Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/uU2ySPM61fv-Iz6OM00dU5SMpFU.roa
File: uU2ySPM61fv-Iz6OM00dU5SMpFU.roa (raw, json)
Hash identifier: atlls14ANAav6HvlP9+hWF0uhBF6xfZ0p/LpCNRba1k=
Subject key identifier: B9:4D:B2:48:F3:3A:D5:FB:FE:23:3E:8E:33:4D:1D:53:94:8C:A4:55
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 01857255B4A19804B87F5E3CCECD1E50275F
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/uU2ySPM61fv-Iz6OM00dU5SMpFU.roa
Signing time: Mon 02 Jan 2023 11:54:57 +0000
ROA not before: Mon 02 Jan 2023 11:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204592
IP address blocks: 62.228.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:b4:a1:98:04:b8:7f:5e:3c:ce:cd:1e:50:27:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 11:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b94db248f33ad5fbfe233e8e334d1d53948ca455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:97:b8:c7:3e:4c:2e:87:c9:92:37:92:b3:
cb:c0:01:ed:3d:57:62:1e:f4:ff:bf:96:0e:37:d7:
db:d1:f7:e9:76:24:a2:53:f3:46:48:50:ac:f3:95:
72:7c:13:2c:78:dc:7c:7f:9a:fc:8c:16:97:97:48:
c8:f2:16:ff:9d:7b:e8:a0:a8:2d:69:78:0d:9b:9d:
3f:83:09:35:e7:e1:80:5b:87:be:87:b4:45:f2:6d:
e5:a4:12:c9:63:d1:21:c2:e4:ee:bc:21:96:eb:e1:
6f:0d:39:4f:ca:1b:85:d4:95:76:76:0e:bf:54:2b:
ef:5e:7b:08:25:7c:88:a6:60:b4:92:e8:ad:f4:1a:
1c:58:99:0d:5f:01:a4:d4:91:85:cc:de:85:f1:65:
b8:13:51:ea:d0:c9:ac:b9:2f:dd:7d:ca:4f:c4:99:
53:6a:fc:ed:c2:ab:a9:33:2d:26:85:1f:2c:fe:73:
e7:de:46:a5:b5:99:ad:64:83:02:6e:0c:2a:c5:8a:
a8:1e:25:33:a6:a3:db:e3:ba:db:39:7f:f4:a2:0b:
da:58:5d:fa:09:10:0f:20:0f:a4:8d:21:59:92:09:
06:4e:22:c7:06:28:df:3d:81:33:17:43:78:b5:01:
b9:47:55:8a:a0:a9:4e:83:9d:59:90:62:df:a6:d5:
85:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4D:B2:48:F3:3A:D5:FB:FE:23:3E:8E:33:4D:1D:53:94:8C:A4:55
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/uU2ySPM61fv-Iz6OM00dU5SMpFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.244.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b5:f2:34:ed:82:cf:47:21:ee:f9:51:d1:32:a4:fc:8a:28:
8f:4a:c1:de:2a:d8:72:6c:0b:35:19:95:a9:34:21:1a:75:a5:
d6:79:c0:ff:79:8b:3c:e1:29:75:c1:13:98:a3:04:d3:08:df:
bd:a4:c5:b0:18:a3:49:f9:f9:81:5d:59:0e:db:ea:2e:a5:32:
0b:49:af:35:40:69:8d:f5:4e:74:08:42:32:99:41:ba:0a:21:
28:77:1a:ef:36:fe:6c:e1:69:9e:50:eb:dc:ef:12:da:16:e2:
e3:b8:5d:78:e2:b0:69:2d:1e:da:5e:b9:84:3a:7f:d1:98:4a:
3a:6d:2d:a7:72:be:e1:07:cc:ca:8a:18:c1:19:8a:85:de:1c:
a9:01:a9:f5:49:d6:16:e6:e4:a8:93:50:be:d1:be:d8:f7:92:
97:38:c8:b9:57:44:ba:17:52:37:09:ef:e4:ad:a5:ae:d3:c7:
e4:b1:a4:62:05:07:f0:f2:ff:35:07:e9:8c:f8:2e:35:67:46:
94:1b:03:88:fd:6d:53:3c:38:ee:37:a4:bd:23:7c:2d:b7:1a:
39:68:48:d2:2a:a4:51:8b:50:5c:c7:79:82:fc:7b:15:21:1e:
90:5c:0a:af:5c:0f:b8:b9:36:20:8d:90:cf:c2:c1:48:ec:c1:
fd:df:6b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:35 2023 by rpki-client on console-fra.rpki-client.org