Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/nNL2sFgPLOmpQs-4xvdtxr_ohLU.roa
File: nNL2sFgPLOmpQs-4xvdtxr_ohLU.roa (raw, json)
Hash identifier: hBqT821WjZckqUCoP2eNf9WW+lWHSa5LcXd/SWJiaF0=
Subject key identifier: 9C:D2:F6:B0:58:0F:2C:E9:A9:42:CF:B8:C6:F7:6D:C6:BF:E8:84:B5
Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial: 018755057875616F9AB40F566CB7279B9B71
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/nNL2sFgPLOmpQs-4xvdtxr_ohLU.roa
Signing time: Thu 06 Apr 2023 05:23:54 +0000
ROA not before: Thu 06 Apr 2023 05:23:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8831
IP address blocks: 62.108.64.0/22 maxlen: 24
62.108.64.0/21 maxlen: 21
62.108.68.0/22 maxlen: 24
62.108.72.0/22 maxlen: 22
62.108.88.0/21 maxlen: 21
62.108.88.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:55:05:78:75:61:6f:9a:b4:0f:56:6c:b7:27:9b:9b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Validity
Not Before: Apr 6 05:23:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cd2f6b0580f2ce9a942cfb8c6f76dc6bfe884b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:ee:11:e7:6b:19:12:2e:65:dc:79:8c:6b:
05:62:fe:d5:ba:26:32:9f:22:17:d5:7d:38:56:af:
5d:9e:6d:ea:6e:f7:90:30:5c:02:a1:12:d1:7e:b4:
fc:74:52:ff:58:c6:dd:bf:59:d0:1c:ea:c9:d6:6b:
02:bf:75:40:5f:d2:10:f6:ad:72:7a:71:16:5e:96:
f8:a1:d1:c0:e6:07:b9:a4:18:10:d2:0e:6d:32:a5:
46:77:55:6c:be:db:1f:93:3f:7f:9b:db:21:ea:df:
1d:7f:75:af:09:e3:b5:c4:25:8c:6f:60:9c:98:9d:
90:3b:a8:79:0c:f4:1f:74:fa:2f:e4:cf:36:95:a9:
51:19:ee:9f:ea:b3:bd:94:89:ea:72:7b:a1:7b:03:
8b:9e:4b:cd:26:3e:73:83:2b:30:60:41:7f:b8:5c:
56:41:6d:e2:1c:1e:13:98:88:24:3f:dc:63:4f:a0:
11:2e:e7:e1:13:26:fc:27:75:f3:a1:a7:0d:8c:19:
61:54:70:92:81:61:8c:1b:2b:fb:c7:f4:72:5e:93:
66:30:6d:b6:34:96:0b:0e:8d:c6:d8:ae:2f:63:9b:
7c:e7:73:91:a9:78:93:18:c2:e3:50:53:fd:45:1b:
ef:66:af:57:62:3e:2e:c4:94:e8:64:23:e8:0d:69:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D2:F6:B0:58:0F:2C:E9:A9:42:CF:B8:C6:F7:6D:C6:BF:E8:84:B5
X509v3 Authority Key Identifier:
keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/nNL2sFgPLOmpQs-4xvdtxr_ohLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.64.0-62.108.75.255
62.108.88.0/21
Signature Algorithm: sha256WithRSAEncryption
92:ce:c8:5c:25:b0:81:1c:b8:5d:59:3c:a3:44:61:00:f1:41:
65:bd:83:ed:e0:6e:7d:39:c7:a5:71:45:a4:b7:9c:dd:d4:cd:
cb:ec:38:5f:d8:04:e5:cd:08:ce:d1:ea:74:6f:a4:4c:97:d1:
b1:2a:22:18:f3:8d:d9:ff:a6:06:42:bd:8e:c2:07:18:6a:21:
4f:08:73:f6:0e:15:1e:a4:c6:18:c2:9c:7f:14:1c:e4:66:59:
c0:46:a9:f9:2e:41:59:30:e9:bf:83:2b:dd:b6:af:5a:6f:0e:
c8:ed:c7:23:e9:27:65:19:0b:0d:0a:aa:e9:c2:7c:38:ca:af:
d8:c6:87:24:7f:2b:e9:86:ef:b0:a2:63:ac:c2:3f:92:98:23:
1c:e8:93:75:c5:92:da:97:ec:a3:13:06:07:1a:91:50:9e:d4:
fa:51:5a:18:e5:50:71:a2:3e:f3:6e:96:3b:0b:82:20:16:a9:
0c:c3:43:99:25:7c:c1:c5:2c:00:56:89:c4:17:0f:79:ae:56:
d1:88:ec:9d:96:53:5a:e3:e3:65:d3:03:a4:ed:85:2a:5a:f9:
e3:ca:c6:c2:33:96:75:8b:30:5d:b5:89:81:ad:48:69:2c:80:
e4:4b:78:9c:71:e0:40:b4:6b:4c:3d:56:89:70:c1:68:a7:50:
00:4b:3e:a9
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYdVBXh1YW+atA9WbLcnm5txMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDc5ZDIwZDc2YTlkZGIwNzViOTRmOWYwMDA1MmFiMjE4
Mjc2YjcwHhcNMjMwNDA2MDUyMzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2QyZjZiMDU4MGYyY2U5YTk0MmNmYjhjNmY3NmRjNmJmZTg4NGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob/uEedrGRIuZdx5jGsFYv7VuiYy
nyIX1X04Vq9dnm3qbveQMFwCoRLRfrT8dFL/WMbdv1nQHOrJ1msCv3VAX9IQ9q1y
enEWXpb4odHA5ge5pBgQ0g5tMqVGd1Vsvtsfkz9/m9sh6t8df3WvCeO1xCWMb2Cc
mJ2QO6h5DPQfdPov5M82lalRGe6f6rO9lInqcnuhewOLnkvNJj5zgyswYEF/uFxW
QW3iHB4TmIgkP9xjT6ARLufhEyb8J3XzoacNjBlhVHCSgWGMGyv7x/RyXpNmMG22
NJYLDo3G2K4vY5t853ORqXiTGMLjUFP9RRvvZq9XYj4uxJToZCPoDWnNbwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJzS9rBYDyzpqULPuMb3bca/6IS1MB8GA1UdIwQY
MBaAFAjXnSDXap3bB1uU+fAAUqshgna3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWIt
NDhkYzg4YjU2MDIwLzEvbk5MMnNGZ1BMT21wUXMtNHh2ZHR4cl9vaExVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWItNDhkYzg4YjU2MDIw
LzEvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAY+bEAD
BAI+bEgDBAM+bFgwDQYJKoZIhvcNAQELBQADggEBAJLOyFwlsIEcuF1ZPKNEYQDx
QWW9g+3gbn05x6VxRaS3nN3UzcvsOF/YBOXNCM7R6nRvpEyX0bEqIhjzjdn/pgZC
vY7CBxhqIU8Ic/YOFR6kxhjCnH8UHORmWcBGqfkuQVkw6b+DK922r1pvDsjtxyPp
J2UZCw0KqunCfDjKr9jGhyR/K+mG77CiY6zCP5KYIxzok3XFktqX7KMTBgcakVCe
1PpRWhjlUHGiPvNuljsLgiAWqQzDQ5klfMHFLABWicQXD3muVtGI7J2WU1rj42XT
A6TthSpa+ePKxsIzlnWLMF21iYGtSGksgORLeJxx4EC0a0w9VolwwWinUABLPqk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:58 2023 by rpki-client on console-fra.rpki-client.org