Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/SqHiBzYVcncLRpV5GyK3JBkgkUE.roa
File: SqHiBzYVcncLRpV5GyK3JBkgkUE.roa (raw, json)
Hash identifier: tDxKsIPZ6Ha5jEsEfOIPjj9PPV1sbC8jGF+PiX2H3vY=
Subject key identifier: 4A:A1:E2:07:36:15:72:77:0B:46:95:79:1B:22:B7:24:19:20:91:41
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 01856BAE978C5BA0AB04159B7DEAB1BD1E2F
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/SqHiBzYVcncLRpV5GyK3JBkgkUE.roa
Signing time: Sun 01 Jan 2023 04:54:42 +0000
ROA not before: Sun 01 Jan 2023 04:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50304
IP address blocks: 62.176.216.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:97:8c:5b:a0:ab:04:15:9b:7d:ea:b1:bd:1e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Jan 1 04:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4aa1e207361572770b4695791b22b72419209141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:96:1b:dc:a5:a0:98:31:ad:3a:72:2a:81:25:
6b:76:58:2b:fb:19:0a:4e:5f:27:d4:ab:e0:9a:f2:
b8:8c:cf:4f:e1:56:d6:23:eb:cc:3e:31:c3:df:20:
48:2d:ae:18:d0:24:d7:8c:0a:16:a6:5f:7f:4b:18:
a8:6a:55:10:2d:9d:67:13:c7:0b:b7:35:ae:33:ee:
7b:95:c5:2b:a4:5d:ba:66:f6:cb:2e:f2:4b:d1:90:
1a:aa:9e:29:03:10:de:95:43:4f:ab:1e:a5:20:84:
02:db:60:c3:61:e5:3f:f5:d5:9c:f5:5c:aa:63:72:
62:e7:f7:87:70:84:4f:c4:ad:48:b9:0c:fa:f6:a9:
6f:ed:5c:7a:83:b8:aa:fa:0b:f5:43:2c:9e:6b:84:
88:d7:4e:95:88:23:f1:25:a6:f4:85:6d:d4:5a:cb:
dc:25:14:8c:c6:6a:28:d0:9b:82:82:49:83:8b:c0:
bb:60:fc:0c:0c:b9:10:c5:1e:f5:22:99:1b:2a:59:
f2:68:a4:c7:b7:ac:c6:81:28:be:8b:96:b2:4b:40:
67:3b:e8:af:77:b5:e5:d1:2e:94:ef:84:de:31:c0:
09:af:2a:c9:31:db:79:06:28:2a:8e:dd:2a:9f:20:
f5:e7:e7:67:55:12:75:06:15:7d:97:6e:b6:a6:93:
25:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A1:E2:07:36:15:72:77:0B:46:95:79:1B:22:B7:24:19:20:91:41
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/SqHiBzYVcncLRpV5GyK3JBkgkUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.176.216.0/21
Signature Algorithm: sha256WithRSAEncryption
88:4c:88:5d:34:2d:33:71:53:e4:6a:8a:b8:da:87:08:1a:ca:
66:06:3c:59:e7:65:c1:2b:b8:e3:af:1e:8d:4e:8f:8b:82:63:
b1:64:d4:94:cc:ed:25:a9:07:3a:10:0e:81:35:db:34:e2:46:
9c:18:cf:1f:53:0d:e5:f6:c2:80:76:15:f6:76:35:47:e7:f1:
85:ae:c0:7b:ff:5f:4c:fd:a0:bb:0d:47:3c:aa:3a:4a:d2:7b:
96:05:75:9b:10:68:6d:85:9c:15:21:91:5e:a1:18:b0:6c:d0:
cc:71:c9:63:63:33:dc:3d:72:28:60:7e:bf:86:63:69:32:2c:
f2:bc:e0:84:4e:90:70:69:b6:62:35:db:15:af:d3:46:79:49:
ff:ee:39:0d:2d:10:36:59:0a:69:20:ae:41:08:05:35:7c:91:
5c:c2:34:7b:23:84:c0:de:50:4d:86:8a:bb:f1:74:49:19:df:
5f:f1:57:06:65:01:39:15:b2:eb:35:75:43:d1:96:2f:a5:10:
60:01:44:2c:bb:76:b6:6e:80:16:70:01:43:b5:c3:81:ee:3f:
4d:5e:73:e8:b3:6b:16:bd:94:89:d8:58:a7:f1:fa:15:bb:14:
a8:f0:fd:33:8b:83:15:aa:10:6f:0d:aa:bf:5d:a6:d5:7a:ff:
9c:d6:b5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:38 2024 by rpki-client on console-ams.rpki-client.org