Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/tsRhFcFU91Zi8UQ9f1rrgHABQic.roa
File: tsRhFcFU91Zi8UQ9f1rrgHABQic.roa (raw, json)
Hash identifier: hlPBcKELAOq4up5PGoriq9t2MgUKqSyxx1Ts3nqvQ8k=
Subject key identifier: B6:C4:61:15:C1:54:F7:56:62:F1:44:3D:7F:5A:EB:80:70:01:42:27
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 0187951088F0B7288750772247C3745DFA72
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/tsRhFcFU91Zi8UQ9f1rrgHABQic.roa
Signing time: Tue 18 Apr 2023 15:51:41 +0000
ROA not before: Tue 18 Apr 2023 15:51:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199009
IP address blocks: 62.76.250.0/24 maxlen: 24
62.76.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:95:10:88:f0:b7:28:87:50:77:22:47:c3:74:5d:fa:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Apr 18 15:51:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6c46115c154f75662f1443d7f5aeb8070014227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:43:92:73:16:4c:b7:90:8a:e3:90:b2:3b:8d:
5e:fd:6e:e7:ce:7a:94:a3:71:a8:6c:b3:45:1d:54:
0b:0c:6e:39:0d:7f:60:4a:04:ba:c8:34:63:9f:57:
48:81:3f:51:06:be:fe:60:6a:bb:c3:a7:40:2a:9d:
98:e6:7b:9b:eb:fe:fb:ca:54:c3:0c:80:53:80:4d:
45:9f:b6:e0:b2:70:93:ac:99:02:ba:a1:fe:2a:6d:
e5:04:7b:9a:27:b3:0b:13:74:43:e2:c9:ed:c2:5a:
de:d6:b5:52:eb:ee:60:b4:49:05:28:02:f2:3a:0b:
2e:66:34:82:65:4a:af:19:a1:62:16:e1:94:11:bf:
28:c1:39:c0:73:d0:08:63:fe:7a:8a:5a:d5:18:8a:
72:7b:a5:df:4f:03:da:87:2e:f2:2b:d2:3e:69:b5:
5a:56:3f:98:79:65:3c:59:c4:90:a8:85:62:83:15:
8b:12:b8:4e:69:17:2f:95:f5:d2:58:2b:20:21:93:
5b:56:73:8f:58:47:70:bd:19:6c:d4:6c:44:12:87:
35:d8:43:55:61:a3:8a:14:6f:0e:d4:68:fc:51:dc:
9e:56:32:eb:3e:33:f1:da:db:5d:62:8e:7f:20:5d:
dc:bd:03:5c:78:81:4b:39:fb:51:91:3f:91:c8:bc:
0c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C4:61:15:C1:54:F7:56:62:F1:44:3D:7F:5A:EB:80:70:01:42:27
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/tsRhFcFU91Zi8UQ9f1rrgHABQic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.248.0/24
62.76.250.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b3:93:cc:01:23:84:b1:29:0b:4a:17:a8:cb:1b:25:07:d3:
0c:9d:a8:aa:c9:ff:e4:54:4b:af:c0:89:8c:d2:67:d2:d6:39:
9a:71:23:a8:21:ee:59:0d:75:39:e3:8c:79:a1:3b:bb:15:d1:
36:db:ff:50:e9:90:77:92:ef:51:f9:11:1b:f5:b4:7e:28:d3:
bd:92:36:3f:31:11:79:4b:8f:1f:8b:8e:5a:5a:9e:2a:16:6e:
b5:b7:d2:a0:af:7a:af:b2:10:ee:04:04:7d:18:6e:ca:73:f3:
16:c9:66:67:ff:e8:a6:ac:28:36:43:1d:cf:5a:b1:5f:a0:5e:
38:b7:75:c5:3f:f0:bd:fe:a9:15:32:ec:e4:14:ec:ac:4f:61:
0e:de:30:16:eb:2e:b2:0f:ae:18:a9:7e:a4:05:8c:68:45:74:
58:5c:56:08:6f:aa:6e:bb:e9:e7:69:06:70:14:9e:da:6a:18:
4a:c7:b4:8a:f2:82:0b:50:fd:a5:0f:b7:fa:dd:cb:92:14:24:
a6:63:52:ae:67:70:b0:e1:07:87:c1:8a:63:81:b9:aa:db:37:
71:84:76:00:2a:76:a1:bb:13:24:c1:1b:65:29:81:72:cc:d5:
79:d7:00:3c:c3:d2:fd:d8:57:eb:48:fd:e5:79:87:9d:b5:fc:
7c:96:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:29 2024 by rpki-client on console-fra.rpki-client.org