Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/_agfJt4wUFWdMuvscG_2TTnWKds.roa
File: _agfJt4wUFWdMuvscG_2TTnWKds.roa (raw, json)
Hash identifier: cLDLMOdVz4yBbiJAHZorATsGmCvrbenHSx6pau3hDn4=
Subject key identifier: FD:A8:1F:26:DE:30:50:55:9D:32:EB:EC:70:6F:F6:4D:39:D6:29:DB
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 01856D017F8C3E8FA1C4C8653FF5746BCD6D
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/_agfJt4wUFWdMuvscG_2TTnWKds.roa
Signing time: Sun 01 Jan 2023 11:04:52 +0000
ROA not before: Sun 01 Jan 2023 11:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12684
IP address blocks: 62.202.160.0/21 maxlen: 21
62.202.160.0/20 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:7f:8c:3e:8f:a1:c4:c8:65:3f:f5:74:6b:cd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Jan 1 11:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fda81f26de3050559d32ebec706ff64d39d629db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:15:2f:f9:57:57:fa:23:fd:c8:55:c6:7c:
20:eb:0a:a5:48:2f:9b:ed:80:16:bf:1e:86:f1:59:
cc:f5:71:ed:dd:9d:de:d0:a3:46:c4:1c:05:60:aa:
2b:93:70:b1:98:f5:0a:ba:95:e6:81:0d:84:ab:4c:
8b:b1:4d:a8:38:94:ea:d7:2b:71:8f:7a:30:3b:34:
6a:b5:6f:4d:80:1c:29:a4:8c:0e:a6:d1:c6:a4:02:
09:1e:a0:c1:d0:84:0f:25:42:7a:8d:41:a7:d0:c6:
e1:f3:6c:5f:2f:c2:58:58:aa:d8:de:a3:71:42:a8:
68:3e:c6:2a:c6:34:27:08:d4:a0:f0:2f:48:ea:52:
62:87:46:e4:95:ba:f4:2b:7f:49:a4:d7:2c:f2:d1:
19:6c:0e:c8:ce:32:24:04:ba:e3:d3:c5:8c:08:4c:
51:62:c0:79:4b:fe:23:0a:8d:8c:ab:c9:45:1f:cc:
95:c0:92:02:3e:1e:11:66:70:5c:15:57:ba:74:76:
8c:45:c9:51:38:dc:1f:8d:45:ed:96:85:db:5d:ed:
c4:20:02:77:4d:b3:72:17:0a:f9:29:2f:bb:a5:fc:
5b:ef:f9:79:fb:26:8c:54:51:51:85:0c:99:07:12:
07:be:bc:86:a1:7f:ec:58:ab:5d:99:05:6d:82:a7:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A8:1F:26:DE:30:50:55:9D:32:EB:EC:70:6F:F6:4D:39:D6:29:DB
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/_agfJt4wUFWdMuvscG_2TTnWKds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.202.160.0/20
Signature Algorithm: sha256WithRSAEncryption
44:bd:73:09:d0:84:72:65:01:8c:c0:86:df:13:2a:11:f7:b4:
fb:82:6f:fb:7a:06:42:f5:ff:38:d6:9d:ee:76:63:bb:23:89:
f2:98:41:e5:8b:91:b1:03:78:88:fe:b3:9d:11:03:98:9d:1a:
4e:9a:47:4e:64:a4:6d:12:52:4c:35:61:73:ed:f7:8c:6d:d0:
ad:3c:c4:f9:93:1c:36:c8:42:aa:4b:2e:e1:14:03:a5:e4:54:
93:35:02:bb:88:d8:f9:ad:f5:7d:df:48:9a:52:ff:52:ff:8d:
24:d6:d0:c4:2e:c0:4a:9a:d8:75:ca:53:eb:39:82:eb:8c:f6:
b5:a8:a2:b7:ac:9f:b7:a7:12:dc:4a:6d:b5:95:27:8a:8c:86:
04:d6:d2:37:e0:36:c2:64:d4:62:13:fe:17:40:da:4d:d1:75:
76:46:16:eb:8c:bd:09:f3:03:3f:d5:cd:ca:1b:26:b6:6c:e5:
7f:70:f1:f7:6b:7a:b2:21:07:bb:72:76:5b:70:91:88:40:40:
b0:3b:0c:c0:80:e7:c4:a9:9b:38:83:48:a4:7d:3d:66:c0:d8:
dd:01:46:08:42:81:a4:83:3f:2d:a2:08:e0:cc:9d:8f:a1:0c:
14:1e:0c:71:0f:91:96:5d:bb:3d:12:79:40:00:64:d0:80:ec:
28:75:c1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:32 2023 by rpki-client on console-fra.rpki-client.org