Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/N0P4UPMRcBVEkrX-VcKAY8CRpZQ.roa
File: N0P4UPMRcBVEkrX-VcKAY8CRpZQ.roa (raw, json)
Hash identifier: QeugOgJZIDnvjiIscfPc3ENDMKWRZeFLSek7pKs4T6o=
Subject key identifier: 37:43:F8:50:F3:11:70:15:44:92:B5:FE:55:C2:80:63:C0:91:A5:94
Certificate issuer: /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial: 018C6C99C6AD065E0640B1ABD6EFF2AE2D21
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/N0P4UPMRcBVEkrX-VcKAY8CRpZQ.roa
Signing time: Fri 15 Dec 2023 08:31:06 +0000
ROA not before: Fri 15 Dec 2023 08:31:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14576
IP address blocks: 62.233.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:99:c6:ad:06:5e:06:40:b1:ab:d6:ef:f2:ae:2d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
Validity
Not Before: Dec 15 08:31:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3743f850f31170154492b5fe55c28063c091a594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:49:5e:85:f2:ab:43:1f:d4:80:8a:27:ab:c2:
f9:c8:93:d8:dc:e8:07:6a:81:18:f3:59:e2:1d:dd:
50:fd:37:28:1c:00:18:c1:be:1d:4f:e1:81:4b:a0:
e3:fd:c3:b4:ed:f4:0e:f4:db:e2:e0:3f:7a:18:58:
0f:2f:44:e5:dd:2e:8f:1e:29:f7:13:8d:b1:07:d3:
05:b1:9e:4e:22:ca:92:b5:78:f0:e1:25:3a:49:b8:
80:fd:31:9a:88:65:02:f8:34:1e:9d:84:ff:21:3d:
06:ec:6e:ee:76:fc:10:e0:e7:a4:40:31:1c:53:1b:
4c:16:88:c0:11:96:7a:14:a8:7a:3d:cd:4d:a0:e3:
45:bd:48:2f:02:9c:d6:42:42:a3:38:ec:e3:46:f7:
ed:f2:37:5d:a6:42:50:0d:ff:13:b4:6f:d4:6b:ed:
d0:5d:28:50:d6:f6:38:da:4b:92:a3:5b:de:7c:b9:
64:8b:50:a1:e6:bd:f5:46:fa:44:c7:b5:4a:54:8f:
ee:f6:eb:fc:c9:68:ca:aa:59:47:10:82:46:af:34:
64:34:32:92:24:40:d9:bd:0e:07:80:6d:b6:06:d2:
0f:03:1d:1d:da:17:b9:42:4d:c9:47:88:9c:14:d6:
01:b1:6b:b7:3c:5c:c3:5d:b4:92:3a:ba:6f:3c:64:
4c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:43:F8:50:F3:11:70:15:44:92:B5:FE:55:C2:80:63:C0:91:A5:94
X509v3 Authority Key Identifier:
keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/N0P4UPMRcBVEkrX-VcKAY8CRpZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.39.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:94:ab:5f:50:b0:ca:a2:9d:30:1a:4d:18:f4:3b:10:c1:33:
d0:a1:34:53:f2:bd:c0:a5:cd:d6:a6:a8:83:be:4b:2c:e3:09:
a9:05:b4:1f:75:a6:84:75:8a:5f:12:c1:a6:63:57:fa:21:6c:
c2:d9:4f:7d:17:a9:c1:29:bc:9a:67:8c:c0:dd:9b:8a:8f:ad:
60:b4:6d:e2:a8:b8:b7:86:8f:e2:8e:5b:78:9e:b8:06:82:5e:
ea:ad:79:8d:48:39:55:3c:a7:4d:a9:e8:a7:14:48:67:4b:41:
9b:23:6c:43:4c:f5:e9:0f:24:be:a2:6e:be:70:1d:a6:ef:32:
26:be:0d:b5:2a:a0:a7:99:72:e4:b0:47:14:bb:c8:e5:b9:36:
92:9e:b9:41:d2:ff:36:46:ec:6b:3a:71:58:6c:92:45:e6:8a:
b7:c4:59:76:23:3c:b6:f0:3b:44:db:14:7b:0f:a1:19:87:30:
7a:ee:3f:6f:ad:cf:40:8a:9f:f5:1d:7a:3d:99:64:62:a5:05:
56:d6:3d:78:8a:92:07:ab:b9:4e:28:15:57:0e:78:0c:2e:b5:
30:ae:a8:e2:e6:b8:61:2a:da:9f:67:2d:38:cb:92:15:c9:18:
3b:f2:7e:b8:30:70:31:6a:2c:2b:1e:16:cb:0d:f5:47:16:0c:
3c:fe:fd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:21 2024 by rpki-client on console-ams.rpki-client.org