Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/VUZVr5U9tmWRMhZInhifjc-f3OA.roa
File: VUZVr5U9tmWRMhZInhifjc-f3OA.roa (raw, json)
Hash identifier: V5lOan+M23TkwMENQ1DnP1jj96q7wnx+gCA5+b431ao=
Subject key identifier: 55:46:55:AF:95:3D:B6:65:91:32:16:48:9E:18:9F:8D:CF:9F:DC:E0
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 0185724C5A8A432694FC510C024BDF5E16C0
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/VUZVr5U9tmWRMhZInhifjc-f3OA.roa
Signing time: Mon 02 Jan 2023 11:44:44 +0000
ROA not before: Mon 02 Jan 2023 11:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205569
IP address blocks: 62.181.62.0/24 maxlen: 24
62.181.63.0/24 maxlen: 24
62.181.62.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:5a:8a:43:26:94:fc:51:0c:02:4b:df:5e:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Jan 2 11:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=554655af953db665913216489e189f8dcf9fdce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:42:b1:2b:e6:fd:c6:da:9b:2b:2e:3c:f4:
a2:9a:f5:a2:28:70:97:dc:72:ae:6d:10:c0:b8:c1:
9b:f4:23:15:72:a4:e7:b6:12:e9:6e:4b:6f:cd:21:
c5:09:3d:34:a8:1e:aa:5f:5d:81:fe:8f:86:b5:2a:
25:67:ac:13:52:92:76:31:1f:63:32:52:9b:88:41:
ff:24:6c:55:bd:4b:5a:b4:5d:37:c7:df:a9:d1:54:
2c:ed:25:e0:da:eb:f9:fd:16:83:4c:8c:c9:24:b3:
4a:c4:ac:22:2a:88:09:e9:b7:b9:69:24:9d:d5:19:
e8:d2:52:48:0d:cd:32:ae:24:4c:cb:2f:5b:ce:54:
b3:c5:1c:15:dd:da:61:f6:aa:09:5f:a0:fb:ab:a3:
5b:39:52:5b:aa:b3:b9:15:ca:a5:92:5f:1e:88:09:
71:17:3e:82:65:c5:5e:38:20:1d:05:71:b1:fa:83:
17:fa:b5:46:37:30:45:37:16:ed:1a:26:77:77:54:
15:15:53:ba:2c:49:29:b7:45:28:c4:9b:9e:d1:bb:
a9:37:df:43:2a:85:97:8d:db:c9:d9:40:ec:23:8e:
89:31:6f:25:f3:1a:bb:d2:2b:4e:3a:c8:1a:c9:21:
4f:f4:04:52:e6:4b:76:c9:5b:fa:cd:02:40:bb:e2:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:46:55:AF:95:3D:B6:65:91:32:16:48:9E:18:9F:8D:CF:9F:DC:E0
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/VUZVr5U9tmWRMhZInhifjc-f3OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.181.62.0/23
Signature Algorithm: sha256WithRSAEncryption
96:07:f2:b1:d9:fe:a3:ff:36:bd:fc:ba:a9:3a:63:a1:a4:a6:
24:4d:4c:1e:19:e5:eb:d8:73:41:e7:7e:5d:d5:26:c9:5d:be:
37:6a:59:de:82:87:51:39:b9:bf:00:e7:28:de:86:69:68:e7:
a2:a8:92:ff:04:c7:27:b1:64:dc:5a:2a:3c:6c:05:6e:6d:3a:
90:b4:c5:d2:b2:51:f0:8c:01:57:12:7b:7c:5b:52:ca:e4:b8:
39:b3:84:cd:d9:1a:47:86:db:64:d1:59:b6:17:89:2c:cc:33:
68:61:8e:51:4e:6d:bd:e9:a5:5c:d4:7a:74:ef:21:15:2d:34:
b6:c3:14:91:1e:ee:86:df:42:67:5c:c0:a7:5f:55:94:8b:3f:
9c:f7:24:b8:7e:12:21:af:45:d8:a1:b7:ab:d1:a4:16:72:6b:
cf:1e:c9:19:16:2f:06:72:27:82:f5:c7:b9:14:d9:de:ed:24:
77:de:23:8c:d6:98:43:92:d8:1e:8f:48:22:d5:f6:ab:dc:cc:
3b:fd:00:9f:87:bf:a2:02:08:d6:04:ab:3d:34:dd:87:86:d9:
df:17:e0:eb:b8:ad:82:1f:8a:f4:3f:47:73:78:a5:2e:32:a4:
da:b6:c0:1f:a1:98:1e:ae:e3:17:e6:81:1b:f3:60:f2:85:d3:
d1:43:43:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:28 2024 by rpki-client on console-fra.rpki-client.org