Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/XaOWcFce1mWiJbnhYOxftibYjIo.roa
File: XaOWcFce1mWiJbnhYOxftibYjIo.roa (raw, json)
Hash identifier: oHZIlMTq+KpeaBNq7DOIN/4zKXEczI++n/Eiwbha7uk=
Subject key identifier: 5D:A3:96:70:57:1E:D6:65:A2:25:B9:E1:60:EC:5F:B6:26:D8:8C:8A
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0188F6B943F2D05069129761989AC6E5AF84
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/XaOWcFce1mWiJbnhYOxftibYjIo.roa
Signing time: Mon 26 Jun 2023 08:01:56 +0000
ROA not before: Mon 26 Jun 2023 08:01:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.182.170.0/24 maxlen: 24
185.65.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:b9:43:f2:d0:50:69:12:97:61:98:9a:c6:e5:af:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jun 26 08:01:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5da39670571ed665a225b9e160ec5fb626d88c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e3:6f:1a:31:4c:cb:ad:28:ac:4a:d2:00:2f:
a9:19:38:7f:44:b5:bd:93:20:f1:a2:4e:70:46:e6:
c6:04:5f:c6:84:a3:1f:54:7a:60:49:82:65:4e:23:
04:7d:c2:77:d3:09:c4:59:47:ac:c7:a0:78:28:19:
da:9a:af:c6:b5:37:d6:2d:71:2b:ba:34:ff:9a:77:
3b:6e:a5:67:a3:81:e3:85:22:b9:bc:e8:44:91:67:
a7:76:2a:64:43:1d:a0:60:45:75:da:6b:e6:6f:f7:
ee:51:f3:34:2e:9f:b6:9f:bf:63:bf:b4:3e:9d:c9:
9a:18:ff:27:c3:6e:f7:5e:ee:d6:f4:96:69:0e:9f:
ff:be:ed:58:f7:61:ea:60:b5:71:6d:7d:fa:2d:66:
30:66:4f:a6:5f:f7:47:11:4c:6c:0d:43:c6:9c:5d:
78:64:f3:5b:d8:51:07:b5:96:fd:92:a2:ea:5e:6b:
44:d6:1b:18:55:e3:70:d3:e5:b2:6a:fb:09:71:48:
6a:1b:cd:bf:fc:4a:a3:de:c5:b5:a9:ec:6e:eb:c8:
47:88:90:0e:f1:05:fb:1d:fa:ec:25:4f:6a:ef:17:
ec:04:be:90:7f:2f:a8:cf:0a:69:b5:ca:89:cc:03:
be:54:c2:a9:3f:dc:2c:8d:c4:60:84:56:87:67:8f:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A3:96:70:57:1E:D6:65:A2:25:B9:E1:60:EC:5F:B6:26:D8:8C:8A
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/XaOWcFce1mWiJbnhYOxftibYjIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.170.0/24
185.65.68.0/24
Signature Algorithm: sha256WithRSAEncryption
08:fc:af:97:70:a1:15:f1:94:d4:12:64:10:11:47:9f:65:69:
1d:45:fd:09:ec:8f:9c:06:07:a8:ae:3f:e4:1c:8b:8e:59:5f:
f8:e2:74:2f:5e:e7:86:a9:28:41:a1:49:2b:ee:64:32:84:ba:
f2:14:2a:b3:b0:87:94:a8:66:b2:28:27:a2:f7:de:20:f9:62:
44:04:f2:51:57:a8:64:e7:3a:45:58:cf:ca:6f:d9:57:27:a9:
4c:be:5e:d2:12:5b:d1:cf:5e:d9:01:2a:62:2b:95:d7:69:c1:
73:9f:98:72:8a:c7:98:2f:f5:0f:a7:c2:33:b0:dc:e4:ac:b2:
89:fc:67:3b:5b:8f:c5:74:83:ff:f0:21:f7:01:dc:d4:e8:b3:
8a:7f:21:b9:e0:a4:4d:6c:1d:31:57:b9:42:2a:2c:ee:06:7d:
52:61:4d:ef:ac:ef:1a:02:3b:2c:3a:a8:d7:cf:a8:33:c2:35:
d8:06:33:17:88:a4:ba:16:d6:d5:e1:76:a0:3e:b2:23:16:f5:
d0:7f:8a:ff:9d:f8:51:79:1a:ca:31:f8:5e:94:85:90:7b:a5:
1b:20:6c:b4:77:e6:ff:74:7d:dd:95:a9:e9:31:b5:42:10:cb:
16:56:f1:15:69:da:fb:2d:e4:ee:0e:70:13:8e:69:2b:53:ce:
7a:87:12:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 20:18:22 2023 by rpki-client on console-fra.rpki-client.org