Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/8V5AkJK_Us8GwBxyiz5q5ymJkCM.roa
File: 8V5AkJK_Us8GwBxyiz5q5ymJkCM.roa (raw, json)
Hash identifier: 3prA2tYHQhCJPTzFXyy73HDgR+8qqPlGKpkZ8X9Hv7A=
Subject key identifier: F1:5E:40:90:92:BF:52:CF:06:C0:1C:72:8B:3E:6A:E7:29:89:90:23
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 01857255AEBA7C9536E4C5F170729364858B
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/8V5AkJK_Us8GwBxyiz5q5ymJkCM.roa
Signing time: Mon 02 Jan 2023 11:54:55 +0000
ROA not before: Mon 02 Jan 2023 11:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51228
IP address blocks: 62.228.255.0/24 maxlen: 24
62.228.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:ae:ba:7c:95:36:e4:c5:f1:70:72:93:64:85:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 11:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f15e409092bf52cf06c01c728b3e6ae729899023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d4:a2:e0:ac:76:ff:42:2b:99:6e:f7:31:fd:
d0:a4:c1:bf:93:c8:20:38:28:af:77:a0:70:35:08:
dd:ca:0e:54:b6:36:96:31:40:c0:52:7c:19:f5:a1:
b4:f7:fc:e0:9a:e8:dc:da:9b:b9:82:d3:57:70:67:
22:4a:05:e5:1f:ad:48:f6:9c:24:ce:38:1f:14:1d:
5c:65:74:b1:f7:d9:19:8d:f8:7b:a7:03:c8:e8:18:
f0:bd:69:4c:b9:2c:06:c4:06:df:6a:76:e9:c4:28:
ec:1f:f1:24:b4:de:1c:f2:21:c9:62:f4:ec:c6:a1:
1a:d0:72:f7:c8:f0:2a:1e:ab:85:1b:58:7b:9e:98:
5d:b9:59:fe:e4:aa:cf:29:26:d0:22:55:9d:49:09:
a3:12:7f:44:d1:9e:91:3a:70:ce:67:ca:f5:2f:9a:
0d:40:8e:5a:e9:06:08:ab:b8:0b:52:90:af:38:6e:
fa:6e:3f:fd:b0:bf:81:e0:51:ef:32:a9:71:e5:36:
c5:af:5a:e0:fa:22:aa:f5:3a:34:f4:1e:8b:39:75:
04:41:27:90:01:63:7c:70:50:3e:92:63:c5:6f:e6:
52:4f:7e:5c:3e:4d:0e:29:c2:56:ba:45:4d:eb:54:
eb:cd:e6:a7:db:e8:57:31:d0:33:11:44:f5:83:5e:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5E:40:90:92:BF:52:CF:06:C0:1C:72:8B:3E:6A:E7:29:89:90:23
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/8V5AkJK_Us8GwBxyiz5q5ymJkCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.254.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:ec:c4:20:ff:4a:e0:b0:fd:ad:39:44:8f:8f:4a:9b:b5:d3:
87:4a:fd:cd:57:24:cc:60:b4:df:41:bf:20:b6:93:85:a7:c8:
7a:63:af:60:b3:5b:60:45:90:ff:b1:01:83:c7:84:46:64:bb:
01:8d:ef:b6:3b:21:c9:98:af:46:3e:06:a8:86:f1:39:85:7f:
32:29:db:f6:9c:07:c9:d4:b0:76:6a:83:fa:a5:e9:ca:8e:9e:
25:66:83:b5:83:7c:08:9d:77:6c:81:f6:66:8b:80:f2:45:bf:
7c:47:70:6b:7a:4e:ab:c4:6f:78:7e:31:1b:1a:dc:04:0a:d1:
75:84:06:1c:aa:c5:98:fa:3e:21:ce:41:a5:08:f3:75:b8:88:
27:3e:79:47:e0:66:9a:12:53:ef:af:bb:61:87:8f:03:8f:fd:
f4:d6:d4:e4:f1:81:43:02:fc:08:6f:ff:c5:f5:57:f4:73:cc:
91:7c:b0:70:c6:6f:39:9c:36:db:99:49:74:bd:4a:47:1c:cb:
60:c2:6f:07:67:94:8f:3c:c0:5f:98:9e:b5:d0:c9:49:04:f4:
10:08:75:22:d4:0c:01:38:ea:c4:e4:c3:40:a4:65:81:26:13:
10:a8:be:cd:20:a5:d0:f3:15:59:cc:6b:23:05:18:e2:a4:81:
58:ea:2b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:03 2024 by rpki-client on console-ams.rpki-client.org