Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Gf_1cQCzxZiaf3nLWY6_z4XddFQ.roa
File: Gf_1cQCzxZiaf3nLWY6_z4XddFQ.roa (raw, json)
Hash identifier: SZYduGmL4+UbxUTXTNQ7jzwpPKIpKP6GStemASyQIDk=
Subject key identifier: 19:FF:F5:71:00:B3:C5:98:9A:7F:79:CB:59:8E:BF:CF:85:DD:74:54
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0186CAAC94853B203433CA8DD97A9C0E8864
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Gf_1cQCzxZiaf3nLWY6_z4XddFQ.roa
Signing time: Fri 10 Mar 2023 08:39:13 +0000
ROA not before: Fri 10 Mar 2023 08:39:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41719
IP address blocks: 62.76.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Oct 2023 04:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:ac:94:85:3b:20:34:33:ca:8d:d9:7a:9c:0e:88:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Mar 10 08:39:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19fff57100b3c5989a7f79cb598ebfcf85dd7454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:da:2b:95:5f:db:f9:55:fb:79:a9:5f:e3:
01:00:a7:de:ea:94:1d:92:7e:55:fe:40:13:e8:75:
59:6e:f2:37:35:45:ef:54:22:fb:1f:91:f4:a1:3a:
85:de:3d:a2:9b:93:6b:68:f1:87:b7:e0:5a:04:6f:
54:d4:84:6f:50:ad:04:b4:6e:8c:9d:3f:c5:27:a6:
b8:60:8b:e6:6e:10:28:07:52:bc:ee:66:70:68:fa:
d2:46:e1:8a:b2:17:1e:6e:b5:ac:7d:70:32:b8:77:
6a:c4:1f:c7:45:d3:49:c9:d6:4a:27:9f:da:90:60:
a9:5e:b7:e6:17:e7:0c:6a:e1:f6:bb:8b:42:f7:9f:
c2:57:cf:81:7b:1d:51:c6:d8:68:9a:b5:8d:db:71:
2d:2f:2b:9b:f8:dd:e8:5e:eb:68:e8:1e:c8:13:54:
cf:2d:5b:70:00:ea:bb:dd:57:8f:34:29:60:b3:fa:
bd:c1:8a:c3:a4:f9:68:fc:ff:60:9c:a0:97:11:1c:
33:90:4b:7f:71:bd:fe:7c:8f:49:d8:46:f2:5d:8f:
28:ce:5a:89:02:81:19:5c:89:1f:a4:c0:2b:85:1b:
68:04:70:8a:73:9a:79:e4:2f:ad:79:c8:56:74:49:
d2:0e:28:7a:e3:8d:c3:e0:0c:aa:96:d5:84:7e:12:
ac:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FF:F5:71:00:B3:C5:98:9A:7F:79:CB:59:8E:BF:CF:85:DD:74:54
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Gf_1cQCzxZiaf3nLWY6_z4XddFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.141.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:04:2b:d4:01:6d:23:f9:e1:d5:fa:2e:07:d3:41:cb:8f:85:
5b:9e:15:85:30:4d:b1:c8:c8:6f:e6:10:c9:27:6a:33:b9:fc:
6a:55:1d:29:7b:61:25:24:44:c8:9a:a7:8e:cc:b2:0d:fb:54:
8c:db:2d:5f:4c:67:12:57:72:0d:bd:7f:63:20:ab:08:13:d2:
2d:3e:2e:c3:e7:f9:26:a6:03:ad:1c:6d:87:65:58:a2:bd:14:
a5:86:50:6e:dc:10:f7:7f:6d:83:8c:2b:7d:34:b9:a4:18:b4:
10:4b:a1:8b:63:8a:8c:04:4c:80:9e:36:06:b7:e1:94:bf:02:
7e:b5:13:d4:d0:50:27:09:3e:a9:40:ad:61:9f:3e:ce:e3:ac:
e5:29:d8:9b:ec:2e:0a:5f:4d:b1:e5:f9:ce:c8:a5:07:60:9a:
10:d4:f2:6f:34:bf:dc:3c:75:d1:98:be:60:4f:23:89:c0:db:
38:e0:d2:66:be:22:aa:40:c7:63:06:ae:14:a7:22:9e:f3:fd:
d7:ca:46:10:fd:72:96:f6:2d:ab:0f:e5:aa:cb:82:25:a1:46:
77:72:53:76:ef:5a:49:0d:a5:da:a7:9d:e6:54:12:8a:8f:c1:
f6:56:75:73:42:f9:9f:b0:c7:03:7b:9f:4e:f7:80:dc:11:c6:
18:f0:bf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org