Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/szxkheApmg0SzCXy5gNW4KUKra8.roa
File: szxkheApmg0SzCXy5gNW4KUKra8.roa (raw, json)
Hash identifier: YOHgEBXOV6AIewWnU+T1C4MUpJ42BJKM+JTk55M/QK0=
Subject key identifier: B3:3C:64:85:E0:29:9A:0D:12:CC:25:F2:E6:03:56:E0:A5:0A:AD:AF
Certificate issuer: /CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Certificate serial: 0186074ED09D1DA4DA21AFDCE997C15C157A
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/szxkheApmg0SzCXy5gNW4KUKra8.roa
Signing time: Tue 31 Jan 2023 10:10:50 +0000
ROA not before: Tue 31 Jan 2023 10:10:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400522
IP address blocks: 2a12:7240::/29 maxlen: 29
2a11:f700::/29 maxlen: 29
2a11:ed00::/29 maxlen: 29
2a11:f702::/32 maxlen: 32
2a12:a1c0::/29 maxlen: 29
2a12:a740::/29 maxlen: 29
2a09:d840::/29 maxlen: 29
2a12:7340::/29 maxlen: 29
2a11:f703::/32 maxlen: 32
2a12:a2c0::/29 maxlen: 29
2a11:f701::/32 maxlen: 32
2a12:7440::/29 maxlen: 29
2a11:ef00::/29 maxlen: 29
2a10:1c80::/29 maxlen: 29
2a11:f704::/32 maxlen: 32
2a12:9f40::/29 maxlen: 29
2a12:7540::/29 maxlen: 29
2a11:f700::/32 maxlen: 32
2a12:a040::/29 maxlen: 29
2a11:f100::/29 maxlen: 29
2a12:a5c0::/29 maxlen: 29
2a09:3440::/29 maxlen: 29
2a12:a140::/29 maxlen: 29
2a11:f706::/32 maxlen: 32
2a12:a6c0::/29 maxlen: 29
2a12:72c0::/29 maxlen: 29
2a12:a240::/29 maxlen: 29
2a10:2500::/29 maxlen: 29
2a12:73c0::/29 maxlen: 29
2a11:f707::/32 maxlen: 32
2a11:f300::/29 maxlen: 29
2a09:fe40::/29 maxlen: 29
2a12:74c0::/29 maxlen: 29
2a12:9ec0::/29 maxlen: 29
2a11:f500::/29 maxlen: 29
2a12:a540::/29 maxlen: 29
2a12:9fc0::/29 maxlen: 29
2a09:72c0::/29 maxlen: 29
2a09:33c0::/29 maxlen: 29
2a11:f705::/32 maxlen: 32
2a11:f700::/30 maxlen: 30
2a12:a640::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:4e:d0:9d:1d:a4:da:21:af:dc:e9:97:c1:5c:15:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Validity
Not Before: Jan 31 10:10:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b33c6485e0299a0d12cc25f2e60356e0a50aadaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:76:f7:e3:47:37:fe:74:06:21:7c:1b:f6:
43:e3:c6:18:77:16:04:55:ea:77:16:01:62:3a:d4:
02:9d:79:8f:9a:29:29:42:ad:2b:69:f5:2f:f8:92:
59:02:94:41:44:27:ad:73:79:7a:89:dc:22:8f:fe:
4e:0e:75:9a:d1:dc:f6:f0:38:79:4c:4c:67:98:c8:
00:fd:8f:59:63:51:ea:09:7e:e5:70:f9:6a:34:6a:
70:08:ed:aa:52:6c:ae:00:64:8e:c4:b5:b9:36:0d:
b5:0c:eb:19:14:27:2b:7f:89:f1:7b:8c:ab:5e:3d:
dd:c3:b1:2a:08:4f:5b:aa:22:51:e2:7a:d8:5d:59:
9d:9d:ac:c6:aa:c9:07:21:d0:16:7c:b1:25:79:de:
84:03:16:45:8e:8f:af:6f:52:fe:43:a9:d1:d0:7f:
9f:21:f6:d1:d3:55:3f:92:8b:6a:43:9d:9a:f1:63:
26:58:e5:93:1d:ac:5a:d8:22:01:61:ae:0d:73:d7:
8b:5f:8d:54:86:75:f7:13:22:22:0f:e4:e7:3f:d8:
cf:bd:3d:39:4c:9e:1d:83:7c:10:c5:e7:c9:d2:80:
b1:46:2c:c2:bc:59:12:52:08:c8:3a:2a:43:d0:9a:
90:05:a3:a8:01:e1:bf:71:99:77:74:4d:2d:14:52:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3C:64:85:E0:29:9A:0D:12:CC:25:F2:E6:03:56:E0:A5:0A:AD:AF
X509v3 Authority Key Identifier:
keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/szxkheApmg0SzCXy5gNW4KUKra8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:33c0::/29
2a09:3440::/29
2a09:72c0::/29
2a09:d840::/29
2a09:fe40::/29
2a10:1c80::/29
2a10:2500::/29
2a11:ed00::/29
2a11:ef00::/29
2a11:f100::/29
2a11:f300::/29
2a11:f500::/29
2a11:f700::/29
2a12:7240::/29
2a12:72c0::/29
2a12:7340::/29
2a12:73c0::/29
2a12:7440::/29
2a12:74c0::/29
2a12:7540::/29
2a12:9ec0::/29
2a12:9f40::/29
2a12:9fc0::/29
2a12:a040::/29
2a12:a140::/29
2a12:a1c0::/29
2a12:a240::/29
2a12:a2c0::/29
2a12:a540::/29
2a12:a5c0::/29
2a12:a640::/29
2a12:a6c0::/29
2a12:a740::/29
Signature Algorithm: sha256WithRSAEncryption
02:2c:f3:4c:ac:f2:4e:45:7e:d6:bf:8c:42:82:08:1e:1e:5f:
92:cb:4b:03:54:f3:a8:25:68:cd:89:d6:79:cb:7e:f3:91:c5:
44:37:c5:93:75:dd:74:62:5f:8f:38:24:ab:cf:90:4b:ac:16:
69:2c:ea:e1:f6:67:a6:97:fc:60:c2:7f:ea:92:ba:10:b4:ca:
53:2b:03:40:9c:b6:ad:4c:16:27:2a:dc:e8:a5:d4:44:18:cc:
00:c0:6f:8a:d9:af:88:39:da:b0:a9:4e:88:b9:a7:4b:6d:88:
18:65:84:a2:f8:4e:bb:61:c1:c4:d7:31:ad:d7:a1:19:7c:f6:
18:30:58:93:6f:f0:d9:1b:3b:0f:d8:f5:c7:83:d9:aa:b5:92:
d0:8a:c1:e9:3d:33:bb:b5:71:ca:2e:51:2d:39:cd:01:f4:6f:
aa:3f:d1:d8:43:57:03:ac:f7:94:e6:d5:8b:94:0f:9f:01:88:
40:4e:60:ef:52:a3:ae:47:b1:49:fe:cc:6e:5f:96:4e:e9:1a:
33:f4:d0:ab:4b:0e:26:c7:13:7d:d4:2c:7d:8f:be:cd:9d:2f:
32:bc:ab:c6:9d:5f:64:07:db:9e:d4:4b:8a:ca:ae:eb:28:92:
fe:eb:01:d8:b6:f1:e7:63:aa:b5:e7:a0:b7:91:46:61:37:4f:
d5:00:c9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:25 2024 by rpki-client on console-fra.rpki-client.org