Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/ymdVAzPftsvn7YQ_-KDdE0PC2Xc.roa
File: ymdVAzPftsvn7YQ_-KDdE0PC2Xc.roa (raw, json)
Hash identifier: QUfA40SBxtBQG/vcKkPNHHZaZYnlvDdwDyucZq2O3no=
Subject key identifier: CA:67:55:03:33:DF:B6:CB:E7:ED:84:3F:F8:A0:DD:13:43:C2:D9:77
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 01875A49DB5C599FF80ADFDFD6FCCFC71D35
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/ymdVAzPftsvn7YQ_-KDdE0PC2Xc.roa
Signing time: Fri 07 Apr 2023 05:56:42 +0000
ROA not before: Fri 07 Apr 2023 05:56:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.182.170.0/24 maxlen: 24
62.182.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:49:db:5c:59:9f:f8:0a:df:df:d6:fc:cf:c7:1d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Apr 7 05:56:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca67550333dfb6cbe7ed843ff8a0dd1343c2d977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:e9:b7:28:2e:cb:7e:49:67:2b:cd:b2:30:
de:75:f9:0f:a2:25:62:df:82:86:3c:bb:44:c3:62:
f4:87:97:66:a7:c2:21:df:e5:9a:96:86:dc:84:a0:
37:89:f1:15:0b:2e:18:a7:26:11:5f:58:27:33:46:
e2:f0:31:ea:a5:29:6d:4e:1c:61:38:91:ed:fe:42:
7a:51:08:cd:62:d6:42:2e:03:22:11:21:12:45:09:
6c:cf:72:4d:b0:e7:2d:c2:b2:8d:ef:b5:3c:fb:b2:
48:6c:f1:b2:26:5e:a2:37:9e:08:73:32:85:48:37:
87:07:3f:07:71:45:8b:15:51:a0:6c:b3:cc:81:af:
8a:b8:62:ce:c2:c7:42:59:59:b4:33:87:b6:66:9a:
ac:cd:85:8a:b6:e8:08:60:56:5f:b9:00:e7:f8:aa:
8d:be:9e:e0:30:95:84:65:f9:1b:5f:73:6c:e3:43:
a7:19:36:3e:6b:ce:d4:b0:ae:1b:5e:69:c8:55:3a:
fd:19:e2:e8:d8:64:5d:11:28:19:5e:f9:1f:e4:d1:
f1:10:59:7e:1e:f3:61:c1:d3:ca:d8:2c:db:ee:24:
f3:f9:06:aa:f7:b3:63:d5:98:59:2f:08:85:ac:4a:
80:d2:8f:7f:3a:90:a6:da:4f:60:df:fe:73:97:7e:
ff:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:67:55:03:33:DF:B6:CB:E7:ED:84:3F:F8:A0:DD:13:43:C2:D9:77
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/ymdVAzPftsvn7YQ_-KDdE0PC2Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.170.0/24
62.182.173.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:9d:14:6d:cf:61:ae:49:68:51:ba:14:dd:97:8e:75:20:7d:
1c:98:da:cd:a7:47:65:7e:74:0b:ea:73:37:02:6e:70:5e:ac:
83:27:0c:f1:2d:37:35:69:6b:c1:c9:9a:ff:14:f9:3c:e2:98:
4e:c9:fb:be:23:71:6c:a7:81:7b:3f:24:6a:93:03:c4:4e:35:
c0:0f:07:5a:91:09:9e:67:76:8d:c9:d8:a1:21:02:92:8b:7e:
2d:41:13:d5:d7:7b:f2:8f:8a:b0:70:1e:20:31:fd:0e:5d:9c:
f5:6e:a3:97:2c:9f:98:38:87:34:d5:b7:b9:bd:17:9a:a1:18:
46:b1:e0:87:97:71:46:7b:04:8a:59:c3:ec:7a:57:c6:82:00:
69:ca:c7:e2:51:a0:0d:44:5a:5f:a3:b4:c7:45:06:dd:40:9a:
c2:d7:a8:ee:ee:69:d7:57:6d:af:07:e6:11:49:0e:b6:7d:b6:
b7:42:bf:2d:85:2e:dc:2e:77:98:02:31:33:98:91:fa:fb:ce:
ca:e9:3a:4a:1d:86:fb:88:ae:9d:09:57:a6:d0:b6:19:ce:e2:
4b:02:df:24:24:20:4a:20:3a:96:2c:3a:8d:15:4f:b9:ba:45:
4d:6a:6d:d4:9f:72:33:a8:76:40:b7:38:8b:6d:30:ca:d2:68:
89:4a:01:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:13 2023 by rpki-client on console-fra.rpki-client.org