Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/JiVMICVhdwkIrS-Cv_fsu89qMXQ.roa
File: JiVMICVhdwkIrS-Cv_fsu89qMXQ.roa (raw, json)
Hash identifier: iUAcn77j0C4h1B5aZB1OkNUItMQKFIR3wT7O5peXhFU=
Subject key identifier: 26:25:4C:20:25:61:77:09:08:AD:2F:82:BF:F7:EC:BB:CF:6A:31:74
Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial: 01874AB6004155DDB81C7DDD51B3DC60D729
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/JiVMICVhdwkIrS-Cv_fsu89qMXQ.roa
Signing time: Tue 04 Apr 2023 05:20:54 +0000
ROA not before: Tue 04 Apr 2023 05:20:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8831
IP address blocks: 62.108.64.0/22 maxlen: 24
62.108.72.0/22 maxlen: 22
62.108.88.0/21 maxlen: 21
62.108.88.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4a:b6:00:41:55:dd:b8:1c:7d:dd:51:b3:dc:60:d7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Validity
Not Before: Apr 4 05:20:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26254c202561770908ad2f82bff7ecbbcf6a3174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:54:21:86:d9:ed:3a:13:02:62:49:31:61:
fd:bd:af:d0:83:1f:6f:d1:23:c8:46:1c:89:b9:13:
b6:f9:e6:9f:2a:91:a8:11:71:2f:d9:f8:47:fb:13:
9a:df:66:27:23:16:2a:5a:6b:79:52:fb:41:94:02:
1d:73:56:a8:38:82:d8:ec:27:2b:51:e0:e5:45:40:
58:91:82:88:49:da:fa:bc:d8:64:bf:1c:83:50:a4:
e1:a2:42:6a:63:98:f0:1d:4a:96:f8:5a:22:fa:0c:
de:e5:34:6d:55:8c:8a:f5:5b:0f:48:6b:26:61:7d:
02:e8:31:41:b4:82:c3:d7:5b:74:fe:0a:7c:7c:08:
f1:69:ee:44:05:c2:74:fd:34:ac:e5:07:da:0c:fc:
60:c1:da:a0:6c:78:91:c4:43:d7:49:2a:33:d7:11:
89:2d:4b:17:78:1f:21:76:4d:a0:45:aa:6f:d1:05:
ee:56:41:a6:30:ae:55:00:94:6f:d0:4a:63:bb:a0:
47:70:77:2f:d5:70:ae:f3:9a:1b:4b:3a:f9:f1:b8:
08:8c:0c:f1:bb:e3:45:52:f1:3d:8f:25:f4:b1:9c:
72:46:6e:a4:d5:19:f7:70:c1:fb:30:77:27:bd:bd:
f3:70:5a:d7:c7:c7:c5:16:72:c6:2d:15:b6:55:95:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:25:4C:20:25:61:77:09:08:AD:2F:82:BF:F7:EC:BB:CF:6A:31:74
X509v3 Authority Key Identifier:
keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/JiVMICVhdwkIrS-Cv_fsu89qMXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.64.0/22
62.108.72.0/22
62.108.88.0/21
Signature Algorithm: sha256WithRSAEncryption
05:34:7d:a9:21:99:e5:23:99:e0:7f:07:6f:c6:09:e5:ef:bd:
61:7d:a6:23:31:1d:1e:53:9b:bd:b7:de:d4:b0:24:52:7b:d9:
e2:51:99:7d:ad:b0:bc:09:68:3e:1a:74:0e:05:8a:78:b8:2f:
5a:c1:60:17:d0:b4:80:2c:f8:ab:f1:4d:d8:cf:e5:15:c7:02:
0e:f6:42:f2:a2:3b:73:fa:de:17:00:e6:8c:7f:e8:01:b8:0a:
50:90:0c:0c:52:63:97:66:04:45:33:a0:b5:9f:95:38:ba:83:
b7:a6:7b:07:4a:55:36:49:ec:4b:6f:9e:8c:20:f0:03:40:d7:
38:00:99:c0:eb:d4:dc:5b:8e:54:25:08:44:e7:1c:a5:d0:2c:
3b:b8:47:d6:65:4c:11:f8:5b:38:f6:b1:cb:5c:91:24:0d:fc:
e5:50:3d:55:48:a5:63:05:5d:9b:be:39:b5:10:59:d6:bf:a9:
d8:b7:f4:91:75:80:b6:3e:33:91:0f:32:80:e1:ba:d7:76:a2:
6e:ce:cf:3f:9d:83:ee:29:26:94:74:cb:43:09:a3:f4:89:58:
ab:5d:4c:a4:36:9d:92:b1:d9:b4:2a:c9:46:45:10:54:1b:44:
32:50:cb:25:9c:eb:cd:89:0e:1d:2f:09:28:a1:3b:8b:1b:95:
eb:35:8c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:40 2023 by rpki-client on console-ams.rpki-client.org