Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/Vo-tDyZbnb9Eg16hHHABtHRx7-8.roa
File: Vo-tDyZbnb9Eg16hHHABtHRx7-8.roa (raw, json)
Hash identifier: 15acyyuEoVje+OKJnx4EbkZbSYvzjrTrBYnoF1vbmFY=
Subject key identifier: 56:8F:AD:0F:26:5B:9D:BF:44:83:5E:A1:1C:70:01:B4:74:71:EF:EF
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 01857255B3E8EB79F898B6BC33C22D6A5563
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/Vo-tDyZbnb9Eg16hHHABtHRx7-8.roa
Signing time: Mon 02 Jan 2023 11:54:57 +0000
ROA not before: Mon 02 Jan 2023 11:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203206
IP address blocks: 62.228.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:b3:e8:eb:79:f8:98:b6:bc:33:c2:2d:6a:55:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 11:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=568fad0f265b9dbf44835ea11c7001b47471efef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:66:d3:f0:9d:13:f8:2d:d3:5a:ac:b7:48:
78:a6:0f:47:06:24:6f:59:ff:b7:a4:53:4a:fb:9d:
68:75:35:fe:cc:79:30:a5:9d:05:ff:1c:2d:11:48:
a5:43:2f:45:80:21:76:f9:f0:00:05:2b:10:73:aa:
31:ef:00:77:ba:b4:16:24:24:30:4b:20:1f:71:f0:
74:5c:08:f6:bb:04:b1:56:e2:cf:35:99:62:d7:29:
98:de:1b:04:a7:c4:27:4b:6c:10:f8:bd:ae:3d:b8:
6e:a9:cf:45:0f:e9:e8:08:cd:08:a9:95:3a:3d:60:
34:99:0e:ad:7a:bb:1a:8b:1d:78:27:a4:dd:0f:0b:
02:9c:05:92:8c:66:61:57:9d:6b:45:8d:bf:b7:1c:
1f:fb:3f:4f:86:e6:86:f5:24:9b:1a:a9:25:22:13:
0d:16:2f:1e:43:ef:07:a1:b4:27:b6:2a:b3:ba:39:
15:5a:c8:c8:00:f8:fe:12:57:ce:8b:b5:06:ba:d2:
e1:bd:0a:c0:35:c1:28:bf:b2:dc:65:9a:33:94:5b:
6f:34:b4:93:49:b5:41:cb:2a:98:5e:db:db:64:29:
65:61:02:96:a4:00:e9:06:6c:2f:04:0a:f3:22:78:
a5:78:26:57:3e:d9:23:44:e5:6d:07:c9:c1:00:75:
3c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8F:AD:0F:26:5B:9D:BF:44:83:5E:A1:1C:70:01:B4:74:71:EF:EF
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/Vo-tDyZbnb9Eg16hHHABtHRx7-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.231.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a2:91:b9:e3:5f:58:4b:b6:37:49:70:ca:b5:f3:6b:46:de:
e4:2b:45:69:2e:92:b0:14:1c:fc:14:50:39:8d:f1:01:69:b3:
4a:93:cb:25:32:6e:75:4f:09:66:d3:89:19:96:2f:30:c1:dc:
91:29:55:10:75:e6:4e:32:bb:65:1a:43:a3:92:96:d3:f3:21:
53:10:58:dd:63:7d:dd:1e:b6:93:55:29:17:7a:75:5e:f3:1f:
49:de:39:74:98:49:fe:c5:b6:68:13:45:71:10:28:0a:06:12:
9a:c5:91:a4:fe:6d:40:35:e1:53:93:5e:9f:80:4b:7c:53:53:
08:76:67:b8:04:10:ef:fd:08:35:b5:71:9f:de:63:12:1e:59:
01:14:cc:e8:4a:9b:9f:57:cd:08:b3:2b:89:26:4e:91:01:7f:
9d:5b:3c:df:79:79:fa:0d:7f:17:bb:56:ea:dc:cb:01:9c:b5:
71:47:bb:b4:2c:d4:4a:bb:83:fc:67:d8:8f:3d:c9:da:33:ad:
93:2d:53:7c:37:8b:a7:53:df:ea:d2:74:9e:45:2e:3b:1d:76:
79:f0:90:22:0d:30:9b:04:b9:6a:ca:a5:8b:e6:1f:78:57:09:
f3:a8:db:61:88:ad:97:31:1d:c7:55:8d:f5:f3:8b:d8:15:86:
06:7d:18:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyVbPo63n4mLa8M8ItalVjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5
MzZmZDUwHhcNMjMwMTAyMTE1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjhmYWQwZjI2NWI5ZGJmNDQ4MzVlYTExYzcwMDFiNDc0NzFlZmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxZm0/CdE/gt01qst0h4pg9HBiRv
Wf+3pFNK+51odTX+zHkwpZ0F/xwtEUilQy9FgCF2+fAABSsQc6ox7wB3urQWJCQw
SyAfcfB0XAj2uwSxVuLPNZli1ymY3hsEp8QnS2wQ+L2uPbhuqc9FD+noCM0IqZU6
PWA0mQ6tersaix14J6TdDwsCnAWSjGZhV51rRY2/txwf+z9PhuaG9SSbGqklIhMN
Fi8eQ+8HobQntiqzujkVWsjIAPj+ElfOi7UGutLhvQrANcEov7LcZZozlFtvNLST
SbVByyqYXtvbZCllYQKWpADpBmwvBArzInileCZXPtkjROVtB8nBAHU81QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFaPrQ8mW52/RINeoRxwAbR0ce/vMB8GA1UdIwQY
MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt
YjBmNGI5YzM3ZTQ5LzEvVm8tdER5WmJuYjlFZzE2aEhIQUJ0SFJ4Ny04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5
LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPuTnMA0G
CSqGSIb3DQEBCwUAA4IBAQBnopG5419YS7Y3SXDKtfNrRt7kK0VpLpKwFBz8FFA5
jfEBabNKk8slMm51Twlm04kZli8wwdyRKVUQdeZOMrtlGkOjkpbT8yFTEFjdY33d
HraTVSkXenVe8x9J3jl0mEn+xbZoE0VxECgKBhKaxZGk/m1ANeFTk16fgEt8U1MI
dme4BBDv/Qg1tXGf3mMSHlkBFMzoSpufV80IsyuJJk6RAX+dWzzfeXn6DX8Xu1bq
3MsBnLVxR7u0LNRKu4P8Z9iPPcnaM62TLVN8N4unU9/q0nSeRS47HXZ58JAiDTCb
BLlqyqWL5h94VwnzqNthiK2XMR3HVY3184vYFYYGfRhe
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:03 2024 by rpki-client on console-ams.rpki-client.org