Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/nBwDsboIxXutSJgx0mFs7wMlTRg.roa
File: nBwDsboIxXutSJgx0mFs7wMlTRg.roa (raw, json)
Hash identifier: 002ARf0fAmyE8+3do7Uxxfh0VTjxFUGTNmTs40eSZGA=
Subject key identifier: 9C:1C:03:B1:BA:08:C5:7B:AD:48:98:31:D2:61:6C:EF:03:25:4D:18
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0186C5159CD87493DF039D651260A8C62EFA
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/nBwDsboIxXutSJgx0mFs7wMlTRg.roa
Signing time: Thu 09 Mar 2023 06:36:13 +0000
ROA not before: Thu 09 Mar 2023 06:36:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 62.182.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:15:9c:d8:74:93:df:03:9d:65:12:60:a8:c6:2e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Mar 9 06:36:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c1c03b1ba08c57bad489831d2616cef03254d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:e4:90:c2:01:0c:0c:2c:4f:69:9c:11:9b:
8d:d6:4f:4f:7d:cc:b4:c5:bf:b8:03:8c:3c:3e:f9:
bb:9b:25:bd:05:57:54:44:26:b5:6d:ce:5b:e0:e6:
88:7d:f6:21:25:f1:da:18:80:8b:b5:7a:80:f5:5d:
70:c8:5c:36:b1:de:6d:e1:25:57:eb:a7:e2:b7:23:
ba:f0:ed:10:1d:ec:e5:a7:32:f8:c3:fc:28:52:44:
c8:74:d8:2b:93:c6:78:d8:6f:e7:27:0f:28:ad:ad:
b5:3f:59:5a:6e:88:6c:93:8d:45:ab:b9:f9:24:6e:
e2:cd:26:99:d8:a7:74:7c:4f:d0:ae:ea:b7:c9:1d:
6b:21:d8:bc:15:6e:f7:2e:97:e5:c3:cc:0b:ad:66:
00:67:4f:04:23:f2:d4:1f:b8:2b:93:17:94:39:88:
c3:72:17:3a:9f:64:28:9d:2b:ac:4b:74:a8:9a:4e:
41:c1:59:e1:80:cb:87:e1:cf:fb:b3:5a:1a:25:5e:
91:fa:e4:b7:a3:46:8e:b2:07:ea:ef:4d:0b:38:e3:
d3:68:da:e9:50:4d:d3:8e:cb:24:19:3c:d0:b4:78:
2e:31:f7:0f:8c:a6:98:b4:f9:b5:b4:47:a2:7c:40:
e4:d1:8e:33:08:b1:ac:1d:b8:4f:e6:6a:1c:a5:b2:
e6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1C:03:B1:BA:08:C5:7B:AD:48:98:31:D2:61:6C:EF:03:25:4D:18
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/nBwDsboIxXutSJgx0mFs7wMlTRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.172.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ee:91:99:ad:4a:8c:c5:84:4d:a8:e5:aa:6c:39:c3:cf:f7:
da:4b:5b:40:5f:5c:e7:c1:76:a1:d6:d7:2f:2b:59:8e:d9:2c:
37:32:0c:ea:63:62:59:4d:ea:6b:4a:7f:47:b8:78:87:50:15:
97:5d:05:6b:9f:78:02:a1:24:0c:6f:16:b3:d2:f2:78:3c:c7:
da:a4:1f:cc:b6:1d:38:0a:ab:dc:ef:cb:7c:7a:db:5d:fd:70:
d5:94:47:11:e2:34:07:06:4f:71:c8:86:77:99:4a:7e:11:e1:
55:4b:b9:d6:10:98:06:63:10:61:17:96:1b:ee:e7:6c:55:51:
3c:d2:ea:d4:ad:7d:09:d0:24:60:c5:00:1e:b3:98:b6:df:08:
cd:8b:e3:82:3c:cf:aa:64:b9:e7:0d:53:69:0f:23:87:61:36:
04:5a:33:4a:ba:c4:aa:59:b1:ad:f8:d0:17:3a:a3:1b:10:9a:
28:03:1e:8e:53:36:8e:d0:32:11:87:80:81:38:6b:4e:9e:56:
25:be:9c:da:da:12:86:ca:b4:5c:40:e6:61:c2:94:c7:1e:a6:
a6:48:37:e5:5c:10:86:0b:dd:8e:a0:4e:6e:42:0d:39:8e:7c:
07:3b:79:2c:62:04:73:99:38:90:91:b4:f2:8e:4d:73:ee:02:
02:0b:65:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:54 2023 by rpki-client on console-ams.rpki-client.org