Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/9Urcj9ljrK1S7SaEe-xZpoSlMiE.roa
File: 9Urcj9ljrK1S7SaEe-xZpoSlMiE.roa (raw, json)
Hash identifier: 6m50CBu1UnemUg7uVZYXEIlc9CE7qGZbG6OdhWkEZlA=
Subject key identifier: F5:4A:DC:8F:D9:63:AC:AD:52:ED:26:84:7B:EC:59:A6:84:A5:32:21
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 01857255B1A51B20D247A6A418D2CEB0B702
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/9Urcj9ljrK1S7SaEe-xZpoSlMiE.roa
Signing time: Mon 02 Jan 2023 11:54:56 +0000
ROA not before: Mon 02 Jan 2023 11:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201444
IP address blocks: 62.228.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:b1:a5:1b:20:d2:47:a6:a4:18:d2:ce:b0:b7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 11:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f54adc8fd963acad52ed26847bec59a684a53221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:4d:9c:1d:61:2f:ba:57:73:3c:33:4b:fc:
1c:ad:87:3d:1f:fb:1d:cb:93:99:ec:8e:76:e6:c0:
b0:0f:16:52:ba:3e:3b:76:bb:62:28:52:c3:2d:2a:
79:e9:d5:d3:5a:b3:43:fb:ee:2a:55:80:b1:14:40:
3e:d4:55:60:d6:60:5b:92:81:4c:06:82:97:81:dc:
d8:01:de:dd:53:73:51:d9:da:17:2d:22:13:01:f9:
5b:54:71:48:53:6b:b9:eb:7b:c8:11:22:e8:06:9f:
71:0f:a9:17:dc:bc:74:3c:cb:78:dd:69:94:db:10:
68:d8:98:65:24:7f:87:d6:84:8d:97:c1:fd:e1:41:
d2:85:f2:a3:68:a8:73:89:bc:87:29:9e:0b:93:9c:
11:af:52:e0:f8:56:e3:8f:fa:72:e8:3c:f3:75:ca:
7a:f2:ef:29:49:1b:15:7a:ed:c5:ea:a8:57:a5:84:
25:98:ba:84:51:0b:fb:f7:6b:4c:9e:57:dc:d4:75:
f7:9e:c7:ca:9e:72:b9:48:ab:7a:f2:38:2f:19:27:
b9:7b:87:9e:44:85:60:97:43:3d:bd:95:ff:25:4c:
fa:8d:39:d9:f2:de:e3:ba:37:69:78:c6:ed:14:b9:
56:27:95:b0:eb:35:d4:2f:aa:e5:d2:4d:4d:a7:84:
24:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4A:DC:8F:D9:63:AC:AD:52:ED:26:84:7B:EC:59:A6:84:A5:32:21
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/9Urcj9ljrK1S7SaEe-xZpoSlMiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.245.0/24
Signature Algorithm: sha256WithRSAEncryption
31:34:95:d0:66:da:48:49:a3:64:2c:4f:ba:88:5f:6f:37:8d:
42:cb:96:db:80:a9:ee:50:c9:8e:31:36:ac:a4:8e:a7:66:ac:
a3:79:0c:6e:c0:af:54:2b:5d:3d:ac:85:ac:a4:0c:c5:63:a2:
42:a9:36:73:59:d9:b4:20:1e:70:1d:55:8d:59:90:0c:9d:3c:
40:91:20:98:25:4d:14:d2:4e:6f:67:7e:f4:e8:3a:41:96:0e:
ac:8a:40:c8:05:c4:0c:c2:b2:5b:78:4a:6f:a6:7a:3a:e2:fe:
3a:0e:fd:3e:41:2a:36:37:cd:58:ee:99:2f:7f:6f:17:bd:c9:
e2:0d:24:32:dd:88:f0:11:19:fb:e1:1d:62:94:4e:5c:93:d1:
f2:3b:0c:2d:12:b4:8f:85:da:87:3c:b0:16:46:5f:25:d4:be:
15:9c:55:dc:13:af:43:ab:20:97:44:79:51:0b:64:1a:60:6f:
3a:9f:bc:25:1b:7d:6d:1b:d2:1f:5d:2c:15:1b:4f:01:9e:23:
2d:be:b3:7a:ef:e5:da:a3:92:69:54:ea:d5:fd:dd:ff:7f:f4:
48:b4:32:3a:72:ac:4c:47:f5:9d:a7:85:ba:91:64:a4:1f:aa:
10:fd:b9:76:34:3c:42:f3:dd:d5:61:79:c1:18:9a:c8:57:70:
b6:90:db:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:14 2024 by rpki-client on console-fra.rpki-client.org