Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/mEJGa5jFk35BEeDwg3fZG6HScPc.roa
File: mEJGa5jFk35BEeDwg3fZG6HScPc.roa (raw, json)
Hash identifier: Ce3NmKIzrGWjTXwZU+qtM0RMCfIajkgJWMvw1OsalkA=
Subject key identifier: 98:42:46:6B:98:C5:93:7E:41:11:E0:F0:83:77:D9:1B:A1:D2:70:F7
Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial: 018962BB052E90C95CD1494128BFE2B54279
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/mEJGa5jFk35BEeDwg3fZG6HScPc.roa
Signing time: Mon 17 Jul 2023 07:22:51 +0000
ROA not before: Mon 17 Jul 2023 07:22:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8831
IP address blocks: 62.108.64.0/22 maxlen: 24
62.108.64.0/21 maxlen: 21
62.108.68.0/22 maxlen: 24
62.108.72.0/22 maxlen: 24
62.108.88.0/21 maxlen: 21
62.108.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:62:bb:05:2e:90:c9:5c:d1:49:41:28:bf:e2:b5:42:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Validity
Not Before: Jul 17 07:22:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9842466b98c5937e4111e0f08377d91ba1d270f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:1c:94:7a:0b:4d:9c:07:cc:c0:50:87:4a:
6c:c4:13:47:02:44:0e:3f:71:19:a2:1b:e3:55:c8:
e5:a2:65:21:3a:e1:14:aa:14:b3:60:b5:ac:aa:3a:
05:59:d1:c6:47:17:70:62:25:6b:da:8c:21:e5:0f:
49:53:5b:7d:0c:a9:fe:0e:ce:37:99:05:c8:70:e7:
fc:04:3d:1a:2f:80:aa:07:0e:94:dc:d4:b8:5e:e6:
77:94:56:6c:f3:de:e1:df:4f:11:4c:5f:92:73:89:
3e:59:7b:84:fe:c9:92:3a:aa:0a:6e:56:5c:8e:64:
01:7a:04:88:b8:22:70:e9:14:13:c4:52:e3:21:ec:
2b:04:66:0c:87:79:3a:31:a5:23:86:ba:99:32:69:
35:dd:4b:7e:7d:b3:03:31:c5:27:98:cc:39:5b:21:
61:ad:9d:90:48:df:2c:03:06:3b:19:da:ed:dc:ef:
6c:0f:70:8b:d4:2f:b1:a1:bd:7c:3e:d1:a0:28:1d:
8d:60:10:77:a7:48:c7:12:f3:de:dc:8d:2a:98:39:
a2:6d:ac:5e:3c:49:c4:39:0c:ab:05:98:20:bc:e7:
cf:49:43:24:d7:25:c1:df:b5:ea:76:c9:15:7d:9a:
c5:37:97:12:b0:f1:fa:66:a0:e0:aa:18:8c:d8:ab:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:42:46:6B:98:C5:93:7E:41:11:E0:F0:83:77:D9:1B:A1:D2:70:F7
X509v3 Authority Key Identifier:
keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/mEJGa5jFk35BEeDwg3fZG6HScPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.64.0-62.108.75.255
62.108.88.0/21
Signature Algorithm: sha256WithRSAEncryption
35:62:21:47:97:78:8b:62:34:ae:ff:f8:a7:f8:4c:98:74:4b:
8c:51:f2:e9:4a:5b:53:04:42:31:98:2e:a5:55:2d:da:bd:36:
74:e7:07:c5:dd:9b:b8:74:3e:f3:b4:5c:0b:7b:fc:d2:8d:10:
cc:44:52:78:0a:3b:47:e8:3f:5e:e5:4e:51:d0:e6:93:fc:55:
d0:2a:c7:a8:09:48:5a:7c:69:ba:0c:37:49:c0:40:ed:8b:e2:
67:14:d1:da:b2:46:2d:ad:b0:2d:f6:e9:00:16:bd:7f:64:1a:
e0:2a:0a:9d:08:d8:82:5d:a9:57:e8:77:97:30:2e:9f:00:e7:
b7:e0:14:bb:58:df:0d:e1:a0:dd:84:dc:2e:09:c6:b5:d2:b1:
6b:e3:58:74:9a:f5:b3:5b:fa:93:59:7d:53:ef:92:11:fd:72:
b3:82:f0:9c:7e:2e:32:84:97:07:57:6f:a1:08:21:b6:c3:b4:
b7:47:b5:79:8d:f3:71:82:9f:69:77:7b:96:db:b2:c8:14:ce:
98:9a:9e:66:93:10:6b:c5:11:57:cd:cc:ed:2b:0a:ed:23:c9:
b4:ca:ae:56:f4:a5:37:71:d1:1b:e2:5b:11:a7:2f:9b:41:f1:
27:e0:43:3e:f8:6f:46:83:52:8f:4e:c8:e2:27:fc:7e:8a:a1:
6e:fe:fd:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:04 2024 by rpki-client on console-ams.rpki-client.org