Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/EPWRb6bSKDOBAIHVyv015ulV7wk.roa
File: EPWRb6bSKDOBAIHVyv015ulV7wk.roa (raw, json)
Hash identifier: 2vbaCAbxysQg98SpkPweNbSNNMNb3LVJzqvxWfFMGdM=
Subject key identifier: 10:F5:91:6F:A6:D2:28:33:81:00:81:D5:CA:FD:35:E6:E9:55:EF:09
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 01892028C77B03666BF7514A701A2194E9CB
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/EPWRb6bSKDOBAIHVyv015ulV7wk.roa
Signing time: Tue 04 Jul 2023 09:08:10 +0000
ROA not before: Tue 04 Jul 2023 09:08:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 62.202.152.0/21 maxlen: 24
62.202.160.0/20 maxlen: 24
2a02:1215:ffff::/48 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:28:c7:7b:03:66:6b:f7:51:4a:70:1a:21:94:e9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Jul 4 09:08:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10f5916fa6d22833810081d5cafd35e6e955ef09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:03:25:23:1f:f7:23:1a:4f:f8:13:9a:f6:4e:
05:93:79:92:d4:8c:f5:c7:73:be:f7:8e:68:30:67:
2c:7b:27:04:fd:ae:63:8e:7c:d7:77:13:57:9a:c7:
ee:6f:8b:73:e0:ea:c9:a3:04:15:90:fd:d9:db:22:
7c:9c:d3:55:61:74:64:d9:75:1e:7d:9b:12:18:40:
d9:22:b6:aa:39:1d:1c:d2:09:ad:49:42:40:7e:7c:
dc:c8:6a:89:31:e9:62:d1:8e:2c:f8:21:d6:85:e1:
f7:9a:6d:da:95:aa:c6:48:4f:97:3c:e4:ea:ce:69:
86:e1:60:4c:32:5d:67:d4:3a:cf:29:90:3c:02:06:
c7:70:91:0d:8e:cb:bd:1a:29:89:b2:30:d9:24:45:
3f:33:a2:d8:e8:3c:b6:f8:c1:49:6f:24:5e:aa:e0:
51:60:6a:36:aa:6f:2c:90:10:7c:de:9d:7b:31:d4:
e5:5b:d7:8c:5f:9b:24:9b:0e:86:fa:c6:a2:52:df:
b8:e3:93:77:f0:3b:46:8d:8e:22:0d:6b:4b:99:12:
04:4f:ff:0e:6a:c8:07:87:c1:2b:2d:24:1d:9d:48:
93:3f:eb:05:b2:ba:83:91:f0:40:fc:29:a8:af:72:
91:88:41:7f:37:6d:83:61:a3:4d:72:66:9e:3e:fb:
88:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F5:91:6F:A6:D2:28:33:81:00:81:D5:CA:FD:35:E6:E9:55:EF:09
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/EPWRb6bSKDOBAIHVyv015ulV7wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.202.152.0-62.202.175.255
IPv6:
2a02:1215:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
90:f7:b9:70:dd:60:87:f9:50:48:88:95:bc:64:24:7d:f7:e5:
c5:01:2b:8c:b8:44:0e:a5:3d:a1:71:5f:cb:55:d2:a6:09:b9:
10:63:4e:13:84:b9:fc:17:2a:04:54:03:96:bf:f4:6a:5d:36:
81:28:a1:21:9a:90:6a:52:64:c5:e6:91:d0:22:fe:cc:3a:1e:
8b:f4:b3:21:dd:ea:8c:22:a8:88:f0:bd:a0:aa:92:1a:2d:fa:
0a:1f:c8:82:37:e3:47:37:b7:f6:ed:d6:66:1f:e8:89:d2:54:
00:77:83:42:82:63:7f:35:63:ee:94:a3:9f:3e:62:e7:98:0e:
c8:6c:df:09:77:b0:b5:f6:45:2e:31:35:c5:e5:00:95:e7:df:
df:86:6d:5c:80:8f:28:4b:b7:36:b4:17:22:44:43:26:27:58:
f8:b4:4f:65:c6:0f:9f:5d:ff:e3:c0:03:4a:0c:ca:3d:24:59:
55:c1:c8:95:38:d6:4d:5b:78:ec:3e:20:00:24:2d:05:09:65:
4a:6d:e4:91:21:ed:44:5e:04:5d:bd:54:84:28:13:74:3e:27:
8c:78:f6:b3:6f:c2:1b:00:f8:60:5c:e5:05:da:b1:93:fc:80:
20:57:ea:b9:2f:72:44:83:33:0e:53:2f:65:b3:92:67:77:65:
80:fa:f7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:32 2024 by rpki-client on console-ams.rpki-client.org