Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/LiufPI6Znhm5KrEe1GbxO_MXg-A.roa
File: LiufPI6Znhm5KrEe1GbxO_MXg-A.roa (raw, json)
Hash identifier: +5eX9ACUPmYLUZ6G/Uj1GDt8P6tfpDFP49IedKzcqMU=
Subject key identifier: 2E:2B:9F:3C:8E:99:9E:19:B9:2A:B1:1E:D4:66:F1:3B:F3:17:83:E0
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 018CC42450C4EA175D3FB8A14B643B094EAE
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/LiufPI6Znhm5KrEe1GbxO_MXg-A.roa
Signing time: Mon 01 Jan 2024 08:29:23 +0000
ROA not before: Mon 01 Jan 2024 08:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39719
IP address blocks: 62.177.24.0/21 maxlen: 21
62.177.24.0/24 maxlen: 24
62.177.30.0/24 maxlen: 24
62.177.29.0/24 maxlen: 24
62.177.25.0/24 maxlen: 24
62.177.31.0/24 maxlen: 24
62.177.26.0/24 maxlen: 24
62.177.28.0/24 maxlen: 24
62.177.27.0/24 maxlen: 24
81.23.92.0/22 maxlen: 22
81.23.80.0/20 maxlen: 22
81.23.84.0/22 maxlen: 22
81.23.84.0/23 maxlen: 23
81.23.88.0/22 maxlen: 22
2a12:1d40:1::/48 maxlen: 48
2a12:1d40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 04 Mar 2024 07:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:50:c4:ea:17:5d:3f:b8:a1:4b:64:3b:09:4e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Jan 1 08:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e2b9f3c8e999e19b92ab11ed466f13bf31783e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:b7:2d:9c:e2:eb:4b:24:eb:86:02:1a:8b:
73:21:24:21:46:be:b3:f5:1f:b7:89:c3:86:dc:3f:
82:eb:91:50:2a:ce:1c:43:7c:d0:b8:07:ec:de:7f:
cc:62:6f:a5:65:f3:28:b7:d9:c0:35:b6:aa:02:4d:
f5:af:9f:1e:d0:86:60:02:ef:56:3a:b4:d9:8e:2f:
d7:19:7a:57:12:8d:cd:ff:21:f5:96:b7:01:ba:fd:
23:e4:1f:9d:bb:e6:2c:6b:cd:5d:72:b2:ee:e9:f8:
09:b1:e8:4f:25:0b:fd:dc:65:c7:fd:5e:83:3c:60:
ff:b6:a2:81:72:ab:db:40:fc:fd:4d:e3:42:54:57:
ee:6d:39:84:a2:cc:83:e2:aa:46:c7:9a:e9:af:0b:
5a:7c:73:20:8f:52:11:0b:86:3f:57:0f:27:0b:f8:
a4:76:9a:43:65:dd:c3:22:e5:57:2c:c8:6d:8b:d4:
37:8b:9b:c7:a8:a3:a0:2b:19:36:94:73:25:b0:94:
06:97:1b:87:11:d2:34:c3:79:65:ed:c1:35:00:41:
d0:cf:21:ca:09:84:30:f0:8d:8c:2d:a8:0a:24:e8:
26:dc:a6:a9:18:1e:a4:93:f0:72:d3:3f:27:6a:e7:
c9:de:c1:2a:6c:95:1a:ad:1d:49:4e:37:84:7c:86:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2B:9F:3C:8E:99:9E:19:B9:2A:B1:1E:D4:66:F1:3B:F3:17:83:E0
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/LiufPI6Znhm5KrEe1GbxO_MXg-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.177.24.0/21
81.23.80.0/20
IPv6:
2a12:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
4f:31:c8:7e:2e:6b:1f:99:f7:fc:36:0d:49:e8:fd:c1:8b:86:
71:fa:87:93:7a:51:8b:b6:10:0a:7f:c3:4b:7f:6d:6b:eb:d8:
7a:6d:97:42:35:b4:66:84:82:8a:ad:8a:91:9a:eb:28:fa:b6:
56:cf:3f:e3:d6:6a:5f:6c:bd:85:03:06:cc:40:b8:a1:93:7c:
92:10:db:68:70:7c:05:dc:15:16:4b:48:99:40:bd:7c:c3:56:
7e:c3:6a:1d:42:70:09:aa:27:d2:1e:a7:c6:4d:c5:db:f4:e7:
c8:06:31:c3:27:47:18:e3:80:1d:76:19:41:7f:5d:c3:bb:55:
fc:2d:fd:3e:13:f7:19:a6:36:8b:c5:06:b0:0a:be:2a:fd:9b:
a8:67:db:d4:6c:57:09:99:6d:d4:46:7a:8b:62:32:92:9c:ad:
f4:eb:d7:37:e0:cf:7b:30:0c:59:fa:54:9b:7c:ad:d2:4c:1c:
aa:f1:97:da:23:3a:0b:9b:c6:3d:f4:2f:e0:0a:18:1a:fb:f5:
07:f5:19:ce:b1:6d:04:ef:64:b2:1e:61:9a:28:61:ac:58:33:
3f:75:da:5a:33:2e:a2:80:cb:0c:db:e8:63:e0:99:b7:c7:7f:
b5:1c:57:69:0e:0b:e9:14:8e:48:8c:51:dd:5d:32:d4:8d:a1:
b4:69:1c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:55 2024 by rpki-client on console-ams.rpki-client.org