Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/DtFYNWf_dRmgm1rxVTWjUeEj498.roa
File: DtFYNWf_dRmgm1rxVTWjUeEj498.roa (raw, json)
Hash identifier: JoVQOJrceW2eBZnYt5By4Z9yepnf7E8dKNLLHbBfKKc=
Subject key identifier: 0E:D1:58:35:67:FF:75:19:A0:9B:5A:F1:55:35:A3:51:E1:23:E3:DF
Certificate issuer: /CN=baecf4d5ed68aa6926357e49747ec70141131b1a
Certificate serial: 0187C16653524C7A1C1188B44EBA5D961774
Authority key identifier: BA:EC:F4:D5:ED:68:AA:69:26:35:7E:49:74:7E:C7:01:41:13:1B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuz01e1oqmkmNX5JdH7HAUETGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/DtFYNWf_dRmgm1rxVTWjUeEj498.roa
Signing time: Thu 27 Apr 2023 06:28:41 +0000
ROA not before: Thu 27 Apr 2023 06:28:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.233.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:66:53:52:4c:7a:1c:11:88:b4:4e:ba:5d:96:17:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baecf4d5ed68aa6926357e49747ec70141131b1a
Validity
Not Before: Apr 27 06:28:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ed1583567ff7519a09b5af15535a351e123e3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:98:d8:62:d7:61:95:47:bb:67:a7:d6:50:
a7:7e:32:dd:86:08:75:57:43:f2:85:29:b7:dd:d6:
af:c2:ac:3a:65:33:7d:83:87:3c:26:0f:16:d1:98:
18:61:c5:07:77:15:ff:ec:5b:51:f6:bf:75:96:16:
09:96:cc:7c:02:31:a0:55:02:5a:a8:dd:8f:3f:67:
f6:80:9d:c2:29:4c:58:9a:cd:45:90:d7:39:07:8c:
a6:cb:f5:3d:15:0b:e4:4f:af:e6:e7:28:f8:de:72:
ce:a9:8b:a7:09:bb:d0:ed:ea:2e:f9:80:e8:c3:d7:
4e:82:e8:69:ae:a0:e8:bc:1f:6d:45:a7:92:07:4c:
4f:dc:36:cf:c4:44:4a:4b:f6:34:27:fe:2d:3a:74:
c0:cc:08:5b:b7:95:af:0b:f3:19:fb:dc:fd:b8:67:
22:59:53:fd:76:dd:4c:76:1f:72:87:ce:65:e3:ce:
b5:4e:cf:8a:32:8f:fa:0b:78:fd:21:6f:36:c4:00:
b2:39:13:56:9a:73:89:04:77:4c:a0:70:11:be:7c:
ed:de:37:36:8f:97:8d:93:4a:f4:54:bf:ce:0a:37:
3c:73:dc:55:c5:52:a9:d1:31:60:43:c5:6a:68:a4:
d4:c1:fc:c4:cc:89:cd:bc:81:c3:53:c8:d1:62:4d:
e3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D1:58:35:67:FF:75:19:A0:9B:5A:F1:55:35:A3:51:E1:23:E3:DF
X509v3 Authority Key Identifier:
keyid:BA:EC:F4:D5:ED:68:AA:69:26:35:7E:49:74:7E:C7:01:41:13:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuz01e1oqmkmNX5JdH7HAUETGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/DtFYNWf_dRmgm1rxVTWjUeEj498.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/uuz01e1oqmkmNX5JdH7HAUETGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.59.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:89:ef:c7:f7:20:00:59:82:ed:1f:e3:2a:27:49:5c:32:28:
07:18:28:28:64:9e:02:87:2c:f0:93:4d:d2:05:ad:9e:33:66:
87:60:ba:e7:56:50:72:2a:34:21:31:02:c1:a4:b4:2d:33:e8:
99:3f:db:dc:00:45:4c:a7:00:a8:71:97:8b:6d:07:5e:0e:c5:
90:7a:b6:50:82:3c:12:d7:65:b6:e9:6c:86:e5:82:09:96:ae:
67:29:47:13:e9:81:10:6c:13:2c:d5:01:a5:3a:2f:70:f7:1e:
61:b2:25:d3:e1:78:a2:ce:13:7b:51:b2:07:2d:66:ba:ca:09:
3a:34:7b:1f:ed:eb:6b:3e:16:d0:c9:82:6f:01:82:37:93:61:
93:16:44:a9:8b:14:3e:14:68:24:4e:69:ae:ed:3a:b6:21:5b:
d3:9f:7b:26:fd:98:c6:2f:46:0d:bb:5a:e5:aa:a0:fb:ab:02:
6b:eb:1b:51:99:8d:7c:07:33:87:19:4f:29:70:68:c9:9a:da:
82:7c:da:cf:c7:8b:fa:ec:a8:85:4b:07:8f:b9:1b:ff:99:0e:
bc:96:dd:ec:0b:67:0c:84:18:c2:94:87:73:36:26:5d:dd:e2:
50:7a:98:c9:47:0b:9f:f0:90:80:18:61:87:5d:f1:c1:55:28:
20:b7:22:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:54 2023 by rpki-client on console-fra.rpki-client.org