Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/mte5AwY5N7ZNGm0pw8gd2R-AE6U.roa
File: mte5AwY5N7ZNGm0pw8gd2R-AE6U.roa (raw, json)
Hash identifier: Uc4o1hrqWinWzdQwk+BSwPJd3TIZqzaPOHSl0MQiR1o=
Subject key identifier: 9A:D7:B9:03:06:39:37:B6:4D:1A:6D:29:C3:C8:1D:D9:1F:80:13:A5
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0187F00CD3D7D2E47CB10088C373F835B1FC
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/mte5AwY5N7ZNGm0pw8gd2R-AE6U.roa
Signing time: Sat 06 May 2023 07:53:05 +0000
ROA not before: Sat 06 May 2023 07:53:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.182.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f0:0c:d3:d7:d2:e4:7c:b1:00:88:c3:73:f8:35:b1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: May 6 07:53:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ad7b903063937b64d1a6d29c3c81dd91f8013a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:a1:be:56:2d:09:43:51:f6:01:08:02:f2:
87:8c:9d:e3:67:42:e5:5d:5a:b6:57:50:5f:fa:c6:
ba:64:51:e1:7a:22:29:51:90:86:0c:b7:f3:a2:5d:
e3:5f:d3:f0:62:4a:61:90:7f:c2:c7:33:e7:df:7a:
c6:b2:1f:0c:cf:86:04:6f:1d:90:b0:22:3b:3c:f4:
b4:b2:3b:ae:24:fc:ea:53:63:76:11:08:72:2d:d4:
9e:7f:bc:d5:4f:28:60:b7:81:49:ad:02:f4:e6:32:
7e:f3:2a:99:5b:a7:fc:e3:30:16:57:70:b3:a7:e0:
f2:9d:d5:5a:12:0b:0b:6c:40:8e:2f:7f:27:8e:cf:
88:ff:b1:02:01:54:7a:46:1d:b5:5f:af:8d:7c:e7:
7b:8f:51:5f:22:7a:69:3c:4c:fe:88:35:96:62:3f:
41:96:5f:56:7a:a0:9c:ce:c8:19:da:c7:9a:db:70:
df:91:b3:04:65:d4:22:ad:3e:9c:96:2f:e1:4c:cf:
93:59:06:28:0b:20:72:75:46:b4:89:0d:73:cd:2a:
69:a0:a5:75:98:04:30:22:a5:68:9f:4d:a1:6f:b0:
48:aa:b5:c5:97:1c:f3:30:c9:98:b5:c3:53:a5:c7:
ba:42:35:e0:e0:5c:3e:ed:86:0e:8d:4c:21:d4:9f:
be:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D7:B9:03:06:39:37:B6:4D:1A:6D:29:C3:C8:1D:D9:1F:80:13:A5
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/mte5AwY5N7ZNGm0pw8gd2R-AE6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.170.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a3:3f:b8:1a:33:55:59:02:e5:9b:b6:86:e9:84:e2:e2:52:
63:9e:c7:44:59:b9:e4:57:dd:d2:83:41:f0:15:04:c0:a0:a1:
c4:9a:c2:4a:dc:a0:71:c6:87:a0:fc:5c:da:60:df:70:5a:bc:
62:89:da:fb:c5:ac:f1:77:42:83:15:c3:e9:4d:00:35:29:a3:
85:4c:75:db:e3:b7:c4:68:13:7e:4d:7a:cc:22:22:2b:78:ae:
7b:53:9e:3a:5e:a8:27:78:37:9b:ad:98:f6:d1:ed:22:33:2c:
a4:90:f6:d7:e4:5c:d1:0e:be:a1:f7:e6:6a:2a:9a:6f:a5:a6:
cf:3d:54:d4:30:68:66:37:6c:df:c7:3f:65:4f:cc:68:45:d4:
37:40:1d:e4:33:4b:72:9b:1c:f5:48:86:a6:f0:5a:05:e1:97:
bd:93:20:49:9a:41:ab:2f:95:9e:9e:90:dc:d6:40:cd:06:05:
97:f9:3a:f2:99:5b:b6:4c:2e:20:ee:a2:56:02:6f:33:50:38:
2e:37:9b:d7:f6:ba:16:f1:e2:37:d7:ae:5a:21:93:cb:58:5e:
ac:8d:0b:86:ba:59:28:20:99:f2:b7:03:c1:07:5a:6b:8c:94:
24:50:1f:f5:7d:26:d3:17:0c:cf:2e:2b:3b:d8:11:57:13:d7:
c3:89:1c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:13 2023 by rpki-client on console-fra.rpki-client.org