Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/X1wfKMHjeNgxM7dUv-R3VXMgUbg.roa
File: X1wfKMHjeNgxM7dUv-R3VXMgUbg.roa (raw, json)
Hash identifier: byu2366397qS1s8eIqzdbPexplkfDA8+DOfIxxRndGI=
Subject key identifier: 5F:5C:1F:28:C1:E3:78:D8:31:33:B7:54:BF:E4:77:55:73:20:51:B8
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 018AB2B984F29B67D8D304096AF03AEF72C0
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/X1wfKMHjeNgxM7dUv-R3VXMgUbg.roa
Signing time: Wed 20 Sep 2023 13:13:37 +0000
ROA not before: Wed 20 Sep 2023 13:13:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400866
IP address blocks: 62.182.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b2:b9:84:f2:9b:67:d8:d3:04:09:6a:f0:3a:ef:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Sep 20 13:13:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f5c1f28c1e378d83133b754bfe47755732051b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:54:17:80:35:fb:29:aa:8c:36:bc:8a:a3:5a:
47:5f:86:15:23:75:d2:63:49:94:45:48:78:a8:38:
d9:63:c6:8a:d1:60:3a:ae:2d:50:2c:25:07:43:9e:
e5:be:71:10:8f:b8:c9:d0:cc:c1:a6:2e:dd:15:72:
e2:c3:8e:b8:6e:17:81:52:1f:0b:32:12:a3:d2:5a:
a6:6b:e6:74:4b:bb:9a:ca:7d:3b:95:42:7d:d2:c1:
05:ba:93:4f:47:a9:fd:d0:ac:5e:9e:b0:59:10:74:
40:65:11:54:dc:3f:ad:0d:e2:5b:48:b0:b9:af:72:
ab:b7:43:64:2c:e9:29:6c:de:df:ee:f7:b2:9f:5e:
8a:9c:0d:27:ee:f9:f3:82:65:dc:db:1d:15:bd:16:
c5:b4:fe:74:b6:87:d3:bd:f4:a9:94:24:5f:21:6e:
0e:df:54:00:cf:0d:6b:51:ac:83:b1:69:5e:cb:1b:
94:22:9f:d0:ea:40:1f:11:34:47:09:8b:55:e6:7f:
54:9c:65:91:44:5d:42:9a:b6:b7:aa:2f:f3:ab:0b:
75:06:cc:dd:d2:05:fa:d0:ec:2e:c9:48:94:95:8f:
9a:5b:a4:a6:d5:e5:6c:bc:f8:15:8d:db:65:1a:88:
c6:64:21:a3:70:6d:40:bd:2e:76:1c:74:ff:b2:08:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5C:1F:28:C1:E3:78:D8:31:33:B7:54:BF:E4:77:55:73:20:51:B8
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/X1wfKMHjeNgxM7dUv-R3VXMgUbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.174.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:da:81:bb:8e:a8:ee:9e:43:74:bd:11:48:8c:8d:e6:a0:8a:
9d:82:2b:f1:33:e3:7e:5f:9b:d3:0e:ab:bb:55:28:2d:4c:c1:
84:08:02:07:0d:69:73:ee:e7:89:5f:2e:75:12:cc:20:fa:44:
50:81:1e:bd:9e:ee:bb:dc:b3:dc:cc:1d:56:7c:e7:16:55:be:
9b:3c:1d:c7:36:0f:e3:87:1b:f7:46:a1:27:21:3b:a7:f3:ad:
c3:85:23:ce:aa:31:09:84:af:4d:7e:47:61:13:39:25:14:f0:
9a:60:76:88:72:d5:4b:0f:51:7c:b2:0d:7a:7a:7c:7f:41:4a:
82:cb:89:90:87:76:c4:2d:17:8b:78:6b:89:af:00:ab:86:e3:
d8:5f:fe:2e:09:35:0d:e7:d9:7b:3b:9e:00:58:c3:36:16:04:
98:d2:d2:17:71:e5:e8:b0:b2:10:7c:2b:a7:ed:fe:17:7b:47:
8e:1c:52:7b:c1:d9:1e:9b:1e:81:68:ca:bd:e1:89:6e:3c:68:
79:4f:24:d1:8d:cb:b4:6a:1d:ad:24:c2:88:02:31:76:e3:44:
ce:dd:a8:2b:81:4f:b1:85:35:45:49:e0:3a:1f:a3:9c:a0:68:
62:9e:ef:47:05:87:0a:f3:55:8c:3b:52:d9:d2:f9:bc:57:16:
54:3b:3d:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqyuYTym2fY0wQJavA673LAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNGVkOTQyZTVjNzQyZTc3YmZiOWJlYjk1NGY4NzI1MzRm
NTI4NDgwHhcNMjMwOTIwMTMxMzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjVjMWYyOGMxZTM3OGQ4MzEzM2I3NTRiZmU0Nzc1NTczMjA1MWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklQXgDX7KaqMNryKo1pHX4YVI3XS
Y0mURUh4qDjZY8aK0WA6ri1QLCUHQ57lvnEQj7jJ0MzBpi7dFXLiw464bheBUh8L
MhKj0lqma+Z0S7uayn07lUJ90sEFupNPR6n90KxenrBZEHRAZRFU3D+tDeJbSLC5
r3Krt0NkLOkpbN7f7veyn16KnA0n7vnzgmXc2x0VvRbFtP50tofTvfSplCRfIW4O
31QAzw1rUayDsWleyxuUIp/Q6kAfETRHCYtV5n9UnGWRRF1Cmra3qi/zqwt1Bszd
0gX60OwuyUiUlY+aW6Sm1eVsvPgVjdtlGojGZCGjcG1AvS52HHT/sggDxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF9cHyjB43jYMTO3VL/kd1VzIFG4MB8GA1UdIwQY
MBaAFDxO2ULlx0Lne/ub65VPhyU09ShIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2Et
NzczNDRiY2M5MTkxLzEvWDF3ZktNSGplTmd4TTdkVXYtUjNWWE1nVWJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2EtNzczNDRiY2M5MTkx
LzEvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPrauMA0G
CSqGSIb3DQEBCwUAA4IBAQCu2oG7jqjunkN0vRFIjI3moIqdgivxM+N+X5vTDqu7
VSgtTMGECAIHDWlz7ueJXy51Eswg+kRQgR69nu673LPczB1WfOcWVb6bPB3HNg/j
hxv3RqEnITun863DhSPOqjEJhK9NfkdhEzklFPCaYHaIctVLD1F8sg16enx/QUqC
y4mQh3bELReLeGuJrwCrhuPYX/4uCTUN59l7O54AWMM2FgSY0tIXceXosLIQfCun
7f4Xe0eOHFJ7wdkemx6BaMq94YluPGh5TyTRjcu0ah2tJMKIAjF240TO3agrgU+x
hTVFSeA6H6OcoGhinu9HBYcK81WMO1LZ0vm8VxZUOz0M
-----END CERTIFICATE-----
Generated at Mon Nov 20 14:02:18 2023 by rpki-client on console-ams.rpki-client.org