Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/N1FruQb7_98n0ZdDsOVwhU7rMSE.roa
File: N1FruQb7_98n0ZdDsOVwhU7rMSE.roa (raw, json)
Hash identifier: eFz5VYZypQJM+LrE53BYoQDzbW6M1yiL9+cKPG2WOJY=
Subject key identifier: 37:51:6B:B9:06:FB:FF:DF:27:D1:97:43:B0:E5:70:85:4E:EB:31:21
Certificate issuer: /CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
Certificate serial: 018DAE02493B91076AFC5D0E82FB05217F52
Authority key identifier: 7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/N1FruQb7_98n0ZdDsOVwhU7rMSE.roa
Signing time: Thu 15 Feb 2024 18:23:21 +0000
ROA not before: Thu 15 Feb 2024 18:23:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 62.122.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Apr 2024 11:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ae:02:49:3b:91:07:6a:fc:5d:0e:82:fb:05:21:7f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
Validity
Not Before: Feb 15 18:23:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37516bb906fbffdf27d19743b0e570854eeb3121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9c:a8:fd:81:96:2d:26:49:7f:7c:48:00:79:
e7:81:2b:ee:94:b3:66:d0:55:57:36:2d:08:2d:d9:
26:01:e0:2a:cf:10:8f:98:29:0a:6e:74:f8:45:17:
be:76:76:6e:c0:5f:73:ed:af:c8:59:65:f7:78:8d:
a9:b7:db:6d:30:29:22:65:4f:40:a5:0d:bd:f4:a8:
8e:cd:3f:33:8b:33:64:aa:05:08:5b:92:a4:85:92:
7a:99:68:e3:83:02:c3:e5:b4:a0:7b:5a:28:96:58:
42:3d:be:77:eb:f9:5c:fb:7c:ca:a0:1a:4e:1d:29:
0c:37:28:de:c2:7e:7e:a0:c4:ee:0b:68:1c:7b:02:
22:f1:f6:fd:9f:7a:e0:b0:a4:e7:19:d6:22:d1:47:
06:e6:a0:84:3f:78:8e:78:56:80:7a:ec:6a:af:0f:
70:77:c2:db:41:51:ae:7e:d0:33:59:d1:36:6d:db:
b9:13:d9:04:cc:0c:ca:fb:d4:96:eb:ab:d6:ed:bc:
30:12:16:0a:9d:7e:ee:61:cb:4d:49:6a:f7:9a:63:
6c:67:51:38:36:9f:38:92:cb:cc:67:75:0a:57:70:
53:37:7c:21:c5:90:3b:d6:f9:2c:8b:f4:1c:9f:0b:
b3:fb:d4:41:a4:c6:96:41:46:da:8f:77:39:bd:ae:
16:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:51:6B:B9:06:FB:FF:DF:27:D1:97:43:B0:E5:70:85:4E:EB:31:21
X509v3 Authority Key Identifier:
keyid:7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/N1FruQb7_98n0ZdDsOVwhU7rMSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.126.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a4:4d:bd:5f:d6:48:f6:35:41:76:5f:98:e7:f4:74:82:ad:
2f:08:aa:4d:c5:48:6d:43:30:17:fc:94:8a:cc:66:ae:ba:0d:
97:1d:e5:46:9d:63:ca:0f:d5:03:f6:88:ea:63:91:0a:ba:b5:
b2:94:39:0f:5d:9f:1d:c1:1f:4a:a5:11:43:78:57:25:25:3a:
d7:50:01:9c:1e:07:fa:a0:e1:c5:08:f4:62:31:60:ff:78:d3:
b4:22:23:63:a2:46:67:7b:dc:e2:b7:c5:32:61:45:40:c9:91:
90:3e:3c:b8:7b:b0:95:3c:96:3f:ba:13:ad:3d:7b:e0:9a:ab:
aa:dd:25:a1:f9:65:b8:58:56:e0:1a:91:d9:73:77:32:7a:75:
91:d9:6a:fb:ae:7a:ad:32:31:44:0d:16:79:35:22:41:ce:18:
e0:3d:8c:ce:aa:c3:7b:bf:b1:91:53:81:0c:7a:b7:d5:35:64:
12:c0:d5:34:7e:91:d5:fd:99:71:78:ff:d3:b7:a5:2a:7e:56:
ff:7f:2d:81:b3:d6:80:fc:f8:dd:28:dd:a5:cb:a6:8c:3e:1c:
19:80:4f:d9:65:69:60:65:e5:b0:57:0b:02:dd:da:92:25:eb:
00:cc:68:fe:32:1d:d6:a9:97:f0:73:08:1b:85:5a:9f:8a:97:
c3:51:ad:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2uAkk7kQdq/F0OgvsFIX9SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMTBlZTIyODA3MzMyOGEyYzIwODFjYmIyYTk2Y2QxMjY0
ZGJlZjEwHhcNMjQwMjE1MTgyMzIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzUxNmJiOTA2ZmJmZmRmMjdkMTk3NDNiMGU1NzA4NTRlZWIzMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5yo/YGWLSZJf3xIAHnngSvulLNm
0FVXNi0ILdkmAeAqzxCPmCkKbnT4RRe+dnZuwF9z7a/IWWX3eI2pt9ttMCkiZU9A
pQ299KiOzT8zizNkqgUIW5KkhZJ6mWjjgwLD5bSge1oollhCPb536/lc+3zKoBpO
HSkMNyjewn5+oMTuC2gcewIi8fb9n3rgsKTnGdYi0UcG5qCEP3iOeFaAeuxqrw9w
d8LbQVGuftAzWdE2bdu5E9kEzAzK+9SW66vW7bwwEhYKnX7uYctNSWr3mmNsZ1E4
Np84ksvMZ3UKV3BTN3whxZA71vksi/Qcnwuz+9RBpMaWQUbaj3c5va4WcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDdRa7kG+//fJ9GXQ7DlcIVO6zEhMB8GA1UdIwQY
MBaAFHoQ7iKAczKKLCCBy7KpbNEmTb7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhEdUlvQnpNb29zSUlITHNxbHMwU1pOdnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mYjE4MjctYTdlOS00NWM4LWI2NDMt
NzZlMDdhNTc3ZTRkLzEvTjFGcnVRYjdfOThuMFpkRHNPVndoVTdyTVNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mYjE4MjctYTdlOS00NWM4LWI2NDMtNzZlMDdhNTc3ZTRk
LzEvZWhEdUlvQnpNb29zSUlITHNxbHMwU1pOdnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPnp+MA0G
CSqGSIb3DQEBCwUAA4IBAQAypE29X9ZI9jVBdl+Y5/R0gq0vCKpNxUhtQzAX/JSK
zGauug2XHeVGnWPKD9UD9ojqY5EKurWylDkPXZ8dwR9KpRFDeFclJTrXUAGcHgf6
oOHFCPRiMWD/eNO0IiNjokZne9zit8UyYUVAyZGQPjy4e7CVPJY/uhOtPXvgmquq
3SWh+WW4WFbgGpHZc3cyenWR2Wr7rnqtMjFEDRZ5NSJBzhjgPYzOqsN7v7GRU4EM
erfVNWQSwNU0fpHV/ZlxeP/Tt6Uqflb/fy2Bs9aA/PjdKN2ly6aMPhwZgE/ZZWlg
ZeWwVwsC3dqSJesAzGj+Mh3WqZfwcwgbhVqfipfDUa39
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:56 2024 by rpki-client on console-ams.rpki-client.org