Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/SJ55gNozfbeLcxw_31sFox8I0cE.roa
File: SJ55gNozfbeLcxw_31sFox8I0cE.roa (raw, json)
Hash identifier: 7GJRkaUy+7vn8RLnslzvj5CPDZkHpc+Cpwd1lkUJ0Jk=
Subject key identifier: 48:9E:79:80:DA:33:7D:B7:8B:73:1C:3F:DF:5B:05:A3:1F:08:D1:C1
Certificate issuer: /CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Certificate serial: 01856EF41AD2FB24B24A9171BCA253416B53
Authority key identifier: 6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/SJ55gNozfbeLcxw_31sFox8I0cE.roa
Signing time: Sun 01 Jan 2023 20:09:29 +0000
ROA not before: Sun 01 Jan 2023 20:09:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13267
IP address blocks: 62.240.192.0/23 maxlen: 23
62.240.192.0/22 maxlen: 22
62.240.196.0/22 maxlen: 22
62.240.196.0/23 maxlen: 23
62.240.194.0/23 maxlen: 23
62.240.200.0/21 maxlen: 21
62.240.208.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:1a:d2:fb:24:b2:4a:91:71:bc:a2:53:41:6b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Validity
Not Before: Jan 1 20:09:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=489e7980da337db78b731c3fdf5b05a31f08d1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7e:ec:43:9b:4e:a6:f9:60:cd:04:c9:41:65:
52:be:70:8c:73:ee:fd:00:28:ee:83:bd:a8:96:bf:
41:fd:2f:82:51:f6:68:93:74:2d:cc:b1:25:30:7f:
85:e9:b6:78:15:fd:4f:76:ae:eb:66:9c:ce:70:f0:
05:87:4d:12:b1:28:ff:22:d9:a6:21:d8:10:ed:b7:
51:f7:8a:1e:76:b6:c3:18:3a:c8:bc:17:ad:e8:a7:
f6:5d:57:e7:69:0e:11:1d:f9:10:ca:e9:64:0f:ba:
4c:5a:ef:e2:c8:0e:48:2a:a3:37:24:4c:b0:c4:a8:
a8:7b:e4:11:64:3f:af:51:b3:6f:7d:8a:d0:01:0d:
45:67:03:f5:cb:20:f3:ca:8c:fe:ec:de:b3:57:49:
b6:53:86:85:34:3f:79:10:6a:97:96:b1:63:ae:c9:
18:b3:cc:5d:fa:b1:21:f0:83:9b:f4:34:4a:27:19:
a3:24:ea:76:08:eb:cf:87:a9:f5:36:4b:dc:65:de:
73:c8:3b:55:07:47:d0:6d:1a:84:4d:ef:16:52:d7:
35:b8:49:f2:1c:cd:ff:28:8b:e7:36:03:81:e4:ee:
f7:ea:a4:52:ff:6c:b8:79:6a:dd:31:c5:df:fa:25:
92:f0:0b:6c:e5:f6:71:4f:cc:9a:e2:86:31:f7:2f:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9E:79:80:DA:33:7D:B7:8B:73:1C:3F:DF:5B:05:A3:1F:08:D1:C1
X509v3 Authority Key Identifier:
keyid:6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/SJ55gNozfbeLcxw_31sFox8I0cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.240.192.0/19
Signature Algorithm: sha256WithRSAEncryption
46:a8:3a:f9:22:42:34:28:f3:50:3a:90:ae:82:8c:af:de:a1:
22:23:f0:ac:f5:83:00:7e:e8:05:3d:8a:df:0d:a6:b9:ce:d3:
97:64:c2:e8:c1:2b:8b:c8:55:73:1d:0f:74:6b:9c:18:16:bb:
78:bf:ef:4e:8d:18:e6:d0:64:5b:3b:cc:19:04:b9:25:14:49:
70:3b:2b:1e:d5:e2:81:4c:37:49:a7:a0:a8:70:c8:e9:d3:e0:
47:2e:ac:61:d9:65:6a:eb:5c:60:f8:e5:dd:a1:5f:71:26:0a:
a2:a3:ab:c5:8a:b4:60:7d:8a:cc:89:57:86:95:c4:c9:15:ac:
9b:c8:4b:fb:b3:c4:23:29:76:04:12:d5:70:8c:37:d0:2e:0f:
81:d0:75:92:4b:b3:4c:18:8b:14:e4:8b:af:e7:9c:c3:10:31:
d8:88:26:b8:1e:28:71:f0:11:df:86:d5:9d:6b:eb:87:77:4d:
e6:f4:9b:c1:35:6b:82:e7:73:f9:28:e8:98:6d:ca:ec:e9:e5:
66:5f:69:ea:d6:fd:17:82:92:fe:fe:8d:f0:e4:c9:11:83:7c:
fd:95:4e:5a:df:a6:e1:89:58:6d:86:bd:47:ed:01:7a:19:f5:
07:80:3d:d3:05:28:34:00:1f:66:99:29:23:bc:ea:11:e2:64:
17:3d:aa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:14 2024 by rpki-client on console-ams.rpki-client.org