Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/xykOrItnsE37PyMoF0NL1p6M_GA.roa
File: xykOrItnsE37PyMoF0NL1p6M_GA.roa (raw, json)
Hash identifier: nmGwPahhH/8pPPEbrQPl5rsLdi519KJnT6WwCkh9zHE=
Subject key identifier: C7:29:0E:AC:8B:67:B0:4D:FB:3F:23:28:17:43:4B:D6:9E:8C:FC:60
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 01857255AC2A898414ED93E0FED02AB170D4
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/xykOrItnsE37PyMoF0NL1p6M_GA.roa
Signing time: Mon 02 Jan 2023 11:54:55 +0000
ROA not before: Mon 02 Jan 2023 11:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31198
IP address blocks: 62.228.242.0/24 maxlen: 24
62.228.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:ac:2a:89:84:14:ed:93:e0:fe:d0:2a:b1:70:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 11:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7290eac8b67b04dfb3f232817434bd69e8cfc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:41:f9:15:ba:92:10:48:32:70:67:9d:24:db:
9b:aa:ce:27:f1:fc:b5:a4:79:c0:90:db:06:6a:aa:
d7:6b:f9:18:ae:19:86:cf:b5:0b:74:b2:32:65:3e:
b2:3d:53:b0:e6:8b:49:67:52:49:77:d1:05:6c:6d:
e6:ec:b8:64:ee:de:00:fa:5b:4e:95:0e:2d:34:49:
50:44:72:95:1b:31:93:ef:fc:0e:8d:03:79:e3:a8:
5f:75:c2:53:78:03:bd:76:d4:f2:f9:8f:66:b2:51:
2e:9d:5e:2c:78:0e:8b:ea:27:86:7f:e3:ef:2e:53:
0f:70:5c:86:f6:f6:d7:b6:b9:b0:c0:d7:7b:d1:51:
29:61:b1:7a:4b:57:5e:52:41:fb:70:cb:8e:46:15:
2e:72:32:cc:de:5d:76:f2:ca:6e:3c:f8:27:12:f2:
81:73:bc:bf:70:3c:1d:35:05:26:0c:18:4c:75:3d:
3f:12:72:db:59:7c:ac:58:f5:2a:f9:ce:57:a6:43:
6a:cd:9f:4d:8e:8e:a2:70:78:72:dc:eb:0a:f6:1c:
1b:22:61:06:dd:38:9a:70:97:66:17:b0:31:2a:a1:
5f:65:ef:c3:eb:ba:61:60:dc:a6:21:48:00:12:f8:
00:a9:e2:9f:60:04:bd:26:17:7c:38:61:d1:fb:53:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:29:0E:AC:8B:67:B0:4D:FB:3F:23:28:17:43:4B:D6:9E:8C:FC:60
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/xykOrItnsE37PyMoF0NL1p6M_GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.242.0/24
62.228.252.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:8c:e4:9a:ca:a9:15:e3:39:3f:6e:88:9d:c7:b4:41:4a:68:
97:f2:00:1c:05:a9:fb:bb:29:d9:22:16:b9:4b:0c:43:b9:6a:
c2:39:5a:66:49:2e:37:ed:1d:44:bc:30:9b:af:2b:8f:f6:74:
33:2f:c9:1e:59:a4:f1:15:70:5f:9c:30:cb:11:b6:4b:ac:8b:
82:a4:3f:04:d9:52:22:3b:82:a4:12:aa:b7:e3:8a:81:7d:40:
0c:92:9b:c1:1d:6d:93:3c:ff:4c:9b:29:9c:64:ac:40:dc:ad:
50:d0:3a:e6:e1:b2:3c:82:93:89:5a:51:9b:f6:6a:2d:14:47:
b4:48:f4:cf:68:b2:ec:ab:48:ff:43:15:66:79:09:b1:8b:2a:
b3:51:ab:11:c8:fc:f5:12:76:dc:6c:88:fd:0a:ad:2c:b0:1f:
67:04:ac:2c:67:d9:89:cd:e6:7a:be:3c:bb:7c:05:2e:f0:9f:
d6:85:95:a7:a8:c2:69:a9:ed:b3:43:c6:8f:60:19:ea:72:62:
0e:a9:59:9c:7a:29:b2:ff:c0:ea:c8:c6:13:b7:a7:04:00:3e:
a6:db:e6:cb:8c:1c:08:e1:2a:48:d3:6a:95:62:11:40:d5:4f:
f7:36:40:d8:63:25:fa:8d:f2:32:33:b4:12:aa:0b:9d:e5:16:
08:a7:f0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:14 2024 by rpki-client on console-fra.rpki-client.org