Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/1n4NbyFC5SxCD4Z8-97Aon-K8zA.roa
File: 1n4NbyFC5SxCD4Z8-97Aon-K8zA.roa (raw, json)
Hash identifier: ZVlT0zRzF4DDr9/DnLFCavYXzblXO9ftt5idxLUsohc=
Subject key identifier: D6:7E:0D:6F:21:42:E5:2C:42:0F:86:7C:FB:DE:C0:A2:7F:8A:F3:30
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0189D3BEB88DC2AB3747E30F3E0901C6360D
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/1n4NbyFC5SxCD4Z8-97Aon-K8zA.roa
Signing time: Tue 08 Aug 2023 06:03:58 +0000
ROA not before: Tue 08 Aug 2023 06:03:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.182.169.0/24 maxlen: 24
62.182.170.0/24 maxlen: 24
185.65.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:be:b8:8d:c2:ab:37:47:e3:0f:3e:09:01:c6:36:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Aug 8 06:03:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d67e0d6f2142e52c420f867cfbdec0a27f8af330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:49:3d:ec:47:18:a2:d9:91:4d:ea:1e:d5:eb:
b9:02:90:e4:9a:e0:68:77:aa:69:e7:15:63:ba:35:
65:d8:0c:4c:66:a1:e6:f5:23:4b:6a:2c:d2:26:04:
76:5a:a8:7b:54:1c:89:f1:52:db:dd:e1:fb:d0:e1:
69:f6:51:bb:60:d3:ce:75:c8:18:04:3e:e3:6d:83:
2b:60:6e:22:b6:52:c9:97:66:57:be:67:98:4a:e1:
f1:65:a3:73:24:c6:d5:1b:0e:6a:f3:3e:19:08:79:
5f:cb:ac:d3:0f:73:26:d0:d3:a0:a5:78:81:06:0b:
8e:ea:09:77:cf:01:03:b7:ee:62:1d:ab:9e:c5:9e:
71:b4:f5:be:b8:47:d3:07:6e:19:c8:f5:b0:4b:bc:
d7:5d:3d:e4:9a:89:ff:92:2d:a1:95:35:3a:1d:f4:
d9:76:df:49:a4:e6:a4:37:81:41:f4:64:67:a6:ad:
ed:a7:75:8b:d7:16:a5:c6:60:38:d8:a2:46:d6:53:
0c:70:ab:be:2e:be:64:b9:a4:32:96:12:9d:25:75:
23:8f:94:b1:ad:82:bb:65:01:92:9b:e8:96:61:ca:
36:38:ca:39:52:c7:65:88:38:00:5f:75:e6:10:b5:
14:02:cd:fe:56:67:8c:ea:d8:d6:2f:ea:ad:ab:83:
64:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7E:0D:6F:21:42:E5:2C:42:0F:86:7C:FB:DE:C0:A2:7F:8A:F3:30
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/1n4NbyFC5SxCD4Z8-97Aon-K8zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.169.0-62.182.170.255
185.65.68.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d9:0b:1a:69:21:10:a5:db:a0:f8:19:b8:ec:da:0c:3d:af:
ea:56:14:f3:db:c2:aa:c3:42:eb:05:49:6d:42:7e:07:53:6a:
d0:23:6a:5e:1d:6a:a3:dc:de:5a:46:65:32:02:40:ae:03:fd:
75:e6:eb:53:a0:c1:90:51:f0:ae:a4:13:cc:1e:47:6f:02:17:
4e:c7:ac:ef:60:e3:58:6d:de:76:47:7d:76:6d:c5:09:a0:78:
78:1f:ab:c7:4c:b2:0b:3f:7d:2a:82:bc:62:a0:37:3c:a8:a3:
c6:d7:d0:ca:2e:0a:22:d2:2e:f1:00:c9:1e:54:2e:33:3e:4a:
77:4e:66:b1:9a:d3:ca:f4:ee:80:a1:29:1f:28:c0:ff:6f:10:
8b:ac:f9:ad:95:81:92:c1:b3:e6:18:36:9e:b9:87:f0:5f:53:
27:7e:e7:e0:3d:28:3c:35:e1:b3:2e:44:86:82:cf:df:2d:9b:
2f:c3:4f:af:05:1b:cc:4e:88:5b:ef:88:ad:d1:35:eb:ae:ca:
dc:9c:ce:08:0e:3f:df:04:05:f3:47:51:07:2d:1c:70:a9:f1:
0e:49:65:83:35:59:d6:d0:8c:de:d7:39:01:7e:bf:97:15:68:
f6:9c:4a:47:de:a2:a5:2a:f7:3f:5c:4e:c0:2b:20:67:73:de:
9c:30:c0:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 9 15:52:28 2023 by rpki-client on console-fra.rpki-client.org