Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/uxblst78qJnitBh_esmvkm_jpkM.roa
File: uxblst78qJnitBh_esmvkm_jpkM.roa (raw, json)
Hash identifier: MAWHg/ZoTnrsD5plrKtdtT9zC+k5s0p/HaQBiQf6BWc=
Subject key identifier: BB:16:E5:B2:DE:FC:A8:99:E2:B4:18:7F:7A:C9:AF:92:6F:E3:A6:43
Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial: 01870E81E5C74221807E2D56AD608BC8BE51
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/uxblst78qJnitBh_esmvkm_jpkM.roa
Signing time: Thu 23 Mar 2023 12:46:46 +0000
ROA not before: Thu 23 Mar 2023 12:46:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8831
IP address blocks: 62.108.64.0/22 maxlen: 22
62.108.72.0/22 maxlen: 22
62.108.88.0/21 maxlen: 21
62.108.88.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:81:e5:c7:42:21:80:7e:2d:56:ad:60:8b:c8:be:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Validity
Not Before: Mar 23 12:46:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb16e5b2defca899e2b4187f7ac9af926fe3a643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:f8:ca:10:f3:b9:45:f1:3d:c0:38:f1:83:
cd:dc:49:6d:18:3d:15:16:0e:d4:6e:30:26:91:85:
f9:0c:cf:61:06:45:62:fa:23:9b:21:8f:34:60:ae:
5b:71:20:67:b2:f5:fc:f4:83:41:24:f1:b8:67:c8:
4f:4b:72:dc:45:5e:60:2c:c9:fe:d6:58:51:2c:ea:
2c:35:5d:85:4f:c7:cc:14:43:80:27:85:26:ff:ee:
d4:c5:11:9c:a4:b5:98:e5:f7:4c:df:61:80:e6:f7:
62:3e:7a:ca:2c:a6:7d:5f:d2:5c:4e:bd:28:d8:db:
46:f2:a0:d7:5e:c6:26:ac:e3:02:c3:e5:81:35:2e:
6f:4e:ba:a7:ab:e7:b9:06:e7:f8:d4:f9:32:9c:3c:
dd:1e:9f:66:f2:da:a4:b2:fa:3e:ae:7e:15:31:35:
28:a9:61:4c:ae:5d:88:1b:51:27:40:7e:0d:8b:c4:
72:ac:0a:43:0d:03:04:01:bb:67:fa:25:f2:23:3e:
72:50:3f:ba:78:57:e0:cd:b2:b6:51:38:4c:28:ac:
ec:07:22:97:f8:25:7e:94:d5:7b:e1:e4:67:24:49:
d4:00:d9:36:0f:1f:5c:ce:2e:43:a9:9a:e5:03:bb:
6d:07:8c:73:b7:fd:f4:6a:aa:72:a7:11:73:00:af:
50:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:16:E5:B2:DE:FC:A8:99:E2:B4:18:7F:7A:C9:AF:92:6F:E3:A6:43
X509v3 Authority Key Identifier:
keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/uxblst78qJnitBh_esmvkm_jpkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.64.0/22
62.108.72.0/22
62.108.88.0/21
Signature Algorithm: sha256WithRSAEncryption
28:b3:16:a1:5a:be:61:13:ae:cf:09:dc:09:c2:5e:30:9b:11:
23:25:18:ac:54:aa:01:c3:a8:d7:69:d4:3c:55:9e:c8:33:9e:
d3:a9:b6:0c:77:67:a0:57:cd:b2:16:8f:46:6c:59:c6:44:9c:
23:cb:10:cb:3a:cf:b9:b1:8b:94:09:93:68:c5:41:e3:40:17:
48:33:c0:6a:6a:0c:47:d4:02:5a:87:90:88:15:14:3e:07:90:
14:a7:66:3e:38:9a:f6:fa:1e:f0:e3:2b:5a:67:4b:ea:9c:4a:
b9:46:eb:5a:1b:9f:22:25:5f:23:9a:1d:fe:f1:b2:01:1b:ac:
c7:64:cb:63:1b:52:cf:2f:61:dc:09:47:06:ea:35:e0:83:c5:
13:71:d1:33:17:cf:cb:5e:2a:3e:96:7c:8c:53:e0:97:93:aa:
a5:2d:fc:67:55:d1:27:42:f3:72:e8:b0:5d:5a:5e:21:a3:60:
1c:c6:c5:2e:48:5e:8e:11:63:57:19:31:67:b1:b6:aa:78:ee:
85:07:06:dc:7b:66:ab:69:b8:4a:c3:3b:ef:f5:de:bc:14:16:
6f:96:9c:eb:b1:c0:97:cb:39:ba:7a:e4:1d:80:4a:6c:36:9e:
70:40:82:fa:72:99:4e:e6:20:b7:88:f2:26:5d:d4:e0:4b:80:
e2:64:8a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:58 2023 by rpki-client on console-fra.rpki-client.org