Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/4ThCAKwEnqG_AuwCI1cn6LIkVvQ.roa
File: 4ThCAKwEnqG_AuwCI1cn6LIkVvQ.roa (raw, json)
Hash identifier: xQBqq2chDzO1y6hnTXl8XeQYnJ98M92XWVDieR0effs=
Subject key identifier: E1:38:42:00:AC:04:9E:A1:BF:02:EC:02:23:57:27:E8:B2:24:56:F4
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 01857255B5EED032A7385C7E4006C371B33E
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/4ThCAKwEnqG_AuwCI1cn6LIkVvQ.roa
Signing time: Mon 02 Jan 2023 11:54:57 +0000
ROA not before: Mon 02 Jan 2023 11:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207971
IP address blocks: 62.228.246.0/24 maxlen: 24
62.228.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:b5:ee:d0:32:a7:38:5c:7e:40:06:c3:71:b3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 11:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1384200ac049ea1bf02ec02235727e8b22456f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:30:16:13:df:3e:a6:eb:7e:97:a5:b6:8d:
f4:b3:4a:5a:c6:a6:ea:b9:d2:07:cd:8b:e0:9d:51:
e1:49:85:36:d9:56:3a:51:50:d3:cc:35:c9:eb:35:
67:e9:aa:f1:87:0b:2a:1a:4c:d7:8e:4c:f3:5d:da:
91:89:8d:f6:e1:31:49:7c:bd:b6:85:d9:53:ee:22:
31:6a:99:1b:a1:85:c6:e4:74:f0:93:d4:59:06:51:
ad:4f:72:f6:19:52:0e:08:03:2b:d5:41:09:bb:9f:
44:97:cd:a0:61:d6:b4:dc:f8:09:68:5d:95:99:4d:
9d:08:0c:ea:1e:dd:71:b5:75:7c:d0:39:4d:08:e7:
00:bd:f1:1d:90:7a:2f:a5:95:95:88:48:1d:00:ef:
32:ca:2e:d2:12:95:ef:df:7c:42:89:7e:81:e5:23:
79:9b:fe:1a:bd:e1:15:35:79:f6:25:42:84:4c:d0:
22:fc:e3:c6:50:77:6c:16:df:fa:f6:a8:fe:29:b7:
85:ab:02:1c:09:01:45:a0:3b:dc:55:36:9a:43:03:
0b:3b:03:ed:0f:6e:c2:3b:77:b4:2c:7f:be:a8:15:
cb:b8:51:ff:ff:06:02:2a:14:1c:3b:ab:bc:98:6d:
08:02:3f:e3:0b:55:af:2e:83:20:8c:dd:0e:90:35:
40:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:38:42:00:AC:04:9E:A1:BF:02:EC:02:23:57:27:E8:B2:24:56:F4
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/4ThCAKwEnqG_AuwCI1cn6LIkVvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.246.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:20:e2:7b:0f:ea:32:f3:34:4f:4c:d2:68:ce:81:f7:a5:bf:
0f:98:21:ff:64:27:67:47:70:21:d0:33:c0:fd:c1:c4:3e:d3:
92:4f:3b:9e:5f:ed:eb:99:df:a0:e9:15:e6:ee:2e:fd:ff:02:
80:4d:a6:eb:a7:a0:11:40:f9:3d:7b:e4:38:12:77:97:73:a0:
bf:dc:db:4c:46:02:f6:66:31:51:6f:76:7a:7c:ed:83:a2:60:
2c:16:41:e1:f0:97:df:97:c8:3d:c3:e1:b4:92:dc:df:f7:e5:
f6:5e:26:d7:49:40:cf:87:33:18:15:7b:fe:f5:66:5b:2c:e9:
da:5e:40:fb:b5:87:1d:72:e7:f8:ea:06:a1:16:f5:44:45:8b:
1a:6e:4c:03:00:11:5e:5b:08:71:5a:82:eb:a2:cf:f3:2c:d5:
95:0a:de:62:91:ba:5a:59:b6:88:3d:c1:fb:90:67:7c:3d:f1:
be:2c:5f:22:10:f9:2a:a3:3f:73:13:45:1c:c1:61:be:29:f4:
6d:36:d1:67:0f:d9:5f:1c:16:f8:94:58:34:79:24:88:fc:2c:
5b:29:2c:2f:a1:85:79:3e:2e:b6:db:51:69:28:16:7e:52:19:
d3:c1:d4:09:be:43:dd:e5:16:54:50:e9:af:58:37:42:11:cf:
06:be:58:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:03 2024 by rpki-client on console-ams.rpki-client.org