Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/ThI0EpQ03HP7_bQFcaE_y_3ziqA.roa
File: ThI0EpQ03HP7_bQFcaE_y_3ziqA.roa (raw, json)
Hash identifier: I3nWUHg7utDSEKkLpiiEgOFnHU97dr2A2PsY3E1ZPB8=
Subject key identifier: 4E:12:34:12:94:34:DC:73:FB:FD:B4:05:71:A1:3F:CB:FD:F3:8A:A0
Certificate issuer: /CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Certificate serial: 01856E78CC0D5CB62FC1E876D24C6B61ADD2
Authority key identifier: 4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/ThI0EpQ03HP7_bQFcaE_y_3ziqA.roa
Signing time: Sun 01 Jan 2023 17:54:48 +0000
ROA not before: Sun 01 Jan 2023 17:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51964
IP address blocks: 62.229.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Feb 2023 06:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:cc:0d:5c:b6:2f:c1:e8:76:d2:4c:6b:61:ad:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Validity
Not Before: Jan 1 17:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e1234129434dc73fbfdb40571a13fcbfdf38aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ca:6b:3b:9d:84:73:7a:d5:6a:44:fd:3e:a2:
31:49:34:f9:f6:c5:d9:7e:05:00:60:c4:16:d4:b6:
53:e5:3a:46:8d:7e:f1:ee:11:7d:0b:2b:d7:7b:83:
c0:b5:40:b1:54:b7:bb:30:f5:3d:ba:65:fa:34:ed:
13:ca:4b:f9:ef:cb:d8:22:73:4a:70:26:a2:d1:8e:
00:c1:05:ad:9e:ad:70:d5:60:7d:90:d7:f6:c1:71:
cc:9c:0b:a3:d6:26:bc:cf:3d:b6:a0:f8:a9:d2:3a:
e6:d9:78:71:ce:fe:29:25:83:ad:3e:09:a4:c5:09:
6c:46:eb:e1:3b:6a:85:c7:77:4e:ae:97:07:77:bf:
3f:e2:a8:85:b1:e9:9a:65:37:b5:40:4f:87:0a:bf:
0c:43:d3:28:9d:c1:18:67:77:17:62:fd:e8:81:ab:
c5:f7:61:1b:7d:be:dc:06:33:e6:0d:82:b6:7e:a8:
34:f7:fa:94:d7:ee:ca:2e:17:76:01:51:89:52:26:
22:3b:58:77:ff:69:ea:f3:2b:d9:1f:62:8c:f7:e6:
84:f9:15:e4:96:b9:3f:0c:06:4c:80:74:fe:11:6f:
8c:55:e7:c9:54:06:c6:ec:fd:fe:72:af:26:a6:f2:
d8:af:1e:fd:10:29:6a:ad:be:7c:6a:77:4f:2f:51:
46:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:12:34:12:94:34:DC:73:FB:FD:B4:05:71:A1:3F:CB:FD:F3:8A:A0
X509v3 Authority Key Identifier:
keyid:4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/ThI0EpQ03HP7_bQFcaE_y_3ziqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.229.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:d4:27:81:7c:e2:0b:00:79:76:7a:fe:b6:ca:8a:67:7f:b9:
eb:e5:51:c0:93:23:33:84:67:39:66:cf:7c:c1:e8:c1:37:6e:
41:57:de:b1:9a:5b:94:8e:7b:77:c1:32:71:bb:d8:6f:17:0b:
d8:36:4c:37:97:c6:a4:5d:e7:2f:e4:21:31:e4:49:34:fd:e6:
b5:8d:82:67:c0:3f:5c:e3:59:8e:09:ba:e3:78:93:87:c6:31:
7d:2b:b0:47:c4:c8:5e:1f:5d:19:81:34:79:64:f4:df:eb:65:
ad:84:ba:12:1c:52:fa:b1:4f:a7:a1:13:e9:5d:91:f1:5a:bb:
c2:02:60:cf:09:2a:69:7b:9f:b1:c9:92:fb:da:30:f2:69:27:
51:61:cf:67:ae:70:16:7c:c6:57:f9:94:cb:53:af:54:15:f3:
01:cb:5d:ab:60:65:8d:9d:27:8e:d7:57:c3:89:6b:b4:59:87:
03:5d:b2:0d:11:cd:12:b3:a2:b0:38:cb:65:09:56:1f:0d:9b:
04:c0:ce:63:b1:5e:a2:ed:5e:2d:51:dc:d9:3f:16:f5:ed:dc:
04:6d:e5:85:48:be:36:d1:9a:78:2d:4d:10:b2:a9:29:1b:2a:
25:d7:06:8a:69:ae:30:f1:a6:fd:3e:68:e5:c3:c9:fa:74:82:
8e:18:41:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:16 2024 by rpki-client on console-ams.rpki-client.org