Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/eH9ZI_nI9cK2EsG6I4vikTsj_SM.roa
File: eH9ZI_nI9cK2EsG6I4vikTsj_SM.roa (raw, json)
Hash identifier: yVXcuWX4mCEKnt4yyx5o1levNhPY8/FNdAWpXctZKYs=
Subject key identifier: 78:7F:59:23:F9:C8:F5:C2:B6:12:C1:BA:23:8B:E2:91:3B:23:FD:23
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01856D664169D22162FC66AED210E836CCEE
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/eH9ZI_nI9cK2EsG6I4vikTsj_SM.roa
Signing time: Sun 01 Jan 2023 12:54:56 +0000
ROA not before: Sun 01 Jan 2023 12:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34624
IP address blocks: 82.98.201.0/24 maxlen: 24
62.93.200.0/24 maxlen: 24
62.93.216.0/23 maxlen: 23
62.80.125.0/24 maxlen: 24
62.80.124.0/24 maxlen: 24
62.80.127.0/24 maxlen: 24
62.80.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:41:69:d2:21:62:fc:66:ae:d2:10:e8:36:cc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 12:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=787f5923f9c8f5c2b612c1ba238be2913b23fd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9f:60:e0:94:7a:c2:43:01:32:95:fc:ed:e3:
ad:83:6f:5d:ca:98:e2:f3:30:0f:fd:3f:7b:e9:fd:
50:c3:2b:8f:41:60:f3:76:c0:74:8a:7a:ab:93:54:
3b:4c:2b:1e:50:52:da:f9:b5:3b:bb:5c:af:42:3b:
da:49:aa:30:4c:14:87:9b:45:4e:19:8a:e1:b7:fd:
73:0e:2f:b9:54:61:78:d2:1a:eb:31:e2:39:c2:28:
b9:b1:16:aa:13:88:9f:b9:ce:aa:cc:d5:0b:72:d6:
be:d2:d6:bc:c2:d6:b7:c0:89:19:99:dd:ff:72:6f:
be:4d:79:da:32:26:e3:87:96:4e:f0:3f:49:bf:10:
2d:1e:e5:07:10:a9:d0:09:c1:7d:cf:8d:46:ac:e2:
a6:d3:33:c8:fa:78:03:a8:2a:1e:e1:67:35:6e:b5:
7d:d3:8b:ca:71:e9:64:36:db:0b:e2:58:7b:b7:46:
17:86:fc:1a:7c:34:80:e0:10:32:8f:ca:07:03:b9:
95:4b:08:1b:8e:9d:7c:2b:b4:29:12:44:5d:06:25:
8c:e9:d8:1f:62:5d:7d:4b:84:73:c1:fd:fe:16:02:
2a:be:e7:7e:72:8f:ce:7c:94:4f:f4:81:b7:9c:f6:
e3:b1:fc:38:25:5a:5c:b4:78:bb:88:b2:37:01:c2:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7F:59:23:F9:C8:F5:C2:B6:12:C1:BA:23:8B:E2:91:3B:23:FD:23
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/eH9ZI_nI9cK2EsG6I4vikTsj_SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.80.124.0/22
62.93.200.0/24
62.93.216.0/23
82.98.201.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d1:a4:be:61:4b:7d:04:29:1c:2d:28:3e:2f:e8:75:bb:25:
b8:cc:f4:9e:70:5d:f2:21:e9:75:76:73:e4:0c:00:ef:ec:8d:
9d:36:06:4f:a5:cf:0c:cf:69:6e:82:31:41:90:fe:2b:da:8d:
0b:d1:73:b8:cf:06:8e:a9:6d:23:cc:8a:ea:7c:be:f1:58:2f:
38:50:67:9f:e3:9d:18:72:ce:89:04:86:7d:35:91:66:c6:67:
49:51:a2:8c:1e:60:99:d3:37:95:c0:1b:80:20:47:e8:1e:8b:
41:81:47:af:c3:fd:cd:33:05:10:db:75:a2:48:17:68:3e:3d:
ec:4f:a5:53:77:e1:4e:24:a8:5f:ee:3a:14:e6:c3:86:c5:a9:
50:f1:5d:7d:ad:16:5d:d2:31:30:df:e1:18:f4:b5:dd:8b:0d:
ca:b8:1e:1b:c2:d5:2a:4d:c8:36:3b:83:00:9e:27:c4:36:f8:
73:1d:06:14:84:38:68:27:cb:11:2c:c7:20:14:94:32:25:2d:
ed:0b:c4:1d:85:15:0c:f8:2d:fa:26:b2:f5:94:19:34:8f:ce:
b1:36:0b:5a:aa:c1:26:43:12:9a:8e:db:2d:de:ef:4b:c2:13:
00:db:8a:e8:03:a1:1b:3d:3e:49:24:c9:a7:2d:40:0c:86:0b:
a4:ac:72:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:34 2024 by rpki-client on console-ams.rpki-client.org