Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/eXQePIwjhx79ilvn_Sayap4uRkQ.roa
File: eXQePIwjhx79ilvn_Sayap4uRkQ.roa (raw, json)
Hash identifier: zKAqKXWXrXJCxklee0IvBW1iZhXzuPDDRu0QRnkIwrc=
Subject key identifier: 79:74:1E:3C:8C:23:87:1E:FD:8A:5B:E7:FD:26:B2:6A:9E:2E:46:44
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0188B005B966B21CAA63C8AA08DAE09B966E
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/eXQePIwjhx79ilvn_Sayap4uRkQ.roa
Signing time: Mon 12 Jun 2023 14:32:25 +0000
ROA not before: Mon 12 Jun 2023 14:32:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.182.170.0/24 maxlen: 24
194.15.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:05:b9:66:b2:1c:aa:63:c8:aa:08:da:e0:9b:96:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jun 12 14:32:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79741e3c8c23871efd8a5be7fd26b26a9e2e4644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5a:a6:32:cb:66:be:f8:5d:19:99:cb:af:06:
25:68:f1:df:06:d1:c3:43:b7:8e:e4:27:e1:00:13:
d7:ab:d0:54:4f:4e:88:12:9d:dc:37:17:a3:d1:61:
77:06:dd:39:0f:14:dc:e9:68:31:d4:ab:e4:5d:ad:
99:a9:6c:96:42:8e:f7:78:0d:1e:c1:25:b9:ad:0e:
7d:a5:59:1a:4b:af:29:8a:d9:77:83:65:6e:1e:58:
9b:3c:52:f7:70:b5:41:de:08:a9:fb:3f:9e:13:af:
21:9a:55:5e:65:e4:1b:87:35:52:bb:06:d7:27:89:
72:05:c4:bb:a1:37:1b:b3:6d:31:53:7f:cc:6e:e5:
97:e1:5d:19:ad:7d:a1:e4:2f:49:60:05:f2:f6:23:
b2:ca:a6:85:dd:e4:36:5f:c3:ab:f2:6a:fa:a8:1e:
c2:52:05:62:7b:88:38:23:3f:bf:f5:b5:5f:0d:d4:
26:d5:3b:30:6e:5c:93:1a:c7:5f:f4:1c:8f:bd:68:
b6:b6:a8:e0:6c:e3:16:42:ae:34:e0:54:55:ef:65:
c1:e5:96:0a:81:eb:67:1b:cc:cb:a9:bc:ee:70:46:
29:00:f6:5c:db:9a:79:97:50:2a:00:d3:1d:dc:2b:
88:56:41:2b:db:90:1a:9b:81:ef:6b:06:dd:e5:4e:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:74:1E:3C:8C:23:87:1E:FD:8A:5B:E7:FD:26:B2:6A:9E:2E:46:44
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/eXQePIwjhx79ilvn_Sayap4uRkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.170.0/24
194.15.154.0/24
Signature Algorithm: sha256WithRSAEncryption
82:12:f3:67:ba:49:d7:ce:9f:26:45:ed:8f:b9:f9:ba:f5:2c:
36:ef:24:e3:93:92:0a:6a:ce:fe:3b:e4:43:85:f9:6c:f1:25:
92:09:23:7c:37:0d:f9:b4:c6:b7:e9:a0:44:8e:ac:63:66:49:
67:94:0a:56:0d:99:c8:91:6e:a6:ec:5c:1f:f8:06:68:07:07:
08:53:c5:7b:1e:75:a6:4f:fd:97:87:77:ae:39:02:64:a5:2f:
c3:d5:c5:ae:2c:73:17:b2:20:18:96:da:9e:c0:6c:4f:59:91:
b2:98:ba:60:ff:41:60:64:9f:18:55:a2:53:e1:04:bf:32:b6:
4d:91:02:c7:39:d9:0b:fe:c1:13:e2:13:3b:e5:50:24:63:79:
32:d7:a5:ff:84:06:f0:70:37:7a:67:9c:b0:71:50:e7:6d:56:
19:87:a3:ea:5b:02:ac:5e:03:6e:a2:bb:37:19:24:f0:40:21:
ec:b9:c9:88:b0:39:a2:5a:86:fa:52:74:33:5a:ab:cf:08:d0:
10:9c:03:3b:a2:dd:4b:90:a0:2c:d6:88:ea:4d:5e:76:b1:51:
c6:b5:9a:38:89:57:a0:cb:57:75:09:8f:7f:6d:91:7f:ac:02:
f8:0a:37:99:f7:29:4d:53:5d:a8:db:81:39:a9:ef:2a:c9:25:
04:55:d3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:54 2023 by rpki-client on console-ams.rpki-client.org