Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/1-lE5juKKzAtwEsG2HKE7k0g-o98.roa
File: 1-lE5juKKzAtwEsG2HKE7k0g-o98.roa (raw, json)
Hash identifier: u4KmXykIXbbIGEFSCCtafO35JgR2LvegqFDD899Z4cc=
Subject key identifier: FA:51:39:8E:E2:8A:CC:0B:70:12:C1:B6:1C:A1:3B:93:48:3E:A3:DF
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01882EFDF1072B7B254F42CDA75F9E481900
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/1-lE5juKKzAtwEsG2HKE7k0g-o98.roa
Signing time: Thu 18 May 2023 13:12:54 +0000
ROA not before: Thu 18 May 2023 13:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199967
IP address blocks: 62.216.85.0/24 maxlen: 24
62.216.84.0/24 maxlen: 24
62.216.86.0/24 maxlen: 24
62.216.90.0/24 maxlen: 24
62.216.89.0/24 maxlen: 24
62.216.88.0/24 maxlen: 24
62.216.87.0/24 maxlen: 24
62.216.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2e:fd:f1:07:2b:7b:25:4f:42:cd:a7:5f:9e:48:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: May 18 13:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa51398ee28acc0b7012c1b61ca13b93483ea3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:92:af:ec:a8:99:b2:48:c7:52:48:de:88:99:
84:ef:bc:75:4a:33:fa:dd:d5:3a:19:b7:83:a0:19:
e2:61:84:d5:12:83:ad:6a:28:2b:62:b3:e9:a9:92:
00:bd:b6:d2:56:ff:a1:3f:5d:64:64:95:75:e5:9b:
03:ca:39:b2:72:d9:81:9e:94:38:47:de:98:56:a0:
7e:7d:cd:11:17:7e:82:8c:25:31:b9:a3:46:a4:27:
ec:19:30:38:11:bd:39:51:1c:4f:05:61:e2:9b:71:
f5:5b:b6:8f:07:19:fc:b8:f5:67:f5:72:bc:c5:44:
7c:69:1a:e2:a2:d2:9a:ee:fe:4c:ee:5b:53:0c:96:
fa:fc:33:20:0f:e6:ae:d7:2f:db:52:e6:f8:6f:61:
c0:a8:13:3e:b8:e3:78:ae:d0:84:31:b1:6e:5e:80:
54:5f:10:18:05:f6:5b:d7:32:d8:f2:dc:98:84:3a:
34:f2:83:a1:52:6a:77:da:f3:7b:6e:a8:d4:e4:4d:
94:2e:57:d5:b0:05:c2:21:d8:cb:44:c5:50:0b:a5:
75:e4:0a:c1:ce:4b:ea:fe:e0:62:0b:0d:5c:f5:73:
9b:5b:03:a5:ba:31:e7:ae:64:fd:07:7b:9e:48:cb:
85:87:4a:66:92:60:aa:69:6e:8f:bf:a7:f8:99:5f:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:51:39:8E:E2:8A:CC:0B:70:12:C1:B6:1C:A1:3B:93:48:3E:A3:DF
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/1-lE5juKKzAtwEsG2HKE7k0g-o98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.216.84.0-62.216.91.255
Signature Algorithm: sha256WithRSAEncryption
9d:be:94:fe:a0:ce:62:fb:2e:11:ba:8a:da:2a:ef:ef:a1:42:
bc:2d:c6:04:98:7c:8e:3f:84:0c:3a:a8:ac:ff:50:7c:70:aa:
2c:fb:63:07:d8:f8:38:73:bd:1d:f9:0e:ce:3b:33:bb:50:8c:
3f:40:46:9e:66:fa:b5:5b:4a:22:01:b6:2d:c1:15:25:27:b5:
66:ca:c1:58:74:f4:c9:05:e0:78:28:d2:7a:58:90:25:16:bf:
74:5a:82:40:c6:2e:20:bc:9c:25:2d:e0:e4:47:80:23:29:cd:
90:9f:7f:da:47:a4:f5:91:ca:a3:55:50:d1:f2:f0:41:cf:25:
c9:f0:93:d7:35:71:36:01:fd:b7:38:24:55:c7:0a:87:66:8f:
cb:8a:c4:d3:60:71:2f:70:05:de:44:a7:52:ef:95:88:52:31:
34:21:90:af:6e:73:3f:0e:4a:12:be:0a:b0:86:07:49:f8:21:
7d:95:b0:71:5b:b9:47:9c:b0:15:33:52:6f:5c:da:82:72:30:
46:8f:c8:de:4c:95:c1:8f:8a:ef:f5:44:e1:f5:06:4e:54:fd:
82:cd:b3:f7:5e:74:35:c3:65:57:d9:57:c4:4c:e6:0b:61:8e:
81:78:a9:37:e1:c7:4a:22:10:bd:d2:88:02:06:4b:a7:09:66:
6f:0b:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:16 2024 by rpki-client on console-fra.rpki-client.org