Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/HqAyWcQ2D6BoC65yWx-Z0Z34Kdo.roa
File: HqAyWcQ2D6BoC65yWx-Z0Z34Kdo.roa (raw, json)
Hash identifier: KzEYWTFmFSeIW+mraAI8RMA9LY6j1gVvE9R7YC1tFH4=
Subject key identifier: 1E:A0:32:59:C4:36:0F:A0:68:0B:AE:72:5B:1F:99:D1:9D:F8:29:DA
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 018570705FCB99D20E560747BEE266766006
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/HqAyWcQ2D6BoC65yWx-Z0Z34Kdo.roa
Signing time: Mon 02 Jan 2023 03:04:50 +0000
ROA not before: Mon 02 Jan 2023 03:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57573
IP address blocks: 62.33.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:5f:cb:99:d2:0e:56:07:47:be:e2:66:76:60:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 03:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ea03259c4360fa0680bae725b1f99d19df829da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9b:bc:24:6a:aa:8f:e9:ef:55:46:d4:6e:55:
ef:40:34:a5:3d:94:fa:4a:b0:62:f3:8c:42:48:5e:
7b:f1:8f:d9:f7:0e:1b:c0:cf:10:b8:c5:dd:83:08:
2d:0f:b2:56:7c:3e:13:53:3f:a4:dd:f7:ac:72:b5:
50:e1:a5:93:7c:50:c3:16:c3:c1:23:30:4d:12:cd:
c9:6a:fd:a7:fa:a5:d0:48:0d:fe:c2:98:ee:3c:b7:
82:5f:48:84:23:21:ce:36:f8:56:3f:e4:4e:b5:99:
ca:6a:e4:81:87:9a:93:14:ca:e8:0b:0b:59:51:ad:
48:1c:73:ac:87:b4:81:84:53:6f:4a:95:fa:f9:a5:
32:80:12:4f:52:19:73:35:5d:77:b3:c4:c0:ef:51:
b4:d9:58:df:96:38:6e:9e:13:95:e5:7a:a0:b0:d3:
54:e2:ff:c1:2f:14:fe:7a:4b:70:2b:9c:95:c9:52:
6b:e3:0a:ee:a8:e0:0a:51:cd:73:2a:a8:48:0a:95:
a6:09:9d:7d:c9:b2:59:52:19:9b:b7:9d:14:cd:44:
6b:f5:85:30:8a:4c:c1:85:f0:13:94:b3:4e:0b:4e:
0c:3c:d9:06:4d:06:73:e2:f7:d7:d7:16:2d:ea:be:
b6:f2:b4:51:7e:8a:cf:6a:b7:41:df:96:8b:54:c7:
d1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A0:32:59:C4:36:0F:A0:68:0B:AE:72:5B:1F:99:D1:9D:F8:29:DA
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/HqAyWcQ2D6BoC65yWx-Z0Z34Kdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.33.100.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:03:a3:ef:c6:93:6a:03:c6:79:bb:11:ea:ad:90:66:17:e4:
f4:ba:e4:3c:7b:74:85:4b:69:88:91:52:c2:53:e8:32:b6:44:
91:7d:db:e0:8a:7a:ae:28:b1:21:ff:bf:30:be:fc:a0:99:91:
68:57:f2:10:3f:15:a4:06:13:c6:20:08:c3:3e:2c:8c:56:fe:
9a:4e:d4:4a:b6:90:b9:11:41:fe:94:39:2b:b5:2d:5b:2c:19:
96:28:84:94:b6:dc:a4:75:07:c8:e8:d8:32:61:18:1c:f7:07:
04:23:9c:14:31:9c:9f:06:71:b6:72:28:55:30:bd:38:8e:54:
26:51:76:cb:d2:86:e6:86:74:86:58:64:a0:a6:3e:09:31:6a:
95:e5:d1:8c:81:87:10:97:a8:14:d8:f5:fa:d3:01:29:b5:9f:
c6:11:7f:3e:9f:43:67:62:80:d2:65:33:e8:2f:aa:ad:90:7e:
cb:5b:26:14:3a:0c:58:77:5a:7b:03:81:3d:ff:00:93:6c:7b:
77:d5:76:be:78:38:fb:86:a4:3f:af:ad:18:dc:e7:2b:2e:44:
41:d1:5d:15:c6:cd:3c:9f:05:05:74:90:b7:64:ba:5b:02:77:
36:18:96:30:f2:39:00:71:ee:52:f9:91:a7:04:50:0a:1d:96:
5d:39:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:32 2024 by rpki-client on console-ams.rpki-client.org