Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/fx7xmkJyUP-a81vak6N2eEYqOPk.roa
File: fx7xmkJyUP-a81vak6N2eEYqOPk.roa (raw, json)
Hash identifier: jrcldlf7uTzMSmTXPzHPO2PsbeHmydq1T0KkiIB2b8Y=
Subject key identifier: 7F:1E:F1:9A:42:72:50:FF:9A:F3:5B:DA:93:A3:76:78:46:2A:38:F9
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 01856BAE96E6582B06C639530CE2C3C2309C
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/fx7xmkJyUP-a81vak6N2eEYqOPk.roa
Signing time: Sun 01 Jan 2023 04:54:42 +0000
ROA not before: Sun 01 Jan 2023 04:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2116
IP address blocks: 62.176.192.0/19 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:96:e6:58:2b:06:c6:39:53:0c:e2:c3:c2:30:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Jan 1 04:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f1ef19a427250ff9af35bda93a37678462a38f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:ae:88:09:4e:9c:b1:ca:2e:1e:66:f8:bf:
9f:89:dc:86:a5:44:c5:f1:16:cc:77:d3:b0:e8:b6:
df:95:85:7e:e0:ae:21:2b:11:06:80:88:d1:53:67:
dd:62:f7:2d:98:e7:92:c3:63:4d:ad:cf:b2:93:5b:
96:93:d1:65:db:19:92:21:2e:b7:9d:81:81:89:0e:
66:3b:4a:41:34:bd:8b:82:95:2c:73:c9:36:f2:23:
12:e5:37:59:19:c7:15:bc:73:eb:38:56:f8:30:4c:
42:83:32:c5:fc:4c:24:30:11:85:df:bd:b9:af:0e:
93:f1:90:66:3a:7b:fe:bc:37:0c:c1:cb:3f:3d:99:
af:38:b4:26:b9:1e:14:60:67:49:5c:47:30:53:be:
7f:b5:41:eb:ae:dd:65:40:43:57:6b:2a:b7:b8:4a:
2c:a1:0f:5f:53:ff:48:b8:99:c9:2e:fa:e6:09:fd:
36:28:c7:09:ce:99:23:ee:f9:8c:49:74:02:69:f3:
ee:6e:2a:a5:7d:64:15:df:bd:45:3d:36:5f:d2:63:
a8:98:d8:de:50:ce:93:d2:15:43:6d:90:3c:54:a2:
6e:b6:8d:cc:c3:72:69:8d:2e:0b:57:50:1b:e4:b2:
0e:c3:0b:3c:ea:ff:69:a3:74:75:ce:bf:3f:14:48:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1E:F1:9A:42:72:50:FF:9A:F3:5B:DA:93:A3:76:78:46:2A:38:F9
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/fx7xmkJyUP-a81vak6N2eEYqOPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.176.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:83:5f:3b:71:79:3d:37:4c:95:6f:1a:ad:09:d7:d5:27:80:
08:eb:ed:87:03:25:92:4d:6b:75:f7:15:15:1a:ec:f7:30:f7:
a4:12:c9:d9:45:a9:62:92:27:44:b8:8a:9b:4c:61:f6:af:33:
b3:a7:6a:21:7d:44:cf:30:6f:da:1a:2a:dc:7f:df:3c:f3:64:
a7:26:13:92:a3:b9:30:5f:10:f5:73:b0:b1:ce:94:0f:85:be:
cf:8b:4b:e6:80:27:20:e7:a5:78:83:1a:5b:5e:6a:05:90:43:
3f:49:65:82:8e:4f:5f:17:3a:79:6e:9f:b0:f4:f1:3f:0b:a2:
66:f4:bd:16:82:b6:5f:47:7c:c9:f7:4e:6d:00:82:ca:ba:75:
b3:70:0d:cf:ae:7f:fd:04:ec:42:0e:0d:87:91:94:82:30:84:
59:1a:46:05:52:b3:1a:3a:2c:8b:b8:ec:62:83:2c:d5:62:67:
e2:36:81:f0:48:cd:d2:fd:66:e0:ac:f1:af:47:89:d9:fa:02:
d0:8d:4c:b6:0c:e9:38:c8:a2:4b:ad:f4:e9:dd:59:e2:97:15:
cf:c0:33:13:6f:aa:8d:48:6a:53:fc:1b:ec:04:d3:86:a8:e3:
47:fc:43:02:d4:8c:e1:44:a9:a3:49:2d:a4:f5:96:2b:20:48:
80:58:1b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:26 2024 by rpki-client on console-fra.rpki-client.org