Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/H3cSiGIUg0yNsGXTbTa1e_lq3qs.roa
File: H3cSiGIUg0yNsGXTbTa1e_lq3qs.roa (raw, json)
Hash identifier: dZg34vws5g9deWorw6QuE2mAQXFAY/+zhOYzQmidk9w=
Subject key identifier: 1F:77:12:88:62:14:83:4C:8D:B0:65:D3:6D:36:B5:7B:F9:6A:DE:AB
Certificate issuer: /CN=e9fb6dd5a5cbfd84da82e2759f6955622c1ee932
Certificate serial: 0185714C48DF662B16138B88588E380F2A4B
Authority key identifier: E9:FB:6D:D5:A5:CB:FD:84:DA:82:E2:75:9F:69:55:62:2C:1E:E9:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ftt1aXL_YTaguJ1n2lVYiwe6TI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/H3cSiGIUg0yNsGXTbTa1e_lq3qs.roa
Signing time: Mon 02 Jan 2023 07:05:02 +0000
ROA not before: Mon 02 Jan 2023 07:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.233.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:48:df:66:2b:16:13:8b:88:58:8e:38:0f:2a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fb6dd5a5cbfd84da82e2759f6955622c1ee932
Validity
Not Before: Jan 2 07:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f7712886214834c8db065d36d36b57bf96adeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:ae:c4:e8:f2:e5:20:fe:e5:51:c4:cd:dc:
27:b9:72:63:c0:37:2e:02:41:7b:c7:69:7e:6d:65:
71:57:df:50:a7:14:67:bd:dd:5c:2c:9b:28:f6:d3:
82:ea:32:fd:42:a0:92:9b:c7:fb:57:db:1f:37:02:
60:1c:00:f7:4e:ec:b2:23:dd:40:77:ef:08:25:b5:
0a:f7:0a:66:19:38:81:e6:1a:3d:b8:d2:11:f5:14:
69:12:26:d1:0b:ea:66:f5:89:c9:5a:b5:5b:8c:14:
f8:15:e0:cc:56:7e:01:df:59:d1:34:af:ea:a0:d8:
52:24:9a:c9:fb:1b:3d:a9:c3:67:3f:b7:f3:89:22:
ed:c0:0f:11:0a:09:1d:47:97:51:06:b1:d8:82:bd:
b4:5e:6e:81:01:a8:af:0d:2a:8f:1e:65:96:04:81:
c6:16:ab:fb:01:dd:d3:e8:8e:ed:20:0a:c8:60:08:
0d:c6:de:2c:51:06:c7:d7:e2:18:b0:5a:3d:50:56:
c1:08:31:9e:21:a1:c8:a9:b8:23:43:94:6a:4a:ed:
6c:d5:23:4d:87:7c:bb:82:5d:ab:83:48:9d:21:50:
5b:d9:c1:62:0d:3d:72:cc:1a:76:e8:f3:48:63:5e:
eb:67:26:5f:f4:10:14:81:5a:6a:e5:5d:67:6c:28:
66:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:77:12:88:62:14:83:4C:8D:B0:65:D3:6D:36:B5:7B:F9:6A:DE:AB
X509v3 Authority Key Identifier:
keyid:E9:FB:6D:D5:A5:CB:FD:84:DA:82:E2:75:9F:69:55:62:2C:1E:E9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ftt1aXL_YTaguJ1n2lVYiwe6TI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/H3cSiGIUg0yNsGXTbTa1e_lq3qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/6ftt1aXL_YTaguJ1n2lVYiwe6TI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.46.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:2a:a0:de:42:c5:dd:d5:ce:18:75:b4:27:b3:10:a1:69:f7:
08:7e:5a:0d:d8:63:44:d1:92:c0:ca:92:ca:0a:24:b8:7c:18:
fc:a0:09:35:5a:9c:23:71:5e:6f:2a:46:67:3b:cc:97:50:06:
49:b0:a1:53:6f:cc:8e:a6:65:40:75:89:fc:31:36:be:6e:0b:
b5:2e:35:b7:d7:f1:fa:d4:a0:37:9c:98:ea:9f:84:7a:c8:c6:
35:89:10:02:58:7f:43:18:5d:cd:0d:b1:e3:d6:8c:67:8d:53:
41:6c:3e:7a:0a:c4:91:16:53:c1:21:e6:fe:b0:e5:d5:8d:e0:
1b:99:9c:9a:a9:d2:ab:33:70:91:0f:11:22:85:49:57:40:df:
fa:fb:4e:45:5f:ee:e0:dc:36:d1:81:88:16:fb:d5:3c:a2:40:
db:f8:00:f9:36:b7:44:dc:82:a0:3b:f2:8e:f7:16:aa:dd:39:
0f:fa:7c:e8:e5:5c:40:ca:49:8a:3c:ef:a9:7f:a5:76:eb:61:
d2:60:d2:f1:99:53:d7:71:d0:4e:d8:2a:d6:72:db:ce:d4:ab:
85:f7:88:b9:6f:8a:83:ae:c8:ad:02:52:77:9f:df:e3:be:f5:
80:ea:85:19:c1:30:4c:e8:28:ce:8e:eb:71:3f:4b:fd:5d:1b:
a3:14:3e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:32 2023 by rpki-client on console-fra.rpki-client.org