Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/VSfQmMkGxVE6Ip6satuQaX4Q_5w.roa
File: VSfQmMkGxVE6Ip6satuQaX4Q_5w.roa (raw, json)
Hash identifier: AZO+O0IiDQlYKUp8kZZOZfRsUT23f7V4xpn+6IID2mc=
Subject key identifier: 55:27:D0:98:C9:06:C5:51:3A:22:9E:AC:6A:DB:90:69:7E:10:FF:9C
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 01857255B6D4DB62E65AA3319DF8B5E46E11
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/VSfQmMkGxVE6Ip6satuQaX4Q_5w.roa
Signing time: Mon 02 Jan 2023 11:54:57 +0000
ROA not before: Mon 02 Jan 2023 11:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208601
IP address blocks: 62.228.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:b6:d4:db:62:e6:5a:a3:31:9d:f8:b5:e4:6e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 11:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5527d098c906c5513a229eac6adb90697e10ff9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:97:39:8f:30:e7:72:98:fd:0e:42:ac:d2:40:
79:88:fd:81:26:c9:af:e5:6e:91:e3:47:62:30:68:
e0:03:75:7e:ac:2a:3a:d7:69:9d:21:cf:48:c5:29:
0e:6d:95:b7:2e:48:3d:4c:99:24:97:38:11:72:a1:
b3:f3:21:4c:67:9e:94:7f:e6:4e:b9:9a:07:87:78:
02:1b:39:85:b2:1e:4c:88:e0:44:10:36:67:f1:68:
3e:27:39:77:27:58:e2:2e:cb:ff:54:90:73:85:36:
76:f3:a0:9c:98:1b:a5:c5:72:c3:03:54:22:f9:28:
d0:8f:7b:27:33:bc:be:00:54:6b:0e:4b:65:25:15:
8d:06:49:6d:74:11:fc:ff:f8:68:6b:22:e8:d8:33:
00:d6:39:59:df:3d:30:ef:e2:6c:89:09:44:06:4f:
04:84:52:cb:80:c6:11:b0:a7:7b:9e:44:28:34:52:
b4:6c:e9:b8:b8:08:81:f3:5e:a0:6f:7c:99:d7:ed:
51:3b:14:c0:18:84:dd:75:23:ad:ac:e7:66:b0:22:
b7:67:19:58:4a:96:d5:ef:ae:61:f0:be:fc:95:5d:
3c:bf:f9:35:29:58:73:e0:e7:e1:ae:60:2c:f3:03:
a3:01:67:36:af:97:f3:c6:8c:c9:e7:60:99:28:05:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:27:D0:98:C9:06:C5:51:3A:22:9E:AC:6A:DB:90:69:7E:10:FF:9C
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/VSfQmMkGxVE6Ip6satuQaX4Q_5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.235.0/24
Signature Algorithm: sha256WithRSAEncryption
96:35:25:2c:d5:83:4b:b8:7e:30:d8:e1:1a:52:6b:12:45:96:
ce:e4:58:1d:1e:0d:7b:3c:65:53:37:31:a1:04:ff:76:2a:53:
f2:df:84:5f:82:7e:51:3c:21:bd:d9:98:52:ed:c4:d5:85:7e:
a1:93:d5:44:f7:71:f9:5e:32:66:86:83:e7:88:c0:70:e7:8a:
ff:d3:83:fa:ea:7b:99:77:6a:77:c9:21:9c:24:bc:32:c3:1a:
d6:56:04:7b:a0:89:24:3e:c0:a9:09:71:75:d4:f4:f5:63:5a:
bd:b5:06:e4:bd:93:ce:0c:a1:88:af:e3:18:79:d4:36:ca:2e:
66:a9:14:f3:72:d2:0a:b8:d8:9f:fb:94:91:43:e4:d2:22:70:
18:f0:04:f4:13:a6:82:42:70:f4:00:b6:4d:48:2a:86:84:90:
33:37:6b:f8:8a:78:8f:6e:bf:d3:57:ad:14:2b:78:1b:57:00:
41:9c:f7:54:4f:76:d2:4d:e5:bd:bb:82:37:fc:7c:b2:e4:3a:
a2:6b:51:a2:51:23:05:2a:54:7a:b6:17:d2:e6:39:0c:3c:5c:
8b:11:b6:eb:83:c9:ba:26:39:36:b5:93:ae:48:8a:de:9c:2a:
c2:fb:89:fa:4a:3f:b4:0a:06:b6:0c:7a:12:d7:07:1d:ce:53:
c5:44:a4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:14 2024 by rpki-client on console-fra.rpki-client.org