Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/DA5NoeyTnuMzlqBMLAFTsBzvnNA.roa
File: DA5NoeyTnuMzlqBMLAFTsBzvnNA.roa (raw, json)
Hash identifier: RaVzD0uuBEaMszzuoVHEOzSUFIfhLMczGK9urM0P57E=
Subject key identifier: 0C:0E:4D:A1:EC:93:9E:E3:33:96:A0:4C:2C:01:53:B0:1C:EF:9C:D0
Certificate issuer: /CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Certificate serial: 01856B932EB3CDC1141F5E6E7D76F323F635
Authority key identifier: 30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/DA5NoeyTnuMzlqBMLAFTsBzvnNA.roa
Signing time: Sun 01 Jan 2023 04:24:45 +0000
ROA not before: Sun 01 Jan 2023 04:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39376
IP address blocks: 62.148.2.0/24 maxlen: 24
62.148.0.0/19 maxlen: 19
62.148.1.0/24 maxlen: 24
62.148.0.0/24 maxlen: 24
62.148.4.0/24 maxlen: 24
62.148.3.0/24 maxlen: 24
62.148.11.0/24 maxlen: 24
62.148.10.0/24 maxlen: 24
62.148.9.0/24 maxlen: 24
62.148.8.0/24 maxlen: 24
62.148.7.0/24 maxlen: 24
62.148.6.0/24 maxlen: 24
62.148.5.0/24 maxlen: 24
62.148.16.0/24 maxlen: 24
62.148.15.0/24 maxlen: 24
62.148.14.0/24 maxlen: 24
62.148.13.0/24 maxlen: 24
62.148.12.0/24 maxlen: 24
62.148.17.0/24 maxlen: 24
62.148.24.0/24 maxlen: 24
62.148.23.0/24 maxlen: 24
62.148.22.0/24 maxlen: 24
62.148.21.0/24 maxlen: 24
62.148.20.0/24 maxlen: 24
62.148.19.0/24 maxlen: 24
62.148.18.0/24 maxlen: 24
62.148.30.0/24 maxlen: 24
62.148.29.0/24 maxlen: 24
62.148.28.0/24 maxlen: 24
62.148.27.0/24 maxlen: 24
62.148.26.0/24 maxlen: 24
62.148.25.0/24 maxlen: 24
62.148.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:2e:b3:cd:c1:14:1f:5e:6e:7d:76:f3:23:f6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Validity
Not Before: Jan 1 04:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c0e4da1ec939ee33396a04c2c0153b01cef9cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:c4:02:08:3f:4e:f5:46:2e:96:44:db:c9:
c0:7d:f5:bc:39:c6:85:24:80:de:dd:12:c3:d8:df:
5c:2f:3a:8e:01:2f:33:77:c8:6e:79:54:3c:9d:da:
fb:ef:c5:66:2c:ec:78:1c:32:2c:27:58:82:49:10:
05:a8:64:ee:5d:a6:63:d4:9e:1d:ee:c5:e4:f8:3f:
ae:14:73:87:93:40:d1:52:d3:80:bd:60:79:f3:72:
e3:8e:72:70:ae:c7:fc:ad:fd:f9:6e:46:26:b8:56:
20:e8:c1:f8:e2:b0:4b:9d:8a:f8:1f:48:a3:ee:77:
ba:bc:f4:bc:4a:32:8b:fa:4e:de:bb:8f:31:67:81:
71:e0:cf:37:10:47:ec:2e:87:14:fb:19:85:2c:78:
7b:b2:a0:a0:b9:ef:6a:4b:c0:96:80:d4:5f:2e:42:
93:f1:31:64:ca:ed:c1:60:29:d0:ea:41:01:99:61:
81:2e:a7:d3:a6:90:1f:75:e2:33:c0:ba:40:8c:23:
16:40:dd:f7:65:2b:df:ec:60:70:70:d6:b1:3b:d5:
76:1a:d4:e2:36:67:2a:97:54:02:f9:72:96:4e:53:
6f:4d:62:4e:55:48:c2:40:6d:5d:0a:9d:64:66:ee:
19:25:37:05:d9:37:71:b0:75:ad:57:28:8a:15:e5:
a1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0E:4D:A1:EC:93:9E:E3:33:96:A0:4C:2C:01:53:B0:1C:EF:9C:D0
X509v3 Authority Key Identifier:
keyid:30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/DA5NoeyTnuMzlqBMLAFTsBzvnNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.148.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9e:45:64:94:35:6c:f7:6d:41:27:7e:9c:00:d2:5c:53:2d:d8:
f7:6c:bc:00:8d:ec:5f:eb:d4:02:e8:59:10:21:25:23:f6:93:
23:e3:8a:f5:bc:fe:e7:14:7d:64:2a:1c:ca:8d:61:3a:ff:6d:
7d:fc:01:21:ba:ff:2f:84:bf:e2:7c:ef:24:57:9f:8d:31:0a:
51:ee:81:21:e9:96:42:bd:7f:a9:df:a5:1d:1b:ca:56:ee:14:
78:f3:2e:24:de:91:3b:2d:91:0f:39:63:24:32:42:14:04:c0:
e7:df:d8:2e:38:07:d6:f5:aa:cb:5c:cb:ed:e7:67:57:f2:81:
58:24:02:28:e5:7d:7a:07:86:0c:58:6e:5a:03:ec:b2:27:86:
4b:66:e1:36:4f:63:b5:6a:02:91:71:a5:87:5f:b8:17:b0:f6:
9a:41:a0:14:f2:87:c2:da:1d:7d:9e:b0:00:cf:1c:98:ab:89:
3a:49:10:88:b5:8c:94:39:a6:cd:03:90:f3:9f:27:fe:0e:7f:
ec:db:ff:18:f7:ef:33:cf:42:a5:5e:f7:50:c7:58:67:5e:0b:
05:ce:a2:44:a0:03:b9:1a:10:41:b1:cd:9d:a2:e7:b8:bf:78:
f1:b6:7f:74:c9:8d:40:a5:b9:53:4a:48:c0:c2:52:6e:a6:4b:
6f:01:61:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:15 2024 by rpki-client on console-ams.rpki-client.org