Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/6ebCfs7CGTCI28qwmjszpNagCAM.roa
File: 6ebCfs7CGTCI28qwmjszpNagCAM.roa (raw, json)
Hash identifier: Ocn+iQdJg523rLgLeTpNWsRvFj1BV+q07dIpg0GXGgk=
Subject key identifier: E9:E6:C2:7E:CE:C2:19:30:88:DB:CA:B0:9A:3B:33:A4:D6:A0:08:03
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 01857255B24C07D669CC6394B955E63021FF
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/6ebCfs7CGTCI28qwmjszpNagCAM.roa
Signing time: Mon 02 Jan 2023 11:54:56 +0000
ROA not before: Mon 02 Jan 2023 11:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202232
IP address blocks: 62.228.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:b2:4c:07:d6:69:cc:63:94:b9:55:e6:30:21:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 11:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9e6c27ecec2193088dbcab09a3b33a4d6a00803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:d8:53:7e:da:71:9a:43:71:64:c3:af:8e:
c1:9a:33:ca:9f:fe:d0:9e:7f:8a:87:b0:59:ae:c9:
5f:fd:18:d0:a3:13:cc:07:95:88:0f:56:da:c5:3a:
67:75:ea:e3:37:f7:80:64:87:ca:26:4f:2d:bc:35:
71:d3:84:99:fc:7e:15:25:46:80:80:bb:44:e1:1e:
19:d4:58:54:b9:e6:71:3b:62:0c:f9:2c:6f:fc:ea:
68:8c:f5:94:32:62:f7:0b:1f:37:01:ac:b2:3c:1f:
7b:45:77:ec:83:b3:e7:df:f2:19:2b:f3:9e:67:27:
e2:fc:5d:45:51:3a:a4:24:17:4e:1e:05:de:e0:f3:
41:cf:d1:01:7f:bb:90:e6:95:10:de:1d:52:1e:3f:
8e:cc:ea:af:e7:18:b4:5e:d7:98:bd:ff:6a:a7:77:
73:4f:2e:70:24:cc:c4:9f:37:bf:76:cd:23:ae:25:
5a:60:72:7b:13:09:1c:83:fc:ff:de:12:e0:21:5d:
b3:df:38:f1:7a:9a:64:52:c9:7e:30:5e:49:bb:b2:
bd:1c:d6:30:06:28:40:3b:74:e1:a5:eb:03:b3:13:
cd:86:ab:68:d8:12:0e:30:83:3a:6d:f8:70:1c:af:
db:f3:96:fc:ba:88:37:db:28:12:28:bc:35:ab:61:
d0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E6:C2:7E:CE:C2:19:30:88:DB:CA:B0:9A:3B:33:A4:D6:A0:08:03
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/6ebCfs7CGTCI28qwmjszpNagCAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:2b:aa:c0:54:d4:01:a1:01:c0:ca:2b:aa:b4:da:3a:b9:8e:
99:55:36:d1:75:61:7d:20:76:2b:6d:f1:4e:6c:c7:81:50:69:
4c:d3:1f:72:3c:20:e1:6b:fe:c2:7d:c9:a1:5e:df:9e:00:40:
80:7f:8f:64:02:c3:d6:38:22:f6:3e:7f:e6:24:b5:da:07:5a:
90:3c:18:98:45:9a:b3:50:50:77:a9:52:09:77:c0:53:7d:f0:
1b:76:f6:26:60:24:87:e5:53:b1:76:d4:2b:89:15:76:e6:7f:
e5:72:18:1e:1a:62:4a:32:2e:fc:20:63:3c:2f:9c:a3:f5:b0:
32:5c:72:8f:f0:f2:2b:e4:9c:b8:5b:a7:57:8d:02:34:ae:cb:
6b:4b:f3:f6:6c:7a:d1:77:2c:11:31:96:ca:04:c7:b7:d0:50:
1d:99:51:74:ac:00:60:6e:f8:f9:7f:d9:1c:bf:c2:a5:b5:db:
46:06:d4:c9:15:72:66:23:46:aa:d8:bf:60:6c:fa:24:53:59:
ee:6d:09:37:14:87:df:84:42:a5:aa:71:39:0e:03:ec:6a:ae:
41:b5:64:4a:ac:21:19:ae:72:8e:0a:46:59:22:3d:8f:9e:4c:
33:75:e1:39:69:c9:17:3b:92:ce:95:2f:0a:d3:8e:d1:13:79:
a2:28:e0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:03 2024 by rpki-client on console-ams.rpki-client.org