Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/RyxlRyGwCN76R3MAKqmJCJ_9SFI.roa
File: RyxlRyGwCN76R3MAKqmJCJ_9SFI.roa (raw, json)
Hash identifier: MaDJtNiagv4oljtYxZ2pNCUUSDVkMTQphWKgIymaD1Q=
Subject key identifier: 47:2C:65:47:21:B0:08:DE:FA:47:73:00:2A:A9:89:08:9F:FD:48:52
Certificate issuer: /CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Certificate serial: 018CC500FD18290148CBFD2273615F2D024F
Authority key identifier: 2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/RyxlRyGwCN76R3MAKqmJCJ_9SFI.roa
Signing time: Mon 01 Jan 2024 12:30:25 +0000
ROA not before: Mon 01 Jan 2024 12:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50157
IP address blocks: 62.76.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 09:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:fd:18:29:01:48:cb:fd:22:73:61:5f:2d:02:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Validity
Not Before: Jan 1 12:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=472c654721b008defa4773002aa989089ffd4852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:d1:20:6d:6e:9a:43:b9:0e:bb:ef:4f:6f:
68:31:89:93:cc:72:ba:46:42:70:34:76:f4:69:94:
76:b1:e8:ae:6e:cd:0b:b8:fc:17:c9:dd:01:28:b2:
89:2f:be:26:ae:33:5e:ba:56:4e:bb:a6:ae:2b:eb:
11:0c:46:0b:c3:25:4d:3b:79:53:1e:3d:04:7f:39:
c1:65:62:4e:e1:23:6b:0e:a9:bd:ac:e6:d2:c7:99:
16:e9:7e:9f:84:55:62:48:74:c9:8b:99:0c:a7:df:
aa:e6:ba:1d:8f:b9:b5:dd:a2:12:6e:44:c1:d6:6e:
11:0a:7c:73:60:c0:e9:b9:8f:e7:03:84:cf:97:c5:
32:2f:15:15:49:76:9e:21:47:6f:4a:d2:0c:56:39:
c5:e8:cc:6e:80:3e:c1:ff:3e:7a:fa:60:f4:d9:d1:
51:d8:27:bb:b0:ee:54:75:c5:fc:cb:ad:bd:d8:b1:
22:0f:72:73:e6:71:54:ed:f7:48:fa:f7:26:ad:f6:
5b:8b:2c:9b:a6:c8:c9:0c:55:29:fd:63:0a:33:01:
4e:0a:9b:c6:5c:c0:ca:47:64:4c:66:53:44:01:6e:
92:ed:ca:14:ce:48:51:3b:e4:29:8c:63:f8:17:49:
09:71:6a:5a:93:3f:7e:45:cd:74:01:1f:62:4b:3e:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2C:65:47:21:B0:08:DE:FA:47:73:00:2A:A9:89:08:9F:FD:48:52
X509v3 Authority Key Identifier:
keyid:2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/RyxlRyGwCN76R3MAKqmJCJ_9SFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.121.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ed:b5:68:a7:f4:22:a9:99:ed:1c:97:dc:d4:e2:e4:9e:7b:
51:62:8e:7a:14:3a:25:ba:ad:76:6b:7a:5e:8b:e5:37:92:67:
a4:a0:10:6a:c9:ec:1a:11:dc:61:a0:d2:98:f3:07:0f:64:26:
f1:4d:1c:92:3b:00:96:3c:b2:83:90:5c:b1:52:dc:1f:56:9b:
e9:2d:21:fc:a8:95:bf:4e:06:9b:68:cd:f4:d7:9e:f9:20:d9:
a4:4d:4e:94:ed:ea:d9:82:a7:50:af:aa:0b:8d:b2:d9:f2:3c:
6d:d9:e4:43:e0:b4:b3:26:61:3d:1d:15:de:f4:b4:1c:5a:b4:
83:21:50:74:47:26:ac:28:ec:56:19:72:59:13:f0:11:5f:db:
93:3b:b9:b6:af:06:e2:01:00:55:dd:24:ce:b0:92:90:5a:3e:
00:8b:0c:14:36:b9:ae:d7:f7:11:5a:50:96:73:55:e5:67:20:
ac:89:c3:55:34:72:09:4a:58:98:30:19:60:bb:70:95:12:f7:
d3:f9:bd:e9:69:2d:7f:29:dc:37:db:4e:fb:27:83:30:95:15:
ce:2f:4a:7b:bf:5e:9d:4b:d5:29:76:c6:e7:20:67:68:9c:86:
75:19:a7:3e:89:8d:08:d4:47:72:34:f5:1e:87:86:de:00:73:
25:3d:7b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:09 2024 by rpki-client on console-ams.rpki-client.org