Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/8hBtLbc9oZVngIFgI7LVGwd0v58.roa
File: 8hBtLbc9oZVngIFgI7LVGwd0v58.roa (raw, json)
Hash identifier: VcLQUR0Xv8oU+s2zqZ4Y8cu97RZUCBMTvstjuAZ/lNs=
Subject key identifier: F2:10:6D:2D:B7:3D:A1:95:67:80:81:60:23:B2:D5:1B:07:74:BF:9F
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0185719543B48E7AF47983F978FEB6ED422C
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/8hBtLbc9oZVngIFgI7LVGwd0v58.roa
Signing time: Mon 02 Jan 2023 08:24:45 +0000
ROA not before: Mon 02 Jan 2023 08:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 62.182.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:43:b4:8e:7a:f4:79:83:f9:78:fe:b6:ed:42:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jan 2 08:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2106d2db73da1956780816023b2d51b0774bf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:3c:86:2b:69:b5:05:6b:1f:d7:c7:f9:42:
09:ad:ed:c1:2d:ec:e1:20:1c:42:db:f0:b1:d3:8b:
50:08:b2:ad:ef:ae:f0:7e:79:e0:17:e8:ab:47:d4:
21:1b:f1:8a:4c:4a:ce:cd:9c:6b:c0:23:76:d2:fb:
62:d1:bf:f0:a7:58:db:9d:51:98:33:9b:6a:7a:b1:
46:5b:e1:ae:c3:7a:39:f3:b1:64:0b:2f:dc:2c:55:
62:ba:2b:d9:f4:83:25:71:fb:b0:03:4c:7e:70:80:
2e:47:79:df:d1:be:4c:fe:9d:78:fd:e9:f6:96:c0:
0b:1e:fe:a1:72:e8:ff:b5:17:7c:9a:50:0d:13:5e:
ea:9a:b8:57:4a:2f:bc:56:50:00:d2:3e:0e:8b:d3:
81:a5:94:8e:b6:52:ad:0a:a3:90:a4:84:4d:bf:ad:
72:98:75:b1:40:b7:f3:38:65:e3:fa:b5:54:aa:3b:
95:04:bb:cc:0c:8c:6d:3f:2a:73:40:b3:62:02:a7:
4d:ae:77:fe:02:c9:92:aa:27:f8:08:39:23:60:e0:
ec:01:f9:81:f0:c7:39:4e:b0:7d:8c:f3:35:87:07:
d1:14:ce:80:82:0a:c4:54:27:d3:26:0d:5d:38:50:
f3:c6:93:fd:94:8e:39:fe:53:2e:2c:a1:ad:cc:00:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:10:6D:2D:B7:3D:A1:95:67:80:81:60:23:B2:D5:1B:07:74:BF:9F
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/8hBtLbc9oZVngIFgI7LVGwd0v58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.172.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e1:db:10:e7:9c:ca:f7:2d:ed:06:d6:d9:07:e8:86:5f:e1:
f1:5f:62:d7:21:8a:44:62:b1:24:b0:9b:ae:11:a4:13:d2:60:
6a:07:18:af:a0:7b:fa:25:64:85:b0:a0:3d:70:0e:e4:df:71:
b4:43:30:94:49:a2:f5:e6:0b:90:e2:b9:e4:78:0c:78:07:89:
49:1a:13:2a:6d:c3:65:3d:1a:a3:92:42:10:8f:10:2b:98:fc:
ba:bb:01:46:57:90:98:7b:7d:0f:e9:eb:8e:31:a5:7c:9a:9f:
08:82:a7:be:60:45:81:34:55:48:89:a9:bf:16:1a:fc:fe:e4:
72:37:57:03:45:09:57:2c:9e:64:3b:19:b2:bb:d9:63:23:c2:
75:d2:5c:a0:e1:71:30:8e:8a:8f:8d:f4:2d:67:27:e0:59:5f:
04:b9:8a:d3:d0:d8:81:11:27:0a:17:8c:4b:05:d0:2a:87:69:
7d:d6:c2:2f:5c:20:cd:23:31:02:17:fc:0b:2f:1c:0f:df:d5:
9b:9c:a7:a8:d2:38:c2:14:dc:e7:08:d2:90:f8:95:d1:31:6f:
19:2e:ce:b5:0a:9e:b1:a8:cc:6c:1a:6b:a9:ad:83:92:c7:ae:
08:fc:c2:d3:39:96:69:d0:6e:bf:eb:56:0e:c3:05:41:2f:e8:
91:bf:80:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxlUO0jnr0eYP5eP627UIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNGVkOTQyZTVjNzQyZTc3YmZiOWJlYjk1NGY4NzI1MzRm
NTI4NDgwHhcNMjMwMTAyMDgyNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjEwNmQyZGI3M2RhMTk1Njc4MDgxNjAyM2IyZDUxYjA3NzRiZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6c8hitptQVrH9fH+UIJre3BLezh
IBxC2/Cx04tQCLKt767wfnngF+irR9QhG/GKTErOzZxrwCN20vti0b/wp1jbnVGY
M5tqerFGW+Guw3o587FkCy/cLFViuivZ9IMlcfuwA0x+cIAuR3nf0b5M/p14/en2
lsALHv6hcuj/tRd8mlANE17qmrhXSi+8VlAA0j4Oi9OBpZSOtlKtCqOQpIRNv61y
mHWxQLfzOGXj+rVUqjuVBLvMDIxtPypzQLNiAqdNrnf+AsmSqif4CDkjYODsAfmB
8Mc5TrB9jPM1hwfRFM6AggrEVCfTJg1dOFDzxpP9lI45/lMuLKGtzACq/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPIQbS23PaGVZ4CBYCOy1RsHdL+fMB8GA1UdIwQY
MBaAFDxO2ULlx0Lne/ub65VPhyU09ShIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2Et
NzczNDRiY2M5MTkxLzEvOGhCdExiYzlvWlZuZ0lGZ0k3TFZHd2QwdjU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2EtNzczNDRiY2M5MTkx
LzEvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPrasMA0G
CSqGSIb3DQEBCwUAA4IBAQCc4dsQ55zK9y3tBtbZB+iGX+HxX2LXIYpEYrEksJuu
EaQT0mBqBxivoHv6JWSFsKA9cA7k33G0QzCUSaL15guQ4rnkeAx4B4lJGhMqbcNl
PRqjkkIQjxArmPy6uwFGV5CYe30P6euOMaV8mp8Igqe+YEWBNFVIiam/Fhr8/uRy
N1cDRQlXLJ5kOxmyu9ljI8J10lyg4XEwjoqPjfQtZyfgWV8EuYrT0NiBEScKF4xL
BdAqh2l91sIvXCDNIzECF/wLLxwP39WbnKeo0jjCFNznCNKQ+JXRMW8ZLs61Cp6x
qMxsGmuprYOSx64I/MLTOZZp0G6/61YOwwVBL+iRv4Bk
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:54 2023 by rpki-client on console-ams.rpki-client.org