Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/rP7HXTiXS4K8e_qsCdvuWXptg-0.roa
File: rP7HXTiXS4K8e_qsCdvuWXptg-0.roa (raw, json)
Hash identifier: 8gAGjyzv/elR7tw53LO0zJSqRxRjN1CaXuTF8gB4XDY=
Subject key identifier: AC:FE:C7:5D:38:97:4B:82:BC:7B:FA:AC:09:DB:EE:59:7A:6D:83:ED
Certificate issuer: /CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Certificate serial: 0187123F8B1D795A32BCC3D89E7F4610CE35
Authority key identifier: 40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/rP7HXTiXS4K8e_qsCdvuWXptg-0.roa
Signing time: Fri 24 Mar 2023 06:12:46 +0000
ROA not before: Fri 24 Mar 2023 06:12:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206175
IP address blocks: 62.148.112.0/24 maxlen: 24
62.148.111.0/24 maxlen: 24
62.148.107.0/24 maxlen: 24
62.148.106.0/24 maxlen: 24
62.148.110.0/24 maxlen: 24
62.148.109.0/24 maxlen: 24
62.148.108.0/24 maxlen: 24
62.148.114.0/24 maxlen: 24
62.148.113.0/24 maxlen: 24
62.148.117.0/24 maxlen: 24
62.148.116.0/24 maxlen: 24
62.148.115.0/24 maxlen: 24
62.148.118.0/24 maxlen: 24
62.148.125.0/24 maxlen: 24
62.148.121.0/24 maxlen: 24
62.148.120.0/24 maxlen: 24
62.148.119.0/24 maxlen: 24
62.148.124.0/24 maxlen: 24
62.148.123.0/24 maxlen: 24
62.148.122.0/24 maxlen: 24
62.148.127.0/24 maxlen: 24
62.148.126.0/24 maxlen: 24
62.148.98.0/24 maxlen: 24
62.148.97.0/24 maxlen: 24
62.148.96.0/24 maxlen: 24
62.148.100.0/24 maxlen: 24
62.148.99.0/24 maxlen: 24
62.148.103.0/24 maxlen: 24
62.148.102.0/24 maxlen: 24
62.148.101.0/24 maxlen: 24
62.148.105.0/24 maxlen: 24
62.148.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:12:3f:8b:1d:79:5a:32:bc:c3:d8:9e:7f:46:10:ce:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Validity
Not Before: Mar 24 06:12:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acfec75d38974b82bc7bfaac09dbee597a6d83ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8c:d1:84:a8:cb:f2:cf:76:8e:45:f4:c7:25:
f7:a6:56:4b:e2:b8:3d:e3:e8:66:64:c8:ce:fc:2e:
63:7e:86:1e:a6:cf:39:15:ee:12:45:ae:b8:53:d4:
2c:2d:4f:5a:ac:96:de:35:bb:a8:0e:f2:a6:41:58:
cc:5a:f7:29:d4:f6:b4:f4:40:80:df:d7:35:1e:c7:
a8:dd:4b:e4:93:48:de:78:10:a4:dd:03:2b:32:ee:
4e:ea:e5:ae:f1:97:76:08:5b:ec:a0:b9:64:c4:bf:
e7:f1:06:bf:4c:1d:34:41:c2:87:48:45:4d:61:38:
64:b3:1a:d7:20:9c:c1:72:26:2a:ca:c3:9f:d4:28:
1e:e5:22:98:38:67:67:07:42:25:b8:2f:a1:2c:c3:
c1:3f:46:a8:7c:e7:e0:00:82:a3:5a:e6:61:34:7b:
c0:40:13:26:e1:7a:98:dd:02:39:fa:33:6b:ab:0a:
ed:fb:d9:5f:37:66:8e:6a:52:d8:6b:a3:fd:d5:18:
b1:59:1b:d7:8f:2a:6e:8f:e2:69:62:b4:30:93:c9:
53:2e:a8:d2:38:fd:87:00:e8:fb:de:a6:fc:6d:c0:
99:b0:fb:85:91:fc:7c:c5:27:27:81:a6:7d:ad:1d:
ee:fe:e4:9d:c5:d4:a9:39:9a:45:f5:fc:44:83:6e:
89:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FE:C7:5D:38:97:4B:82:BC:7B:FA:AC:09:DB:EE:59:7A:6D:83:ED
X509v3 Authority Key Identifier:
keyid:40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/rP7HXTiXS4K8e_qsCdvuWXptg-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.148.96.0/19
Signature Algorithm: sha256WithRSAEncryption
75:aa:fc:f3:04:5a:17:30:26:22:c5:f0:57:c7:af:aa:1f:e5:
3a:9a:0e:c7:c1:5d:1a:6c:67:6a:2c:b3:19:fe:a0:df:08:03:
03:92:5e:e5:d6:b3:f9:2a:e3:e1:a7:a4:a7:f5:cd:1c:a2:f4:
63:f0:d7:90:b5:bf:d9:f8:7d:30:fd:b7:11:96:c0:e9:a2:3d:
65:bc:5e:3a:ae:28:42:59:11:46:00:bb:7c:f3:43:31:7f:04:
d6:c9:22:ab:be:d7:76:7e:9e:8c:4e:c3:5b:04:2c:17:a8:c3:
1e:77:38:c0:cd:a2:20:60:67:0a:82:27:3f:9a:d0:cc:08:2b:
7d:b2:30:38:60:08:71:af:d7:81:d7:b8:33:1b:d0:67:59:f0:
0b:01:ad:5c:a1:a3:7a:e0:42:92:9e:e8:48:86:bc:84:e9:eb:
f7:60:d2:d1:c3:30:18:aa:29:a6:99:ee:eb:bb:40:5d:09:11:
26:19:20:f0:12:80:91:47:85:a3:1f:ac:c3:6a:81:8a:c0:25:
c0:64:af:63:9a:df:3d:cd:e2:0d:3d:b9:1b:fb:da:83:14:d6:
55:43:c4:2b:47:62:1c:34:4b:6a:cd:49:1d:8d:47:8e:84:ed:
0d:84:22:e4:33:57:59:4b:11:14:70:81:3a:d8:2a:e6:9f:f1:
44:11:c9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:32 2024 by rpki-client on console-ams.rpki-client.org