Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/wOA82OFUQKjSi0CzWR5Ko7ixNDg.roa
File: wOA82OFUQKjSi0CzWR5Ko7ixNDg.roa (raw, json)
Hash identifier: 4ACt1EG2RsEXYA9y99O2SxnaKhByhoyzwPhJquBqgDQ=
Subject key identifier: C0:E0:3C:D8:E1:54:40:A8:D2:8B:40:B3:59:1E:4A:A3:B8:B1:34:38
Certificate issuer: /CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Certificate serial: 0185778A7B728603CD4B5C15F2C93A843FB4
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/wOA82OFUQKjSi0CzWR5Ko7ixNDg.roa
Signing time: Tue 03 Jan 2023 12:10:42 +0000
ROA not before: Tue 03 Jan 2023 12:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400522
IP address blocks: 2a11:f700::/29 maxlen: 29
2a12:7240::/29 maxlen: 29
2a11:ed00::/29 maxlen: 29
2a12:a1c0::/29 maxlen: 29
2a12:a740::/29 maxlen: 29
2a09:d840::/29 maxlen: 29
2a12:7340::/29 maxlen: 29
2a12:a2c0::/29 maxlen: 29
2a12:7440::/29 maxlen: 29
2a11:ef00::/29 maxlen: 29
2a10:1c80::/29 maxlen: 29
2a12:9f40::/29 maxlen: 29
2a12:7540::/29 maxlen: 29
2a12:a040::/29 maxlen: 29
2a11:f100::/29 maxlen: 29
2a12:a5c0::/29 maxlen: 29
2a09:3440::/29 maxlen: 29
2a12:a140::/29 maxlen: 29
2a12:a6c0::/29 maxlen: 29
2a12:72c0::/29 maxlen: 29
2a12:a240::/29 maxlen: 29
2a10:2500::/29 maxlen: 29
2a12:73c0::/29 maxlen: 29
2a11:f300::/29 maxlen: 29
2a09:fe40::/29 maxlen: 29
2a12:74c0::/29 maxlen: 29
2a12:9ec0::/29 maxlen: 29
2a11:f500::/29 maxlen: 29
2a12:a540::/29 maxlen: 29
2a12:9fc0::/29 maxlen: 29
2a09:72c0::/29 maxlen: 29
2a09:33c0::/29 maxlen: 29
2a11:f700::/30 maxlen: 30
2a12:a640::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:8a:7b:72:86:03:cd:4b:5c:15:f2:c9:3a:84:3f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Validity
Not Before: Jan 3 12:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0e03cd8e15440a8d28b40b3591e4aa3b8b13438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:b2:7e:fc:80:a3:c5:d9:77:6b:a8:85:7f:
97:51:c5:d1:f1:de:04:37:0e:f9:ea:99:ec:9c:96:
9c:a7:98:83:75:e5:60:59:cd:bb:b4:5e:21:3c:b1:
0f:cf:b4:99:6c:b2:da:15:d2:8a:77:12:f9:82:bd:
17:5c:ac:a5:7b:8e:e5:79:65:31:77:09:90:0b:6e:
a2:bd:98:08:3f:28:30:99:b7:76:ca:67:2f:ec:a5:
76:8e:13:f9:62:dd:10:5a:db:4e:00:9f:77:5f:85:
4d:53:e9:5d:2e:3a:c9:1f:f1:16:cb:b6:65:61:4d:
4b:9f:54:1d:60:17:c8:ce:dc:a9:a6:03:e4:b1:2a:
02:44:06:49:74:af:b0:4d:c5:10:a1:6f:bc:6a:88:
1a:f1:4d:fb:9b:70:d9:59:55:8d:bc:54:d9:4f:a9:
ef:cf:82:3d:b8:37:80:18:a5:ba:06:b5:1e:bf:bb:
70:51:68:08:f9:d3:1b:03:fe:3b:47:48:7f:49:84:
33:75:ad:11:5e:70:36:d0:1a:9c:72:da:ad:11:e5:
64:7e:d4:ba:fc:9e:4c:38:0f:34:d0:46:b9:6c:5a:
80:46:83:45:08:3b:1f:94:34:58:df:d4:70:b8:b3:
7f:b8:c0:50:11:b7:ec:8b:aa:70:89:84:22:4f:2e:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E0:3C:D8:E1:54:40:A8:D2:8B:40:B3:59:1E:4A:A3:B8:B1:34:38
X509v3 Authority Key Identifier:
keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/wOA82OFUQKjSi0CzWR5Ko7ixNDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:33c0::/29
2a09:3440::/29
2a09:72c0::/29
2a09:d840::/29
2a09:fe40::/29
2a10:1c80::/29
2a10:2500::/29
2a11:ed00::/29
2a11:ef00::/29
2a11:f100::/29
2a11:f300::/29
2a11:f500::/29
2a11:f700::/29
2a12:7240::/29
2a12:72c0::/29
2a12:7340::/29
2a12:73c0::/29
2a12:7440::/29
2a12:74c0::/29
2a12:7540::/29
2a12:9ec0::/29
2a12:9f40::/29
2a12:9fc0::/29
2a12:a040::/29
2a12:a140::/29
2a12:a1c0::/29
2a12:a240::/29
2a12:a2c0::/29
2a12:a540::/29
2a12:a5c0::/29
2a12:a640::/29
2a12:a6c0::/29
2a12:a740::/29
Signature Algorithm: sha256WithRSAEncryption
3f:7f:5c:41:d3:0d:ee:83:f6:d1:bc:64:d0:cd:8e:10:f5:88:
a7:b8:74:e7:29:7f:ac:35:01:86:9a:f8:96:d7:26:ff:30:b3:
12:6b:27:7f:ec:4c:4c:f8:02:d2:f4:59:70:b2:ce:87:91:6b:
a0:88:6b:bb:6f:d8:c0:2d:56:0b:82:8c:38:f4:9e:b9:1d:4c:
74:e1:09:e5:7f:52:ec:47:31:be:5d:0e:0c:f8:51:f5:87:b8:
5b:f2:5e:cd:4f:55:38:4a:bb:b1:de:c7:d7:d9:49:25:12:08:
3d:e2:5f:33:57:7b:6a:90:5e:70:e7:38:63:d4:e7:a1:a5:8e:
e0:2b:f3:d7:53:a9:9e:2a:f0:b2:88:76:17:6a:cb:b4:a6:53:
47:b5:f5:da:31:cc:98:2a:ad:c9:da:63:c9:fe:d9:fe:b0:8b:
7a:00:ea:e7:2e:50:08:0a:4f:2a:a1:24:9d:c6:2c:cc:03:23:
5f:cc:c3:ee:4e:f9:5c:43:cf:ea:cc:16:58:11:ef:6f:cb:13:
6b:21:3f:01:50:2f:f5:51:01:d5:43:9f:d3:33:fd:cf:aa:c8:
a3:c8:79:13:18:bb:26:68:b8:75:8c:1a:6b:83:d6:11:b8:04:
fb:93:81:22:2c:61:54:74:ab:df:85:ed:b8:85:e4:96:42:2e:
b8:fa:e8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:33 2023 by rpki-client on console-ams.rpki-client.org