Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/7ldySGPBV_5FUXQu15VzNJ5dxNY.roa
File: 7ldySGPBV_5FUXQu15VzNJ5dxNY.roa (raw, json)
Hash identifier: tr9eO7GMtl05PyVupI8AXRzhIM9zSdvnaQF2cUDgo6k=
Subject key identifier: EE:57:72:48:63:C1:57:FE:45:51:74:2E:D7:95:73:34:9E:5D:C4:D6
Certificate issuer: /CN=1c50a2289e1bf87121ae73ca7116d53f5fd5c4d5
Certificate serial: 0185710C1C67048DD14D8E5EF065A47B6CBC
Authority key identifier: 1C:50:A2:28:9E:1B:F8:71:21:AE:73:CA:71:16:D5:3F:5F:D5:C4:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/7ldySGPBV_5FUXQu15VzNJ5dxNY.roa
Signing time: Mon 02 Jan 2023 05:54:57 +0000
ROA not before: Mon 02 Jan 2023 05:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:1c:67:04:8d:d1:4d:8e:5e:f0:65:a4:7b:6c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c50a2289e1bf87121ae73ca7116d53f5fd5c4d5
Validity
Not Before: Jan 2 05:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee57724863c157fe4551742ed79573349e5dc4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:35:02:a6:13:ca:4c:d0:ef:bd:0a:3e:85:
f5:e7:7e:1e:df:11:9c:66:b6:32:95:c3:7a:76:15:
e2:12:b4:83:33:4c:50:0c:0a:45:21:e0:0b:0f:29:
da:b9:0a:9d:f7:22:6d:0b:ed:a9:68:b8:81:38:25:
cf:33:17:f8:7a:03:ba:3d:b9:a2:b7:a2:40:68:d0:
25:8e:41:bf:15:e9:42:84:b8:76:0b:69:58:6d:60:
69:c6:d1:48:99:a3:2f:1e:bb:30:9a:60:eb:99:e6:
1d:a9:ad:4a:2a:9c:83:08:92:ae:c0:b3:c7:98:b8:
cf:c9:ca:3b:6b:06:92:64:44:10:27:83:a4:09:bd:
33:e2:6d:9e:43:4c:0a:1b:38:16:6e:8b:9b:8f:37:
26:24:91:60:6a:13:56:02:a1:09:e6:67:d8:fa:c0:
77:1a:1e:31:42:7d:58:96:fb:13:2f:29:c1:14:11:
6f:d1:81:c3:69:61:95:85:65:28:8d:92:8e:44:53:
4a:c6:d4:9f:af:b3:8c:7d:f0:aa:6a:9a:ef:61:30:
b6:1b:fb:15:ad:45:8d:a5:f4:e5:92:48:54:be:18:
55:ce:93:b8:99:17:3e:0e:36:82:eb:7c:54:5f:70:
9f:cb:a7:44:93:21:6c:85:47:e1:40:9a:3b:6d:1d:
5f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:57:72:48:63:C1:57:FE:45:51:74:2E:D7:95:73:34:9E:5D:C4:D6
X509v3 Authority Key Identifier:
keyid:1C:50:A2:28:9E:1B:F8:71:21:AE:73:CA:71:16:D5:3F:5F:D5:C4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/7ldySGPBV_5FUXQu15VzNJ5dxNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.92.0/24
Signature Algorithm: sha256WithRSAEncryption
88:2d:55:a1:10:7e:39:ae:95:f8:87:c1:9f:79:73:d7:65:38:
94:b8:4b:d8:40:fa:cb:12:73:3c:86:78:d5:2a:37:b7:94:25:
87:75:15:64:35:05:35:01:ac:07:20:1a:53:8c:38:34:b5:e7:
d8:6f:8b:53:94:a2:e6:b4:ab:b0:37:9c:5b:eb:f0:8b:d3:45:
bb:9d:45:53:f6:92:59:66:3f:54:f2:dd:87:7f:03:58:f0:86:
03:14:4a:31:15:8a:63:7d:eb:f4:a2:24:31:27:82:2e:fe:63:
0c:8f:91:88:24:e2:2a:62:7e:20:42:8a:f6:9c:2a:0f:84:70:
33:eb:78:82:d5:a1:32:b7:4f:9c:7a:82:7a:b5:fc:18:72:47:
52:a8:04:e4:c1:3f:62:60:a7:ba:0d:8a:03:88:13:c0:0b:73:
ca:3a:ec:6d:d8:f2:7c:f4:6f:08:ea:9d:51:16:7a:12:92:d6:
10:fb:de:83:c8:93:03:b6:0a:d4:73:a9:06:13:3b:6b:3b:07:
a7:ea:33:11:fe:d6:eb:67:b0:ad:de:86:58:ea:4e:a0:1a:84:
0a:bc:3e:97:4b:27:f9:c7:0a:52:c9:52:7e:87:00:f3:01:0d:
e7:37:c1:fe:85:ca:26:cf:7f:25:ba:6b:6e:76:3d:23:a1:44:
72:75:43:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:41 2024 by rpki-client on console-ams.rpki-client.org