Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/cJTBrYlHlJHjzCtSKIvl44UXjq0.roa
File: cJTBrYlHlJHjzCtSKIvl44UXjq0.roa (raw, json)
Hash identifier: 75MT4QJL71KVfbJ/BmA+q9TLjnOKr2KhIcfz1kfjWUc=
Subject key identifier: 70:94:C1:AD:89:47:94:91:E3:CC:2B:52:28:8B:E5:E3:85:17:8E:AD
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0189FE22DC47B0A063F65D13D26EF21C3BB1
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/cJTBrYlHlJHjzCtSKIvl44UXjq0.roa
Signing time: Wed 16 Aug 2023 11:37:24 +0000
ROA not before: Wed 16 Aug 2023 11:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 62.182.172.0/24 maxlen: 24
62.182.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:22:dc:47:b0:a0:63:f6:5d:13:d2:6e:f2:1c:3b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Aug 16 11:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7094c1ad89479491e3cc2b52288be5e385178ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ce:6b:f4:97:b7:09:ed:86:68:ae:31:95:d1:
e0:b1:b1:59:92:c2:d7:18:65:a7:74:73:f8:6e:57:
32:34:de:44:c5:55:16:1b:81:34:b5:af:02:9b:b9:
0f:12:8f:34:33:f4:d7:6d:f0:27:7e:69:61:96:6c:
25:76:5f:82:3b:4a:2e:20:df:83:2f:a3:6a:df:f6:
04:4e:f1:e4:41:7e:d1:9b:13:10:b6:e1:d3:63:39:
91:2a:78:8d:f2:ef:74:fd:ad:e6:78:20:9b:6a:08:
1a:19:1d:dd:ce:51:54:1a:78:de:86:fc:c9:76:a2:
66:17:eb:26:f8:68:d0:8b:46:66:73:fe:2a:2b:c2:
c5:37:ea:9a:73:7f:31:52:2b:59:20:12:8a:37:fc:
98:08:ed:8b:b1:f2:83:74:12:63:47:5d:1f:d1:c5:
a2:c7:1c:32:c0:41:3e:5e:16:58:be:2c:df:35:bb:
e3:d0:d4:65:29:c0:5e:0f:45:67:6c:b6:ac:dc:9a:
65:76:8f:82:ce:8f:48:6c:a9:7a:e6:26:14:e5:51:
17:86:70:16:e5:b5:d5:d5:00:5e:0e:e5:e0:fe:99:
34:61:f2:e9:fa:e8:36:90:8b:91:81:cb:17:f0:99:
27:70:ca:b4:25:0a:fb:b2:70:91:7f:ec:f8:36:ab:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:94:C1:AD:89:47:94:91:E3:CC:2B:52:28:8B:E5:E3:85:17:8E:AD
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/cJTBrYlHlJHjzCtSKIvl44UXjq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.172.0/24
62.182.175.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:95:ee:3e:f0:d7:36:9f:0a:9b:ac:7e:83:1c:35:42:37:52:
d4:e1:70:68:fe:78:20:ab:3e:16:c2:92:0e:e0:3b:36:65:2b:
ee:eb:43:a8:aa:84:f9:ef:49:b5:7d:20:fa:7d:bf:53:7f:e3:
cf:da:d7:db:e1:44:5c:f8:43:e0:02:92:e9:9a:64:dd:23:35:
a1:90:0a:5c:b3:07:96:04:62:5c:19:c9:63:37:f0:42:cd:4e:
c3:bd:68:bd:b0:a2:13:81:6e:6c:71:c9:7f:88:f8:19:bd:bc:
b1:17:b7:2e:6b:59:57:36:92:ba:4f:0e:94:87:a4:4e:ef:b6:
e3:5f:59:e8:46:c2:5f:85:33:b3:2d:2c:39:36:5b:b3:f9:eb:
11:26:ed:f3:2c:8a:4d:64:0c:3b:12:bb:1e:2f:30:0a:b4:3a:
ec:70:18:6f:3e:7a:80:cc:3f:b2:ef:46:0e:d4:54:80:82:b5:
70:e8:76:5e:46:39:0f:81:44:aa:9a:fc:0a:3b:c4:34:33:03:
e0:18:e4:f2:aa:a1:c4:81:4c:fc:25:d6:c2:9a:b9:53:70:47:
3e:1e:57:db:f8:5f:40:34:66:9a:04:54:a1:a5:94:6c:f5:0d:
77:e5:2d:a1:b9:c8:c4:f1:f6:c0:f3:40:9f:c8:e2:d2:58:5a:
21:2a:53:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 06:38:34 2023 by rpki-client on console-ams.rpki-client.org