Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/YI6ecyCuNsn5Uy9P51dFwUInrjM.roa
File: YI6ecyCuNsn5Uy9P51dFwUInrjM.roa (raw, json)
Hash identifier: 32DtWcdfmq/JRT7l7Qg27g2hDIupiLZJw5N8Irv7bTk=
Subject key identifier: 60:8E:9E:73:20:AE:36:C9:F9:53:2F:4F:E7:57:45:C1:42:27:AE:33
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01888D55A019EA00B76750D2999F50AA49AC
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/YI6ecyCuNsn5Uy9P51dFwUInrjM.roa
Signing time: Mon 05 Jun 2023 20:52:58 +0000
ROA not before: Mon 05 Jun 2023 20:52:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62425
IP address blocks: 45.9.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8d:55:a0:19:ea:00:b7:67:50:d2:99:9f:50:aa:49:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 5 20:52:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=608e9e7320ae36c9f9532f4fe75745c14227ae33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:19:27:29:19:3a:65:e2:1c:81:1f:27:12:c5:
1e:18:13:2d:46:04:55:2e:a0:f1:e0:55:e3:a8:89:
7f:1d:6f:ab:57:8a:89:b9:f9:01:04:97:f6:9e:1c:
b8:67:22:4f:ae:55:f9:7f:e7:16:94:02:00:48:16:
e4:8e:c0:91:06:eb:22:e0:bf:19:71:c3:02:61:24:
c4:98:d0:36:a4:a8:48:ef:9b:4e:c0:63:74:5e:52:
e9:92:12:f2:bc:dd:9e:f3:0c:2f:ec:33:af:2d:6a:
3f:a0:34:16:a0:dd:cd:98:d4:8c:a2:44:69:d6:8e:
5f:3d:dd:77:86:12:ae:85:43:cc:e3:e3:76:c7:74:
84:8e:5c:3a:46:57:e7:e5:47:32:4c:6c:92:74:f4:
4f:97:d3:7f:82:b7:89:59:cf:e6:b3:d6:d6:27:06:
7b:47:d5:c3:3e:93:53:e8:62:60:0b:0d:eb:7d:57:
4b:1a:03:14:2e:97:db:b9:cd:e8:87:a2:99:ed:f6:
ad:66:1e:2d:d5:b5:e3:75:7e:1a:d5:7c:4e:3b:d6:
ec:bc:91:d1:6e:41:be:3c:a8:06:eb:18:d3:36:70:
33:38:ee:7f:e3:d6:ea:8d:88:04:f9:69:e4:f0:14:
93:3e:e7:45:08:0f:86:d7:14:4b:af:cd:16:15:cd:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8E:9E:73:20:AE:36:C9:F9:53:2F:4F:E7:57:45:C1:42:27:AE:33
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/YI6ecyCuNsn5Uy9P51dFwUInrjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.2.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d1:f9:7d:bf:73:bd:a9:cc:9e:2f:7e:0d:c6:65:17:3f:b0:
d8:b6:de:65:df:87:09:26:b6:ea:c6:14:f5:3c:b0:67:cf:86:
56:b3:b6:fb:28:c2:16:ca:c9:38:d4:ba:ab:8f:47:00:1c:6f:
3b:c0:70:b4:4e:37:c7:85:52:c4:c7:6c:dd:1f:f6:d1:90:52:
7b:87:b2:39:72:03:02:65:57:d1:dc:3c:15:15:23:e5:4f:d9:
3a:c2:70:8a:c9:45:af:dd:62:69:50:ff:0e:07:d2:1c:e0:91:
26:b5:42:49:93:62:da:5d:35:13:a3:9d:75:66:aa:22:d5:7e:
9d:9f:0a:6d:1c:34:ee:1a:da:9a:7a:a8:8b:6f:2f:f2:f8:94:
f0:38:a9:e0:99:01:9c:c1:6c:51:f2:fe:76:ef:17:d4:5b:09:
c0:13:66:ab:79:f8:9b:a4:c9:57:3b:ef:79:f2:50:46:f8:36:
2c:03:b3:b4:da:0b:40:af:aa:65:1e:6e:6a:6c:5e:ed:6e:ef:
16:14:65:47:b2:50:8d:3b:c0:2f:33:47:39:d0:a7:ef:15:42:
4d:4c:bb:e9:bc:d8:2f:15:d4:b7:09:a7:6a:4a:5c:19:b1:0d:
71:ea:46:60:dd:c4:ba:f4:08:8f:3c:5e:78:f4:cf:32:3d:2e:
ca:de:8a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 20:06:40 2023 by rpki-client on console-ams.rpki-client.org