Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/jVAf0b3OHsWDKpWrIF74ch87Pd4.roa
File: jVAf0b3OHsWDKpWrIF74ch87Pd4.roa (raw, json)
Hash identifier: to5fYo2uxs3U81JEhphD22lisf8ZxHrh7j4H7mtvXgQ=
Subject key identifier: 8D:50:1F:D1:BD:CE:1E:C5:83:2A:95:AB:20:5E:F8:72:1F:3B:3D:DE
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 01857255AC86413076C8434B29CEA8204339
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/jVAf0b3OHsWDKpWrIF74ch87Pd4.roa
Signing time: Mon 02 Jan 2023 11:54:55 +0000
ROA not before: Mon 02 Jan 2023 11:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35247
IP address blocks: 62.228.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:ac:86:41:30:76:c8:43:4b:29:ce:a8:20:43:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 11:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d501fd1bdce1ec5832a95ab205ef8721f3b3dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:bb:8e:71:86:56:40:64:36:be:c6:e7:be:
e5:14:7c:d1:69:90:ec:45:f3:f0:29:77:e5:e6:6b:
97:e3:33:d7:76:29:ad:d5:4d:14:ac:bf:ff:77:4a:
34:cc:48:ca:8b:9e:2b:71:e1:97:a0:e3:af:30:07:
89:af:23:67:4c:11:a6:0e:c7:18:ee:eb:c0:ef:4e:
2a:08:48:35:c0:2e:87:4c:1b:46:ef:ba:ed:00:25:
4f:ce:fc:5b:48:ec:63:f6:61:0b:33:a9:f7:5b:ac:
27:fc:03:23:43:97:e1:e8:bc:d3:84:14:dc:d2:aa:
2b:47:b9:3b:e4:9c:bf:41:0f:5a:4e:31:eb:c2:55:
26:81:45:03:2f:81:1c:06:ff:64:3a:41:c9:7a:e8:
e1:70:19:71:f0:7a:6e:64:fc:11:5f:e4:6c:21:e6:
41:70:bd:43:0c:52:07:b7:be:0d:83:74:36:ba:10:
92:80:2d:1c:eb:a1:78:b0:a7:d3:63:1b:b9:f5:29:
59:6f:41:17:f9:3d:ee:ea:3d:99:23:66:c7:e8:2c:
31:08:f0:c7:2e:bf:86:4f:88:b3:80:ad:6c:23:ea:
92:70:51:48:d4:63:2b:c9:9a:4b:2f:b6:0b:e8:a4:
92:43:fd:f7:6a:25:f9:6b:15:77:aa:80:8c:37:b3:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:50:1F:D1:BD:CE:1E:C5:83:2A:95:AB:20:5E:F8:72:1F:3B:3D:DE
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/jVAf0b3OHsWDKpWrIF74ch87Pd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.232.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:66:4e:61:f6:6f:f3:59:4b:4b:4c:17:5f:43:40:80:a2:56:
6c:a3:57:34:80:6e:81:f0:fa:a1:7b:90:0c:40:e5:73:54:c3:
12:51:da:5c:bb:cc:76:38:c8:69:15:8a:03:69:28:5a:94:a5:
c7:ba:1d:c4:03:d0:79:43:dc:59:72:69:dd:d0:38:13:79:b1:
92:cb:19:74:4f:d5:71:3a:27:17:03:73:d4:2f:fb:c1:6c:f5:
1d:16:14:67:0c:53:02:b4:b9:4e:70:1e:d7:9c:bf:ec:ee:87:
1e:55:99:26:fd:6a:05:98:92:4c:3f:91:04:f2:d7:54:56:a2:
8b:3f:f3:c7:77:ef:0b:cd:bb:8e:3e:b7:74:f4:22:6d:5d:a7:
be:b6:9d:45:06:f9:03:74:dc:cf:55:1a:b5:46:d3:9d:ec:f6:
84:f6:a7:50:94:f5:6f:4a:3d:a9:a3:71:97:00:6b:29:c8:1b:
76:17:42:a7:cb:81:03:fb:05:7e:6d:32:94:5e:4a:05:81:3c:
14:77:80:e7:c1:12:84:80:86:9f:9a:c7:a8:ed:25:72:3d:3e:
da:ec:4f:5b:ad:49:e2:2a:74:51:50:62:3d:1f:15:8b:cc:c5:
66:4a:3c:92:32:91:a2:83:f2:f3:69:83:d8:b1:35:ff:67:24:
f6:87:cd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:14 2024 by rpki-client on console-fra.rpki-client.org