Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/p9c57kZp5ZExT9dDkoi40p0vpLk.roa
File: p9c57kZp5ZExT9dDkoi40p0vpLk.roa (raw, json)
Hash identifier: pxbWPbdkQxE1LYSPbQvq4cdwGRQTfzUfl9nOMotWa+c=
Subject key identifier: A7:D7:39:EE:46:69:E5:91:31:4F:D7:43:92:88:B8:D2:9D:2F:A4:B9
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 0185724C5B24A2D7977AD77EF2B69A9413DF
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/p9c57kZp5ZExT9dDkoi40p0vpLk.roa
Signing time: Mon 02 Jan 2023 11:44:44 +0000
ROA not before: Mon 02 Jan 2023 11:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206585
IP address blocks: 62.181.60.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:5b:24:a2:d7:97:7a:d7:7e:f2:b6:9a:94:13:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Jan 2 11:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7d739ee4669e591314fd7439288b8d29d2fa4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:00:57:1b:45:58:57:f0:10:12:53:b8:5d:74:
35:28:61:84:11:d8:5c:5c:69:06:46:53:ee:e6:b7:
80:a9:ad:1b:40:1b:39:70:c5:21:ed:aa:ec:c9:3b:
c6:55:b3:07:44:40:7a:00:1f:db:52:b9:b2:2a:0b:
7a:7e:70:e3:3e:4f:6b:2f:c0:b3:af:c7:41:09:f9:
5b:82:f7:ef:88:de:95:b5:b4:9b:7c:78:7c:0f:ca:
f7:93:8e:d4:05:3e:65:1f:29:97:60:cf:67:46:76:
b0:49:95:da:c7:df:9c:d4:c3:95:4e:fe:c0:f7:57:
df:d9:3e:54:9f:3f:27:cf:85:07:2e:1e:3c:fd:2b:
19:89:a5:e6:8a:87:16:a8:ea:43:a9:47:5b:d7:62:
b3:93:d7:ea:aa:06:0a:6e:fb:a7:b5:9c:c1:a0:6c:
6c:9b:86:fe:ce:59:03:5f:22:b6:51:fd:72:df:ec:
77:83:ac:a7:e0:25:4a:4a:41:2b:c9:13:c6:46:12:
cf:b1:9b:a5:70:03:9d:9a:9f:3a:b1:6a:95:3c:76:
70:b8:32:f6:80:1f:36:98:02:c1:34:3d:2d:10:61:
98:1d:69:7b:f8:b1:05:75:91:68:f1:9d:b8:39:4d:
df:60:60:2b:a4:44:a1:6e:60:16:46:76:67:38:0d:
d5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D7:39:EE:46:69:E5:91:31:4F:D7:43:92:88:B8:D2:9D:2F:A4:B9
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/p9c57kZp5ZExT9dDkoi40p0vpLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.181.60.0/23
Signature Algorithm: sha256WithRSAEncryption
63:33:fb:90:6d:03:b5:9a:a3:71:75:d4:a8:00:99:e6:fa:ee:
98:07:ce:99:6c:47:1e:a4:7d:c9:c2:50:05:58:bd:25:e2:a3:
ef:e3:a7:a7:7a:4d:46:d7:49:20:98:c4:b6:b2:cb:85:2d:01:
e7:0c:f4:47:80:a5:71:76:7d:43:d1:f7:8a:0a:45:72:da:63:
a6:62:06:43:cf:56:e3:2d:c9:bf:f3:eb:a4:1d:f2:39:e0:b1:
b4:a3:f2:87:7e:aa:5f:12:30:95:a7:45:34:d7:c3:60:fd:5c:
83:16:39:e5:aa:be:8e:59:54:92:a2:4b:a9:d9:5a:17:bc:5b:
dd:3c:ce:b6:12:6b:43:37:f3:70:c1:23:98:88:4d:cf:d7:04:
9c:cc:05:43:d4:69:48:e1:6d:ff:ca:93:c4:d3:15:d1:a4:2e:
62:91:8b:b4:c2:57:bd:9a:66:fe:f6:a9:3f:b7:a2:53:76:ad:
35:43:1e:30:93:30:ee:bc:55:66:92:ed:1a:9a:b0:f7:f6:47:
95:60:0b:67:cf:85:e0:13:99:49:68:d1:01:2d:aa:32:56:e4:
75:f9:bf:23:72:3e:cb:f5:5c:9d:9e:3d:90:cf:7e:34:d5:5b:
9d:2a:71:92:93:80:4c:db:12:ff:b2:96:dc:35:ed:51:81:12:
02:4c:56:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:02 2024 by rpki-client on console-ams.rpki-client.org