Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/x9nQ491RZ2HwdpMlCDu24Jo0Cwk.roa
File: x9nQ491RZ2HwdpMlCDu24Jo0Cwk.roa (raw, json)
Hash identifier: TJPT3ZKdG80U7sfYqMI1T6Gvj69XlZf2lNWtdhJg2w8=
Subject key identifier: C7:D9:D0:E3:DD:51:67:61:F0:76:93:25:08:3B:B6:E0:9A:34:0B:09
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 018677C4E3329AEFA79D9365326A243F8BD5
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/x9nQ491RZ2HwdpMlCDu24Jo0Cwk.roa
Signing time: Wed 22 Feb 2023 06:17:17 +0000
ROA not before: Wed 22 Feb 2023 06:17:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204592
IP address blocks: 62.228.232.0/24 maxlen: 24
62.228.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:77:c4:e3:32:9a:ef:a7:9d:93:65:32:6a:24:3f:8b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Feb 22 06:17:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7d9d0e3dd516761f0769325083bb6e09a340b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f4:47:9a:2c:5e:b8:24:b3:9b:ae:42:b2:bc:
d7:b9:0c:4b:75:24:4c:ba:5c:86:cb:fd:c1:b6:1b:
43:04:0d:00:bf:86:23:87:57:1b:18:84:f4:ce:32:
7a:f0:59:0f:20:d3:12:e9:1d:fd:0f:eb:d1:97:c3:
44:38:a4:ee:81:8c:57:19:d2:70:76:47:44:0d:74:
0c:0b:45:a3:a3:78:d1:69:5f:61:61:59:0b:79:82:
fc:a9:fd:d1:04:b7:c1:42:45:f4:d7:94:48:35:21:
94:a5:3c:13:17:30:39:30:90:cf:b4:2e:1f:74:bd:
b9:46:d8:8d:7e:0f:6d:69:a2:67:b1:1d:16:19:d0:
cc:16:38:4b:be:ce:02:ee:40:7b:8e:c5:fd:23:e8:
44:8d:f0:4f:1b:2b:03:51:71:b3:7a:38:84:ba:5f:
7d:02:4c:bd:98:4b:8e:cb:63:02:52:25:28:b9:58:
0c:d9:4f:43:12:e4:14:eb:ef:d4:7b:6c:8a:82:6a:
83:d9:bd:2e:82:20:5a:ab:f2:60:15:50:c5:28:2e:
7a:89:47:81:4e:11:61:4a:79:36:d5:68:d3:aa:57:
62:43:18:10:af:38:cd:91:d2:78:7b:76:14:d6:b1:
bf:fb:25:98:c8:cd:1f:42:06:0e:ce:c2:18:8c:c9:
4e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D9:D0:E3:DD:51:67:61:F0:76:93:25:08:3B:B6:E0:9A:34:0B:09
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/x9nQ491RZ2HwdpMlCDu24Jo0Cwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.232.0/24
62.228.244.0/24
Signature Algorithm: sha256WithRSAEncryption
68:cf:f6:33:cb:eb:93:44:be:c6:8b:0f:a9:5f:39:47:2f:0f:
c6:3b:61:ab:c0:4f:f7:6e:03:fb:09:ad:52:a1:0e:a2:74:80:
85:81:ee:38:7d:3b:73:0d:7d:32:70:9a:80:9f:bc:b9:9d:f2:
51:58:5d:e8:65:2e:e1:7f:0d:f5:a7:2f:ca:02:a9:26:1c:96:
da:36:b3:63:a9:cd:1a:21:5b:9b:94:74:35:7a:db:84:ad:50:
51:b9:bb:ca:6f:aa:de:5b:8b:44:b7:18:94:03:40:f6:82:42:
19:39:73:e8:89:1b:fa:84:79:16:d2:da:e3:7e:37:70:92:7f:
e7:46:cb:ba:4a:f5:f3:45:a6:81:46:9a:48:02:ff:53:a9:45:
73:74:b7:08:de:bb:b9:46:d6:83:17:ca:8c:16:79:48:e4:7a:
22:b0:e1:6c:5e:57:59:d7:68:87:c7:d5:75:4d:c7:99:97:d8:
16:6b:94:90:da:28:38:9f:69:9f:d9:02:1e:01:b4:75:da:ca:
a5:b9:91:e1:8c:70:61:cf:af:3b:c8:9c:6f:17:4e:ab:90:49:
ab:37:e2:27:94:3f:2f:aa:75:3b:46:2b:f1:64:6a:86:cc:c7:
fd:63:dd:d4:09:5e:a2:df:47:cc:cb:a9:48:38:13:64:8a:91:
28:7b:07:59
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZ3xOMymu+nnZNlMmokP4vVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5
MzZmZDUwHhcNMjMwMjIyMDYxNzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2Q5ZDBlM2RkNTE2NzYxZjA3NjkzMjUwODNiYjZlMDlhMzQwYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfRHmixeuCSzm65CsrzXuQxLdSRM
ulyGy/3BthtDBA0Av4Yjh1cbGIT0zjJ68FkPINMS6R39D+vRl8NEOKTugYxXGdJw
dkdEDXQMC0Wjo3jRaV9hYVkLeYL8qf3RBLfBQkX015RINSGUpTwTFzA5MJDPtC4f
dL25RtiNfg9taaJnsR0WGdDMFjhLvs4C7kB7jsX9I+hEjfBPGysDUXGzejiEul99
Aky9mEuOy2MCUiUouVgM2U9DEuQU6+/Ue2yKgmqD2b0ugiBaq/JgFVDFKC56iUeB
ThFhSnk21WjTqldiQxgQrzjNkdJ4e3YU1rG/+yWYyM0fQgYOzsIYjMlOaQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMfZ0OPdUWdh8HaTJQg7tuCaNAsJMB8GA1UdIwQY
MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt
YjBmNGI5YzM3ZTQ5LzEveDluUTQ5MVJaMkh3ZHBNbENEdTI0Sm8wQ3drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5
LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPuToAwQA
PuT0MA0GCSqGSIb3DQEBCwUAA4IBAQBoz/Yzy+uTRL7Giw+pXzlHLw/GO2GrwE/3
bgP7Ca1SoQ6idICFge44fTtzDX0ycJqAn7y5nfJRWF3oZS7hfw31py/KAqkmHJba
NrNjqc0aIVublHQ1etuErVBRubvKb6reW4tEtxiUA0D2gkIZOXPoiRv6hHkW0trj
fjdwkn/nRsu6SvXzRaaBRppIAv9TqUVzdLcI3ru5RtaDF8qMFnlI5HoisOFsXldZ
12iHx9V1TceZl9gWa5SQ2ig4n2mf2QIeAbR12sqluZHhjHBhz687yJxvF06rkEmr
N+InlD8vqnU7RivxZGqGzMf9Y93UCV6i30fMy6lIOBNkipEoewdZ
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:03 2024 by rpki-client on console-ams.rpki-client.org