Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/SIMQsK8U3RWy4sairdOEUDDNqBg.roa
File: SIMQsK8U3RWy4sairdOEUDDNqBg.roa (raw, json)
Hash identifier: w+P/493A/Yp+vgAcrjN2A+axeGjqRkaxfx56Iwx/MB8=
Subject key identifier: 48:83:10:B0:AF:14:DD:15:B2:E2:C6:A2:AD:D3:84:50:30:CD:A8:18
Certificate issuer: /CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Certificate serial: 018604550CE8C06FFE84AE0B628005986EEF
Authority key identifier: B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/SIMQsK8U3RWy4sairdOEUDDNqBg.roa
Signing time: Mon 30 Jan 2023 20:18:48 +0000
ROA not before: Mon 30 Jan 2023 20:18:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57152
IP address blocks: 62.106.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:04:55:0c:e8:c0:6f:fe:84:ae:0b:62:80:05:98:6e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Validity
Not Before: Jan 30 20:18:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=488310b0af14dd15b2e2c6a2add3845030cda818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:9c:75:4d:e5:a5:96:55:a0:81:8e:74:df:
61:6d:5c:a2:59:01:c4:e1:dc:9b:52:3f:bc:a0:22:
42:ae:68:b8:9d:c9:57:79:35:7a:bb:8e:44:f6:a1:
a9:7b:81:d8:b1:61:10:91:19:68:6a:ef:ed:e6:0b:
12:70:2c:ea:f7:3a:6c:3a:cd:6c:1f:6b:62:48:d9:
b4:85:01:ac:fd:65:bd:8e:ed:36:a4:89:08:66:dd:
15:e8:25:93:e1:3e:48:fd:f3:61:82:c0:a9:80:87:
4b:a6:da:98:44:76:19:d4:fe:24:de:11:74:04:52:
b3:a5:91:20:a5:da:7f:54:4b:e1:34:e4:4d:fe:52:
84:1b:d6:59:36:4e:7f:a8:50:4f:25:4f:8d:75:15:
d7:f2:40:47:f1:71:11:a3:44:db:3e:4b:35:35:66:
00:52:89:b3:ad:37:d1:96:58:77:b4:98:83:5c:67:
2d:77:13:36:55:ea:38:33:13:f5:b6:d3:97:53:00:
cd:77:fb:75:82:10:a3:05:a8:65:2b:bd:f1:f7:c6:
0d:a9:ab:22:dd:47:1b:71:79:4a:06:32:74:f3:32:
82:6b:71:11:44:94:6e:70:0f:c0:56:22:1f:a2:fa:
1f:57:74:89:16:e3:12:11:e5:1e:55:21:94:fe:d1:
c6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:83:10:B0:AF:14:DD:15:B2:E2:C6:A2:AD:D3:84:50:30:CD:A8:18
X509v3 Authority Key Identifier:
keyid:B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/SIMQsK8U3RWy4sairdOEUDDNqBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.84.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:08:b7:28:86:91:94:4a:c9:c2:e4:8b:a6:08:e2:4f:76:c4:
e7:22:99:6c:59:fe:94:1e:f0:21:4d:11:28:3e:42:67:b2:77:
bd:93:ba:23:86:9f:68:94:5a:22:e4:b1:ed:76:c1:14:71:dd:
9d:c3:e4:aa:82:9c:07:f0:9d:e5:8c:f2:60:c5:0d:9c:16:3a:
10:48:b1:33:cb:43:11:56:3d:b5:bb:4e:f2:a8:d2:20:27:a7:
ca:c6:7d:c4:17:d6:dc:5c:3e:03:0c:40:14:fb:52:77:e4:0a:
03:e4:95:4b:b2:f7:03:ef:e1:7a:74:3f:b5:2f:52:55:ce:8e:
af:51:58:05:03:27:1a:e5:8c:12:af:a6:7f:6d:c9:eb:46:9a:
9a:bd:9a:70:20:30:56:00:78:91:b4:12:76:f1:f0:0f:58:ce:
a6:0a:00:c6:e3:ac:85:c6:13:0b:87:44:6e:30:31:01:3b:cb:
15:86:66:6c:84:c1:31:2d:01:88:75:28:30:18:ff:55:b0:37:
a4:a1:d3:a5:53:3c:93:9b:cd:15:59:79:d4:54:8c:0c:df:56:
03:50:53:b6:a4:85:6b:81:e7:e1:89:a5:63:ad:0c:fe:34:fe:
49:85:ef:da:30:e7:a7:75:34:46:47:8b:5e:6a:46:f8:fb:9d:
15:39:78:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:00 2023 by rpki-client on console-fra.rpki-client.org