Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/skw8dm5k4tOU3I02EDfOtXzQWmU.roa
File: skw8dm5k4tOU3I02EDfOtXzQWmU.roa (raw, json)
Hash identifier: pOGwp5LVMfActiH5v5N/Z1AWF2dzuk4O36B4VxGgopU=
Subject key identifier: B2:4C:3C:76:6E:64:E2:D3:94:DC:8D:36:10:37:CE:B5:7C:D0:5A:65
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE65644D99CD9B48D75621BCB004810
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/skw8dm5k4tOU3I02EDfOtXzQWmU.roa
Signing time: Sun 01 Jan 2023 10:35:12 +0000
ROA not before: Sun 01 Jan 2023 10:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35183
IP address blocks: 62.176.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:56:44:d9:9c:d9:b4:8d:75:62:1b:cb:00:48:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b24c3c766e64e2d394dc8d361037ceb57cd05a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:93:80:c0:56:9e:b4:ab:fb:e5:1d:10:22:
d6:70:d9:04:88:4e:a0:23:e0:1f:fb:fd:1e:d4:73:
11:47:2c:01:b5:76:d4:fd:47:30:d6:be:30:77:69:
10:1a:8d:9d:5c:11:d9:11:54:ed:e3:3b:48:40:04:
09:0a:8b:fe:a9:30:97:e1:0b:0c:18:0a:da:82:f1:
22:82:cd:c6:d1:19:72:d7:0f:af:6c:7d:51:3f:49:
4d:b6:22:97:54:3a:62:78:13:81:06:be:9a:8c:0e:
95:b9:e8:3b:29:1b:4b:c4:a3:84:e3:63:3d:d6:f8:
b7:21:c2:69:f0:00:2b:70:6c:69:18:c1:2b:85:a2:
e7:c6:f1:ab:c2:d2:48:59:c8:5e:f4:f2:27:39:4c:
79:8d:39:87:81:da:0d:ba:be:cb:5b:93:ba:bb:25:
c6:a8:1a:f6:37:85:ab:0a:64:8e:cb:af:8c:a8:ea:
58:9f:a2:35:5c:b7:39:ec:ec:31:83:52:b8:2d:57:
8e:d3:70:59:8f:9e:e1:61:6f:ac:21:fd:c7:61:e8:
59:9a:e0:91:ad:34:a0:e5:6d:5e:47:05:ab:64:c2:
a6:e8:2d:a5:ff:90:97:93:4c:9e:93:93:f1:67:62:
3a:86:b2:45:ec:c0:08:29:fe:0f:fe:6a:3e:dd:09:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4C:3C:76:6E:64:E2:D3:94:DC:8D:36:10:37:CE:B5:7C:D0:5A:65
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/skw8dm5k4tOU3I02EDfOtXzQWmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.176.111.0/24
Signature Algorithm: sha256WithRSAEncryption
66:17:76:e1:6a:de:63:ba:5e:dc:7e:bc:6e:37:8a:4a:da:76:
b7:2c:8a:09:6b:7b:ca:29:8a:3a:a9:26:08:b8:b2:b9:10:41:
58:f9:44:7e:86:d5:12:2b:02:a6:af:3d:28:77:64:ac:53:d0:
c4:88:6b:5e:da:55:01:46:fe:ff:98:59:99:c2:ee:08:8e:15:
69:3f:a5:d4:e6:19:b1:ea:1d:79:ab:5d:d9:e8:03:a5:66:18:
85:42:3e:99:22:72:55:a2:a0:77:bd:6b:81:89:9a:a8:6a:fb:
db:6a:39:d8:31:15:b4:00:59:78:1e:94:15:10:87:1e:15:8e:
06:77:dc:30:29:2b:17:e6:eb:0a:b7:1f:d3:8d:10:fe:8f:ec:
31:e7:98:53:d8:f2:c1:10:1d:ae:a6:86:e6:80:54:1d:88:7c:
6c:21:06:02:ae:8a:be:0c:c1:f2:f2:d8:3b:bb:18:21:46:22:
9c:20:32:77:51:d7:94:a2:87:4f:52:9b:f2:c0:0d:bd:d3:ad:
ed:a1:29:05:5f:42:26:10:96:7d:12:ba:e7:18:85:7d:f4:39:
7d:9d:4d:4f:aa:2b:2b:fc:bd:e3:5c:1b:5b:5b:d4:72:1e:86:
27:39:39:1f:8c:9f:f8:d4:12:06:40:83:5f:59:22:ce:64:3e:
4b:49:78:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:05 2024 by rpki-client on console-fra.rpki-client.org