Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/io_WwAtziwIp5EbBk7N5yYVOESg.roa
File: io_WwAtziwIp5EbBk7N5yYVOESg.roa (raw, json)
Hash identifier: 4pBAZM/4E+II2035frHT+QBafB1Yb7Uj+K4WN24jDlU=
Subject key identifier: 8A:8F:D6:C0:0B:73:8B:02:29:E4:46:C1:93:B3:79:C9:85:4E:11:28
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 0190114E7B20699E159D4D765215C45836DF
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/io_WwAtziwIp5EbBk7N5yYVOESg.roa
Signing time: Thu 13 Jun 2024 11:14:34 +0000
ROA not before: Thu 13 Jun 2024 11:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399641
IP address blocks: 62.204.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 11:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:11:4e:7b:20:69:9e:15:9d:4d:76:52:15:c4:58:36:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Jun 13 11:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a8fd6c00b738b0229e446c193b379c9854e1128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:66:44:ce:21:5e:bb:77:f6:84:bc:5d:cf:
08:4d:f6:a6:91:e0:0e:09:5b:90:74:0d:72:16:d5:
a8:1b:61:e5:a4:76:b0:8f:99:3b:8b:9d:a5:1d:6b:
d0:17:d8:1b:d1:f2:a1:83:c5:81:5f:f9:29:fd:a3:
86:12:91:2e:f0:87:26:07:b1:65:97:b2:fa:97:5a:
a8:ca:9e:d7:5b:cf:3e:c6:98:eb:3e:e7:c0:d1:7d:
5d:d9:fa:c1:06:77:1a:fb:8a:91:f1:1a:b6:b2:59:
1c:38:92:d8:55:3e:88:3c:47:78:b7:84:31:6d:64:
af:db:ae:b7:59:d4:36:31:3c:f3:5f:bd:2a:c2:a5:
54:be:f8:9d:af:ed:e2:41:3c:a6:40:98:7c:6a:a6:
24:7f:00:28:32:34:c5:b1:78:34:9d:a1:15:f7:06:
ca:88:66:2e:d9:88:2c:bb:89:8e:e0:1f:44:81:75:
47:ec:4d:51:3f:85:87:f3:b4:2a:1a:1a:d8:3c:80:
40:87:28:ba:e9:ff:ba:44:08:45:0c:36:7e:91:96:
8b:6b:41:48:f2:54:b6:1a:34:89:31:dd:12:70:4c:
e7:7a:64:22:19:97:3b:d6:44:75:da:77:d0:81:30:
db:1a:6a:ca:64:4c:8b:93:64:7d:59:3f:66:0b:99:
73:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8F:D6:C0:0B:73:8B:02:29:E4:46:C1:93:B3:79:C9:85:4E:11:28
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/io_WwAtziwIp5EbBk7N5yYVOESg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.51.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:c6:5b:21:60:6b:ca:95:4a:71:dc:47:55:78:bf:d4:a3:78:
1a:68:c8:ae:2f:cf:50:ac:3c:67:6c:fd:54:c5:19:44:ff:cc:
06:d0:34:b1:15:89:24:35:e6:9a:d9:b3:51:ee:29:44:94:58:
9a:f6:d4:43:6a:5f:a8:d3:db:56:a8:9c:bf:4a:9c:0b:16:0f:
68:35:b1:b8:a2:7c:f0:c6:44:b6:41:b8:c6:52:e1:ba:32:44:
0c:c2:0a:f0:a2:64:8d:87:30:00:f8:b5:b9:15:57:bc:d3:a7:
bf:2e:85:63:2a:32:c3:da:38:da:b8:65:5f:fd:f6:23:62:e5:
6d:b9:19:02:23:4c:d2:f4:32:5e:f7:59:31:60:98:9b:56:ba:
12:e2:34:d0:b2:52:2c:32:0d:3d:38:51:77:e1:a0:1e:e2:d7:
a5:87:61:c5:a9:0b:9e:da:42:f8:ec:6f:48:f3:a3:d4:15:eb:
b3:93:c1:1b:29:47:23:dc:a6:00:89:8a:31:5a:2b:69:0a:f2:
07:95:c1:78:f5:83:04:02:61:ff:8a:7b:71:f3:85:00:b4:83:
f5:12:c4:9f:12:52:59:22:2b:ae:7e:8a:07:47:2a:39:7a:0f:
af:93:62:23:30:c7:b9:67:46:d5:cc:45:10:40:1a:ac:38:16:
63:6d:a4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 15:11:16 2024 by rpki-client on console-fra.rpki-client.org