Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/1fBKKR0gGrfu4cuW3TEERo3DDZg.roa
File: 1fBKKR0gGrfu4cuW3TEERo3DDZg.roa (raw, json)
Hash identifier: RiOzGBi4AHZsnCjZGj0CFPjqUdkFPfGFNgflzEXbUE8=
Subject key identifier: D5:F0:4A:29:1D:20:1A:B7:EE:E1:CB:96:DD:31:04:46:8D:C3:0D:98
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 01856D01804DB36B80E776D6CA0FE7599AED
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/1fBKKR0gGrfu4cuW3TEERo3DDZg.roa
Signing time: Sun 01 Jan 2023 11:04:52 +0000
ROA not before: Sun 01 Jan 2023 11:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 62.202.152.0/21 maxlen: 24
62.202.168.0/21 maxlen: 24
2a02:1215:ffff::/48 maxlen: 64
Validation: Failed, certificate revoked on Tue 04 Jul 2023 09:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:80:4d:b3:6b:80:e7:76:d6:ca:0f:e7:59:9a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Jan 1 11:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5f04a291d201ab7eee1cb96dd3104468dc30d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:27:cf:e7:32:f5:6f:a3:c6:01:8d:ad:ab:
b0:2b:02:d2:8e:c2:de:e7:a5:ea:a4:9b:8c:c3:b0:
c7:28:c3:c5:2c:a3:af:45:27:d5:55:1f:8e:9a:c2:
96:2f:bb:5f:06:f9:54:8b:7a:91:f3:ef:23:23:73:
fe:d7:b3:27:de:49:8b:b9:2b:f9:76:03:44:45:20:
55:84:57:15:22:eb:a9:b4:d5:3a:dd:f4:a7:8d:38:
3e:71:0f:c2:e3:0e:bf:17:0f:32:b4:03:3c:e5:fb:
bf:f2:2d:ca:bf:cf:ce:21:ad:6a:35:eb:bd:78:ac:
fa:fc:e8:54:65:c6:5d:bd:57:30:47:e9:f0:69:1d:
5a:f1:34:51:f9:fb:d1:eb:01:06:b3:c2:e3:fa:db:
0e:f8:90:45:47:9a:8e:86:5d:d8:27:b9:53:a0:e0:
1a:f5:2f:1f:ee:b0:a1:1c:af:80:fa:6d:1d:77:aa:
c9:cd:81:63:8e:fd:fd:1f:7f:f2:7e:c4:a7:96:9e:
d4:14:a7:e1:60:d0:32:ef:97:2d:7f:63:f5:2a:13:
84:03:58:5e:8b:58:68:a3:4b:c5:38:22:27:58:96:
b1:e9:37:f8:e3:df:87:5f:27:ae:c0:af:42:16:d5:
9e:eb:05:55:30:1b:9e:87:83:af:b0:37:3d:b8:e7:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F0:4A:29:1D:20:1A:B7:EE:E1:CB:96:DD:31:04:46:8D:C3:0D:98
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/1fBKKR0gGrfu4cuW3TEERo3DDZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.202.152.0/21
62.202.168.0/21
IPv6:
2a02:1215:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
04:12:fb:78:50:68:39:3d:d4:1f:e7:e4:6e:35:ad:fc:23:89:
fb:26:5d:6c:8f:be:ce:8a:5f:fe:79:27:6a:a6:49:09:b0:28:
17:9b:ae:6d:69:8b:90:2c:28:68:05:0d:f6:fa:c6:ea:79:bb:
86:a1:fa:27:a3:32:bd:b2:73:12:08:08:98:04:95:5e:b3:46:
23:b5:1a:a3:0c:11:74:f7:69:43:d9:cc:4e:d0:52:0b:66:81:
3c:18:a5:d0:c6:b8:73:ba:6e:61:a1:2c:fa:83:d8:00:6e:1d:
20:3c:f0:b5:0f:4c:09:44:2d:ef:c8:da:db:aa:5f:ff:04:70:
d7:01:95:75:7b:ca:59:76:20:0d:89:ba:05:ab:10:21:c4:d3:
86:e5:85:51:20:41:f4:43:39:a2:05:83:49:1a:75:df:10:cd:
b9:a1:32:56:a2:d5:29:70:dd:4a:5b:38:41:4c:0e:95:aa:d7:
6e:fa:b6:7c:a9:37:aa:0a:b2:ce:21:cb:b9:d9:e9:84:bc:57:
1e:aa:3b:0e:85:3a:bd:60:65:ce:1f:29:d3:57:5b:e5:3e:4e:
d9:2d:e7:92:fb:6b:9e:97:d9:51:bc:b9:42:43:0d:b2:3a:6f:
04:ab:42:dc:94:5d:25:55:f1:18:51:90:f1:04:9b:22:f4:f6:
f6:87:40:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:32 2024 by rpki-client on console-ams.rpki-client.org