Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/CPXwj5xkiGJ3HG2EE1iE-LCzx8Q.roa
File: CPXwj5xkiGJ3HG2EE1iE-LCzx8Q.roa (raw, json)
Hash identifier: bUJVdjZB1ln6cZo4CpXWimM4DEqSKchg7qcQ6IatfC4=
Subject key identifier: 08:F5:F0:8F:9C:64:88:62:77:1C:6D:84:13:58:84:F8:B0:B3:C7:C4
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 01889F3775AB4E8F568B772ABA0536DCA084
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/CPXwj5xkiGJ3HG2EE1iE-LCzx8Q.roa
Signing time: Fri 09 Jun 2023 08:13:11 +0000
ROA not before: Fri 09 Jun 2023 08:13:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210576
IP address blocks: 62.182.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:37:75:ab:4e:8f:56:8b:77:2a:ba:05:36:dc:a0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jun 9 08:13:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08f5f08f9c648862771c6d84135884f8b0b3c7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:28:7b:20:36:e1:81:be:29:7a:6f:2d:73:
e8:80:e9:30:a3:3e:38:d7:b8:25:00:43:a4:a1:a2:
d4:11:ef:ae:64:c6:d9:d8:3e:0b:0e:dc:8c:d7:8a:
90:a9:7a:76:60:ff:5e:6f:f2:60:3e:f7:d1:78:4a:
2d:86:12:17:43:37:39:0b:53:5e:34:e4:00:fd:5c:
90:ae:15:f4:45:0e:70:70:3e:ab:e0:f3:19:1f:a8:
d6:12:50:5b:ee:cb:cc:2e:c3:34:44:3b:79:42:d8:
1b:42:15:e8:7b:1b:b7:a8:b8:97:bb:ef:5d:34:ac:
b1:87:dc:65:c1:39:83:91:78:ec:e9:34:2b:93:e7:
29:45:90:82:41:7a:65:e6:ca:6d:57:d3:9d:5e:0c:
6a:7b:01:5c:44:c5:a0:b2:26:ae:f4:99:72:cb:7b:
90:c4:77:50:ea:8c:24:10:e1:a9:32:95:4f:23:84:
16:8d:4b:91:04:d5:4c:12:d8:27:45:78:5b:d9:70:
29:aa:ce:25:58:04:16:21:6e:1a:bc:df:12:c0:db:
99:94:a4:99:46:b9:c4:10:c9:b6:dc:d3:0a:1d:77:
10:a9:d3:ee:35:5d:8c:a3:d5:57:71:0a:56:18:3d:
e0:0e:3e:9e:84:b0:31:a7:cb:c0:88:30:ef:da:b1:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F5:F0:8F:9C:64:88:62:77:1C:6D:84:13:58:84:F8:B0:B3:C7:C4
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/CPXwj5xkiGJ3HG2EE1iE-LCzx8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.171.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:9f:87:27:66:cf:c0:02:e1:cc:f5:40:c0:b7:a9:a9:e8:b0:
a4:d9:d8:a7:44:74:4f:74:b3:3d:ae:74:99:5e:15:df:47:2a:
7e:8f:79:58:7e:25:79:8b:26:e2:79:e9:46:ba:50:23:8b:36:
11:1f:cb:e3:7d:3c:dd:d6:21:3b:34:c8:be:66:d7:cb:a0:cf:
ee:75:cd:68:b8:5f:9b:0d:ba:5f:2d:84:d5:f9:13:a5:c4:0e:
6a:de:2d:2f:69:04:18:46:5a:3e:b3:93:a1:d3:21:1d:4b:1d:
a9:77:bc:4f:d0:2e:c8:23:36:cf:d4:f5:35:e1:9f:51:52:cd:
b2:0f:c9:2b:92:2e:f1:fd:0b:6b:67:c9:59:83:0b:90:18:83:
8f:72:83:dd:a2:4c:9c:97:e2:c2:cb:95:bd:3c:49:19:7f:b7:
96:85:18:ce:6b:c0:51:be:dd:e3:20:4e:3b:22:c3:5b:0a:4e:
68:c6:38:60:47:b5:d4:85:bb:cf:38:17:75:0f:2b:d6:33:e8:
a6:6e:f1:d1:8a:bc:a8:22:3a:6e:f2:6e:b1:f6:aa:ab:0f:de:
37:85:82:ac:ac:c4:11:12:90:4c:54:86:64:c5:6a:52:1d:a4:
7c:89:e6:67:87:47:b4:25:9c:e3:c1:58:c2:8c:f3:1e:38:dc:
63:5f:3b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:12 2023 by rpki-client on console-fra.rpki-client.org