Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/0vhrf5IepX7iBubtLlRjRHJ797k.roa
File: 0vhrf5IepX7iBubtLlRjRHJ797k.roa (raw, json)
Hash identifier: okObJvra7bSKmTcicOV0IQD/Ynef8DEzXrY2O8fCCJY=
Subject key identifier: D2:F8:6B:7F:92:1E:A5:7E:E2:06:E6:ED:2E:54:63:44:72:7B:F7:B9
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 018807BF2C943C564532EDCE6658CC132981
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/0vhrf5IepX7iBubtLlRjRHJ797k.roa
Signing time: Wed 10 May 2023 22:19:09 +0000
ROA not before: Wed 10 May 2023 22:19:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.182.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:07:bf:2c:94:3c:56:45:32:ed:ce:66:58:cc:13:29:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: May 10 22:19:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2f86b7f921ea57ee206e6ed2e546344727bf7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:83:40:7e:50:d8:25:5b:5d:2d:b7:c6:6c:
fd:46:e4:93:ce:ff:71:97:34:bc:e6:58:ad:5c:7e:
9b:2a:5f:70:bc:bf:6f:e3:7b:9b:8d:44:39:d3:f2:
57:93:e5:da:0f:12:f9:df:a2:3d:e5:42:23:3b:bb:
a9:a9:0c:ed:b6:7c:2d:ca:ce:be:1e:6b:a2:14:41:
b8:d7:51:f7:c7:63:9b:cf:04:92:f6:11:74:15:e1:
2e:d5:fe:f5:81:3b:f4:d5:5a:99:ed:58:52:16:c1:
66:11:70:5f:d3:15:98:f0:bb:13:f4:90:af:dd:76:
b9:dd:21:72:3b:f9:8d:a0:ba:c0:93:b2:3d:e3:ce:
4a:c5:c2:ff:0d:c8:e4:dc:14:bc:7b:71:42:16:f3:
f2:ce:92:78:8e:6b:e5:4c:0c:a4:ff:1c:9d:14:39:
5c:b0:29:b0:96:41:14:dc:68:22:77:e2:72:ee:06:
c1:10:4f:ca:ec:42:0a:49:06:92:1c:f7:ee:ec:02:
f5:3a:c1:27:d1:76:2c:8e:f8:98:9e:0e:38:ff:a0:
ee:82:5b:45:bc:71:d0:43:6b:04:6c:fc:ed:f5:4e:
16:c9:f4:f4:e8:c1:88:e0:c2:39:dc:2f:d3:1a:6f:
d2:29:a9:56:fc:ec:27:45:86:bc:dd:df:df:e2:71:
d1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F8:6B:7F:92:1E:A5:7E:E2:06:E6:ED:2E:54:63:44:72:7B:F7:B9
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/0vhrf5IepX7iBubtLlRjRHJ797k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.170.0/24
Signature Algorithm: sha256WithRSAEncryption
38:50:14:e2:8b:9e:a3:4d:b0:0b:33:0d:99:2d:7d:de:42:ef:
41:4f:d1:8f:1f:c7:92:42:c2:b3:28:92:21:14:3d:e9:a9:1f:
38:3f:59:07:32:21:64:ea:e4:d4:c8:34:aa:f7:fd:4e:a7:a5:
a2:a5:9b:55:4b:53:89:dc:65:9f:57:ef:ad:24:6a:3b:26:f6:
89:50:0a:cb:34:48:7a:cf:64:b8:19:f9:8c:1a:0d:b8:71:ec:
6b:0e:48:67:6c:70:df:48:fa:bd:aa:cd:e7:3f:14:28:bf:23:
63:20:cc:a3:1a:8d:9e:a2:a4:26:a4:99:a5:b6:8b:14:d8:2d:
ef:e7:26:8c:91:8f:46:c6:1c:86:75:c4:c0:09:ae:26:1e:9d:
8d:63:8e:6a:6a:f3:9d:1d:2a:28:cf:b7:5f:e3:5f:ff:6a:58:
62:5a:0b:cc:45:96:de:c0:fe:88:0e:6d:dc:a0:89:9d:3f:40:
e8:fd:b2:cc:bb:c7:5d:01:53:f3:fa:26:06:4b:bf:e5:29:90:
1c:5d:28:52:71:ba:42:ab:fa:53:da:2e:d6:6e:4a:77:0d:ff:
2b:91:7f:3f:74:bf:2a:08:65:45:24:0d:24:a2:04:6e:4f:a2:
20:96:c6:32:83:f6:a8:b0:6e:e6:b8:0b:90:a8:71:e9:92:7e:
f5:ea:74:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:12 2023 by rpki-client on console-fra.rpki-client.org