52:70:5a:82:ac:ec:19:2f:60:ee:
d1:3f:cd:da:15:ca:ca:d4:1f:15:ec:19:d0:37:fc:
fc:33:22:d0:21:a5:a1:de:72:44:a8:4c:e4:0a:32:
4c:f9:d0:14:7d:be:ec:51:fa:75:de:15:aa:3c:3e:
d5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A4:0F:E7:77:EC:D9:69:C8:AD:4F:DE:28:79:3C:0D:AD:B8:FD:01
X509v3 Authority Key Identifier:
keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/9KQP53fs2WnIrU_eKHk8Da24_QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.64.0-62.108.75.255
62.108.88.0/21
Signature Algorithm: sha256WithRSAEncryption
96:ca:3d:75:dc:c9:12:9d:50:42:ec:b0:53:39:76:c1:e4:7d:
1d:f9:11:d9:6c:7f:e4:ea:1f:a1:10:a7:f9:9a:17:56:d3:00:
c8:fc:8f:15:10:84:ee:8f:34:8f:d7:a2:19:ab:df:15:f5:74:
7c:90:8a:96:1a:18:48:ee:1e:33:aa:0d:65:3a:17:08:ea:16:
9b:2c:f9:c3:d1:15:45:0e:9a:ca:b0:0e:c6:41:7b:1e:c6:17:
3d:d4:18:1e:88:92:24:a7:9b:bd:4a:d1:87:84:25:42:41:a6:
f6:27:3f:fa:9c:49:5d:31:41:6a:98:ae:bd:ac:a5:1a:8f:64:
63:99:18:0a:51:6c:89:d0:05:ed:6b:09:d6:b3:a4:b7:c3:bc:
14:84:af:25:51:c5:82:8a:38:fc:d7:4b:6a:24:28:b6:b9:29:
ca:7d:65:3e:ea:9e:29:0a:62:d2:87:fc:65:89:71:6a:fc:25:
30:d1:67:0a:07:a6:1a:fd:ae:2c:b0:7c:4f:6d:41:81:0e:00:
c9:5b:03:6f:74:2f:62:83:02:8a:0a:66:59:e0:a8:40:60:6e:
6b:73:2f:15:27:ad:5c:8d:b2:24:24:df:9b:b8:ac:3e:71:a6:
49:bc:54:96:a9:c5:f3:1c:35:45:ce:74:ca:07:bf:0a:7d:cc:
a6:20:44:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:23 2024 by rpki-client on console-fra.rpki-client.org