Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/msRspNPrF3S5G4rqiCm1BKr2TG8.roa
File: msRspNPrF3S5G4rqiCm1BKr2TG8.roa (raw, json)
Hash identifier: 1V46XD49eHH5BIPXgi5XFYoc9FkkUBMFxfe31ZG4Rsw=
Subject key identifier: 9A:C4:6C:A4:D3:EB:17:74:B9:1B:8A:EA:88:29:B5:04:AA:F6:4C:6F
Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial: 0187B70920F2E8D77A08271EB56A4432B61E
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/msRspNPrF3S5G4rqiCm1BKr2TG8.roa
Signing time: Tue 25 Apr 2023 06:10:41 +0000
ROA not before: Tue 25 Apr 2023 06:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 62.108.64.0/22 maxlen: 24
62.108.68.0/22 maxlen: 24
62.108.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:09:20:f2:e8:d7:7a:08:27:1e:b5:6a:44:32:b6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Validity
Not Before: Apr 25 06:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ac46ca4d3eb1774b91b8aea8829b504aaf64c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:30:0c:a6:53:d7:e2:3e:8d:93:e6:73:fd:
88:45:f5:c4:49:de:f5:b5:bf:4a:49:c6:5b:78:e9:
35:66:bc:c4:77:ae:d8:9f:b7:a3:86:71:98:f0:01:
57:93:66:9b:89:e1:cd:d4:8f:1e:5b:38:15:9a:0d:
4b:b7:10:75:a7:45:f6:cf:5c:94:ad:34:26:47:ce:
db:ca:f5:c2:aa:e0:40:f0:90:0e:56:2c:6e:c8:2b:
e3:b0:44:cf:ed:26:a0:46:c3:ba:c5:38:26:e5:db:
1f:f9:03:b0:26:e4:d9:87:84:7a:f7:9d:74:3e:d5:
ee:76:58:9b:64:72:0a:35:5c:8f:dd:5a:a6:39:3a:
c3:2d:da:8d:80:86:ed:bc:fe:69:6e:ba:83:a5:f3:
14:19:e1:ff:a3:15:94:60:ac:5d:f4:ab:a6:5b:ce:
cc:c8:40:62:bd:36:cf:ef:ba:a2:e0:4b:da:7b:8a:
62:4c:d8:38:e3:03:5e:a0:03:ae:1e:51:cf:6a:a3:
c7:af:be:7f:2c:26:74:40:21:60:dc:bc:02:c0:07:
c8:77:88:46:9c:4c:64:ee:09:83:86:20:58:fe:ed:
ea:b9:8e:75:de:59:bf:ab:f9:5d:09:62:88:39:55:
c3:5c:ef:95:fa:50:b7:6b:8e:7c:5c:27:35:36:cf:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C4:6C:A4:D3:EB:17:74:B9:1B:8A:EA:88:29:B5:04:AA:F6:4C:6F
X509v3 Authority Key Identifier:
keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/msRspNPrF3S5G4rqiCm1BKr2TG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.64.0-62.108.75.255
Signature Algorithm: sha256WithRSAEncryption
b8:30:d8:59:00:c4:38:7e:77:37:93:9a:0f:c6:cd:30:59:f9:
41:2e:be:34:a9:15:e4:19:7d:11:56:f1:46:4c:cb:3e:46:0b:
88:3c:50:01:d5:87:18:e9:6c:e4:c4:59:b2:a7:c7:f3:7d:02:
fe:34:4c:ff:b5:2f:f9:94:55:a8:2f:fc:a5:0d:e8:b9:df:31:
b9:94:0e:6f:f9:1f:ab:61:e2:8c:73:55:12:15:08:b6:87:9a:
03:a6:26:e0:0c:c3:a6:20:78:73:ae:c3:a9:a3:05:1f:a4:c3:
a3:08:af:52:b9:88:f3:e4:11:74:84:0a:f0:ec:ef:19:5f:9e:
8b:7a:7f:9e:d5:86:17:14:e4:10:c5:13:2a:af:e6:54:87:4b:
3d:6c:3a:e9:d2:50:eb:77:38:d5:f2:7f:d8:b7:6f:db:d5:55:
3b:9d:f5:f4:be:ec:4c:8f:24:35:25:a5:79:fa:3c:fe:44:02:
5e:62:06:97:aa:c7:8e:c0:47:01:a1:19:ff:30:77:10:c8:98:
04:ab:ce:8f:c5:43:03:27:af:2c:fe:6f:f3:6c:f8:06:cd:89:
fb:28:95:c1:8f:a0:6e:ea:6f:04:a4:86:1c:4b:7d:02:47:e8:
1b:0a:eb:59:ef:a6:a7:2e:f5:7c:d9:c2:c3:0e:45:14:62:a1:
a7:67:b2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:23 2024 by rpki-client on console-fra.rpki-client.org