Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/06E-mOXNhCKsuIvHf3ojxeK4RgU.roa
File: 06E-mOXNhCKsuIvHf3ojxeK4RgU.roa (raw, json)
Hash identifier: ++4ZdEKhPYImBJ8I+HBdWWJko0Cogl1V9QwTMDv+7m4=
Subject key identifier: D3:A1:3E:98:E5:CD:84:22:AC:B8:8B:C7:7F:7A:23:C5:E2:B8:46:05
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018A7B20F6E2D88B197E9C46E9F118A6D020
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/06E-mOXNhCKsuIvHf3ojxeK4RgU.roa
Signing time: Sat 09 Sep 2023 18:07:52 +0000
ROA not before: Sat 09 Sep 2023 18:07:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63018
IP address blocks: 171.22.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7b:20:f6:e2:d8:8b:19:7e:9c:46:e9:f1:18:a6:d0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 9 18:07:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3a13e98e5cd8422acb88bc77f7a23c5e2b84605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:05:9d:ea:89:2e:aa:a9:e9:bf:40:39:59:e9:
5a:af:c3:71:44:b8:4a:89:3c:17:d3:13:dc:82:76:
dc:87:ce:bb:35:2a:e8:b4:fe:e9:ac:9c:2b:9b:70:
b6:85:ec:2c:be:6b:4f:a2:2e:79:4a:03:62:6c:ad:
29:0a:5f:e8:7b:5c:5f:67:8d:c4:67:98:5b:37:1c:
a8:98:ed:9c:a5:12:35:ae:26:d9:7a:c9:c7:1e:1a:
fc:f9:51:81:f0:6d:12:30:45:82:1a:b0:f1:17:8e:
53:ed:45:19:0e:9d:4d:0d:02:81:fe:73:b9:7e:ee:
ff:11:c4:f9:61:58:c5:9e:97:ae:70:94:69:37:24:
1c:dd:7c:3e:f8:3a:b3:40:63:59:ca:31:b9:ee:8c:
c4:75:cb:5a:89:34:6e:b3:0c:c7:cf:10:b3:82:00:
a8:a7:b0:de:fe:4c:4a:f0:0c:4b:9b:9e:87:7b:1e:
d4:01:45:2f:d2:17:c0:eb:58:a3:f1:82:8f:ca:0f:
a6:53:76:f6:d2:fd:a3:3f:1a:42:ef:00:8a:6a:c5:
da:66:15:61:ec:f1:81:89:de:e7:4e:5a:a9:9c:bc:
2e:13:43:8f:3d:9b:29:4c:6b:06:3a:dc:68:f1:80:
82:ef:3a:f0:46:38:59:8e:c9:3d:1a:bb:c4:8c:7f:
94:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A1:3E:98:E5:CD:84:22:AC:B8:8B:C7:7F:7A:23:C5:E2:B8:46:05
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/06E-mOXNhCKsuIvHf3ojxeK4RgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.108.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2e:c2:62:3b:26:aa:06:f6:40:cf:9f:73:5b:d6:c7:1b:68:
ed:e8:eb:75:e9:91:81:43:57:4f:df:0c:7a:f2:e4:cb:a5:13:
e6:e2:21:45:3e:49:e0:cb:33:16:52:86:8d:7e:77:d8:cb:6f:
f6:e9:b7:18:46:76:fc:5c:9b:7c:7e:8a:07:c9:72:62:68:fa:
c4:bd:66:92:68:cd:22:a8:05:a3:45:03:f3:ab:ac:fe:db:40:
4c:8c:da:b8:db:2e:c4:41:7a:8a:d1:e4:8c:3b:d9:cd:6e:af:
63:54:18:65:c5:bd:a8:ca:64:b3:f8:df:e3:88:fe:88:21:43:
d1:b4:cd:53:f9:54:d9:49:d3:d5:07:f0:d7:ce:d3:87:22:89:
24:e8:cb:13:88:41:b8:ce:d0:85:76:2e:83:e7:cc:a4:1d:4b:
28:2f:e1:0b:5f:e6:1b:a6:70:1f:c2:fc:02:a9:ff:ae:c3:7f:
2a:d9:60:01:8a:79:77:b3:70:8e:2f:d7:5f:95:fc:e0:22:b4:
36:97:89:13:dd:d4:f9:b6:88:b0:b6:51:e4:58:5f:ae:80:c5:
e8:c9:e9:80:f2:95:6f:ef:86:b4:3b:bc:90:77:e7:a1:8c:04:
92:86:84:2e:f0:16:70:ba:43:8b:86:61:8e:00:35:f5:78:23:
43:c5:9b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 9 19:42:50 2023 by rpki-client on console-ams.rpki-client.org