Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/1-LjhYmuBelstPn5TT8-3UkBMOI8.roa
File: 1-LjhYmuBelstPn5TT8-3UkBMOI8.roa (raw, json)
Hash identifier: 8KX8Cktvh9WuMQXz+t83XgPGVUBKviCFtHecmAqIetA=
Subject key identifier: F8:B8:E1:62:6B:81:7A:5B:2D:3E:7E:53:4F:CF:B7:52:40:4C:38:8F
Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Certificate serial: 018572C35F069DEE553F1E5724CFC6AE3D05
Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/1-LjhYmuBelstPn5TT8-3UkBMOI8.roa
Signing time: Mon 02 Jan 2023 13:54:44 +0000
ROA not before: Mon 02 Jan 2023 13:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42504
IP address blocks: 62.122.64.0/24 maxlen: 24
62.122.64.0/21 maxlen: 21
62.122.68.0/24 maxlen: 24
91.192.152.0/22 maxlen: 22
62.122.67.0/24 maxlen: 24
62.122.70.0/24 maxlen: 24
62.122.66.0/24 maxlen: 24
62.122.69.0/24 maxlen: 24
62.122.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:5f:06:9d:ee:55:3f:1e:57:24:cf:c6:ae:3d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Validity
Not Before: Jan 2 13:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8b8e1626b817a5b2d3e7e534fcfb752404c388f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0f:3c:49:bb:74:fd:1c:5d:1a:34:08:48:0b:
5a:f9:c6:77:01:9f:0c:84:2f:7b:79:55:08:c2:d2:
82:d9:ea:12:ce:7a:bb:1f:54:e7:fd:bd:1e:e7:7c:
1d:75:73:05:82:c0:f6:86:fa:c1:64:c4:eb:34:aa:
5b:a5:ce:32:ea:93:a4:64:c0:99:cc:c1:43:e4:43:
dc:9f:f6:63:9f:84:f9:66:c9:76:5a:f4:ee:2c:3a:
33:0a:6b:e8:31:e1:c1:fc:8f:a2:a8:c0:63:db:03:
5c:b7:6d:63:d4:29:1b:ff:7d:52:fe:4e:bf:5c:ae:
cf:43:81:f4:8a:08:21:1a:f0:a6:30:30:2c:27:0e:
2a:b4:34:27:da:44:3d:a7:97:81:47:78:d6:2f:78:
c8:f1:8b:c1:d2:49:21:e0:76:41:82:0b:5b:89:49:
0a:f4:0a:8c:a6:49:3b:ba:ad:3d:4e:dd:43:6a:a0:
fe:a9:54:52:6a:88:ae:44:fb:95:22:73:9b:9e:22:
d7:54:16:8c:ea:42:5f:0f:8b:c9:80:df:e9:47:25:
92:28:80:db:59:d2:86:b5:49:07:85:b2:2c:74:64:
cd:04:40:ce:12:44:86:cb:56:e8:ae:0b:19:d2:96:
b3:cb:37:a8:82:c3:0a:5c:37:a7:9a:11:71:22:8b:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B8:E1:62:6B:81:7A:5B:2D:3E:7E:53:4F:CF:B7:52:40:4C:38:8F
X509v3 Authority Key Identifier:
keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/1-LjhYmuBelstPn5TT8-3UkBMOI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.64.0/21
91.192.152.0/22
Signature Algorithm: sha256WithRSAEncryption
67:af:7a:70:6a:e3:17:4d:56:53:78:94:11:25:c9:69:68:36:
29:30:4a:27:af:94:b6:3d:89:e5:f3:e5:6d:ac:74:9f:cc:b6:
61:c5:fb:80:c5:28:18:8a:28:2d:76:ae:46:83:b7:d8:88:4b:
ca:e1:81:8a:aa:d8:94:8f:1e:5c:7b:3e:a5:43:1d:23:fb:86:
30:5c:e5:76:1d:a2:2a:d2:c8:ce:72:06:da:b6:dc:d7:f7:71:
2c:f4:7e:14:8b:17:8a:b4:d9:74:4a:47:72:75:97:2b:64:45:
09:7a:88:19:1a:da:5a:08:8a:e8:9e:da:a1:48:0d:5c:22:0e:
0b:69:6e:93:c8:11:93:ca:61:fd:71:84:7d:dc:90:59:a9:84:
73:07:8a:41:9f:39:70:b2:ba:6b:2a:21:63:6a:32:45:70:95:
22:25:93:e4:2f:76:a7:2d:0b:3a:97:a8:8d:98:cf:99:c5:15:
8d:13:db:05:01:dd:05:0e:cf:e0:ee:97:cd:21:64:c8:b2:cf:
ef:cd:52:be:4f:77:ea:d3:5a:7a:ea:68:6c:59:45:bf:66:db:
87:b6:4a:c9:6a:58:e2:fc:6b:83:93:80:32:4b:7c:25:1a:8a:
bc:5a:17:39:db:13:7d:59:0f:2b:9c:ea:58:a0:49:dc:62:64:
0d:79:8d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:33 2024 by rpki-client on console-fra.rpki-client.org