Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/_IU6W5HJfX8PbDXNpe9wricqWvA.roa
File: _IU6W5HJfX8PbDXNpe9wricqWvA.roa (raw, json)
Hash identifier: ivy99X6Btlu0O6jTjjLLhuU4FvcIrmyVKZjOyZH6WPg=
Subject key identifier: FC:85:3A:5B:91:C9:7D:7F:0F:6C:35:CD:A5:EF:70:AE:27:2A:5A:F0
Certificate issuer: /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Certificate serial: 018571FA17EA7354C4F53AFE1A0A796DD714
Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/_IU6W5HJfX8PbDXNpe9wricqWvA.roa
Signing time: Mon 02 Jan 2023 10:14:53 +0000
ROA not before: Mon 02 Jan 2023 10:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208700
IP address blocks: 62.192.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:17:ea:73:54:c4:f5:3a:fe:1a:0a:79:6d:d7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Validity
Not Before: Jan 2 10:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc853a5b91c97d7f0f6c35cda5ef70ae272a5af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8d:dc:55:1b:c6:29:a1:06:64:1d:b3:5b:9e:
91:72:f4:a3:c7:10:84:71:f5:ce:b4:cb:d4:39:0b:
83:5a:32:7f:f6:6f:dc:cb:5b:a6:c3:1c:30:4e:ae:
9d:f9:98:34:5d:b5:6e:61:4d:73:d1:00:9a:bb:7f:
84:1b:00:24:01:c7:04:78:3c:51:7f:1c:b4:b0:f1:
1d:f1:25:ae:dd:41:ac:f2:84:c9:b1:c5:63:14:ec:
86:a3:5d:b3:cb:9c:36:76:6a:b1:1d:fc:21:0c:bf:
36:bd:36:59:67:a5:7f:62:7c:37:a6:f9:21:38:b8:
16:4c:9d:4c:30:e6:c4:5f:f6:a7:c4:fc:97:91:db:
1e:db:82:70:8c:bb:47:10:e7:c7:ea:48:3c:e0:f7:
7a:40:18:08:72:ef:71:c5:2e:ef:b8:1b:2a:5c:ec:
35:49:13:8d:3a:04:2e:18:dd:34:32:a9:26:62:a5:
11:85:b0:bf:a3:b6:53:0d:58:ee:41:49:14:28:30:
3b:25:0b:73:0a:e6:f4:96:38:cd:44:b1:88:ea:78:
3e:7a:77:4b:ca:b7:19:8f:60:b7:67:cf:bb:49:f6:
35:72:50:4d:6b:8e:d3:cb:8c:4f:38:d3:b6:85:f7:
58:44:2d:94:1a:f5:c1:00:87:3d:5a:5f:83:9e:6c:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:85:3A:5B:91:C9:7D:7F:0F:6C:35:CD:A5:EF:70:AE:27:2A:5A:F0
X509v3 Authority Key Identifier:
keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/_IU6W5HJfX8PbDXNpe9wricqWvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.155.0/24
Signature Algorithm: sha256WithRSAEncryption
39:dc:54:98:73:2c:74:72:c0:30:ba:b6:7c:92:fb:f7:04:78:
57:05:1d:9f:6d:fd:7b:3c:89:a2:85:3f:fd:4b:ea:98:ef:88:
7a:fd:23:67:3b:f5:8a:87:8d:12:0c:92:bb:40:bd:4e:5a:39:
c7:4a:1a:76:df:ac:49:6f:1f:1a:5b:db:61:c7:ad:3a:56:35:
23:04:a5:d1:78:bf:a2:79:cd:fb:0f:48:c1:4c:c3:ef:9c:c2:
60:6a:0f:30:74:d1:68:f1:ae:0e:fe:73:1f:0e:33:1a:51:1a:
0f:9d:9b:f3:e9:fc:b2:0f:e6:d6:5c:7d:f2:10:d3:dc:e7:a3:
07:a0:1d:7c:e2:58:10:70:36:e3:1b:98:1b:99:8f:e3:68:10:
74:c3:9a:f0:d6:b9:70:fb:6b:b4:ee:ea:68:ef:aa:2f:61:2a:
21:7b:e1:c2:6b:6d:bf:e4:fc:51:1b:2c:5e:f8:4d:d7:5d:f8:
37:b5:52:74:cc:7d:19:66:9a:51:56:01:c9:0a:29:38:13:1c:
ef:44:31:a9:bb:c0:22:f2:e6:42:c1:38:02:0f:4c:c6:cf:c5:
1f:27:0c:27:b0:52:b1:1c:0b:73:ec:0f:7e:b9:eb:47:ac:66:
e2:bf:f5:10:31:b0:48:e7:13:ff:d5:cb:2d:d7:1d:6e:9a:29:
8a:33:f5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:06 2024 by rpki-client on console-ams.rpki-client.org