Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jReGSIf57eyv-JwwU-QUTtfB3yk.roa
File: jReGSIf57eyv-JwwU-QUTtfB3yk.roa (raw, json)
Hash identifier: qYYvOQ3a+//hcCwkH+J+1G2UOsxNcoBekN0z6/LX9J0=
Subject key identifier: 8D:17:86:48:87:F9:ED:EC:AF:F8:9C:30:53:E4:14:4E:D7:C1:DF:29
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0188D803BF0D68E8257108A8EDA71D008FE6
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jReGSIf57eyv-JwwU-QUTtfB3yk.roa
Signing time: Tue 20 Jun 2023 08:55:04 +0000
ROA not before: Tue 20 Jun 2023 08:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61112
IP address blocks: 45.8.186.0/24 maxlen: 24
5.253.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:03:bf:0d:68:e8:25:71:08:a8:ed:a7:1d:00:8f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 20 08:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d17864887f9edecaff89c3053e4144ed7c1df29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:c3:67:f5:11:81:73:60:a9:28:62:fe:9b:
e4:f8:ed:49:70:9b:75:12:d6:df:77:0e:e3:0b:c7:
5d:ad:3b:3a:34:42:07:eb:41:09:79:23:72:ed:d1:
14:59:c6:2a:4b:39:44:e5:63:56:47:d4:c6:75:1d:
52:fb:c2:9f:79:83:52:a4:f3:0a:b0:de:fa:b5:87:
e8:e7:99:ab:a1:f1:91:4e:74:e4:13:e7:f9:70:5d:
fd:53:94:b4:1a:63:fe:31:92:0d:cd:40:ed:f3:17:
61:7f:dd:6c:e1:b4:74:98:e1:4f:8c:b0:b2:7a:a1:
45:59:e2:5d:ff:c7:a7:36:42:2e:3f:26:69:cd:23:
2e:5a:58:03:7e:72:8d:77:42:94:e9:11:3e:dc:cc:
40:02:21:7e:d9:51:5a:83:49:28:26:1c:c8:f8:8a:
06:d7:8a:62:23:22:10:50:a7:68:8c:96:c4:29:6c:
d3:ee:44:37:5a:a0:52:d3:6b:8e:ec:0d:90:ea:19:
f1:21:dd:35:01:9e:b6:1c:a5:af:9f:43:42:36:05:
23:3c:a0:08:92:e8:9a:38:ef:ad:1d:52:c7:93:e7:
6c:dc:96:59:be:8a:24:3a:5d:f0:51:de:3f:73:7a:
70:c6:20:52:21:db:95:00:11:48:23:fc:4d:70:79:
40:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:17:86:48:87:F9:ED:EC:AF:F8:9C:30:53:E4:14:4E:D7:C1:DF:29
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jReGSIf57eyv-JwwU-QUTtfB3yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.36.0/24
45.8.186.0/24
Signature Algorithm: sha256WithRSAEncryption
02:9c:30:8c:04:53:14:7c:ce:eb:78:ab:44:d3:be:09:93:4e:
50:d9:94:46:8d:ee:56:ba:92:73:c0:82:5c:28:39:e7:0b:1c:
6b:89:78:9f:25:59:48:fa:33:6b:18:9e:f8:7c:dc:e3:a1:da:
e3:5f:4b:a7:b4:fe:00:a2:b9:5f:af:69:c7:91:4f:35:0f:ad:
12:9f:01:ae:ac:f3:47:5f:78:7d:ee:12:e0:d7:7f:ca:30:3c:
02:84:38:0a:1f:67:4c:b3:5e:82:21:02:e6:d6:33:75:9a:74:
76:95:70:d0:5c:94:fe:ac:35:d2:d5:26:b7:f6:21:ca:de:69:
8e:1e:34:f8:cd:5a:c1:85:e1:1c:49:b1:8c:4d:b5:2f:16:de:
41:25:f4:b2:88:9e:ef:7f:cf:99:9e:05:78:56:f3:55:98:20:
25:5d:77:30:a1:bc:3d:64:e3:60:14:9a:30:62:34:07:7a:57:
20:ea:33:27:d2:e1:38:55:c1:5a:e3:de:1c:06:23:69:84:75:
2b:c2:74:51:0c:e3:55:07:f8:1a:a0:75:25:14:fe:f3:53:c3:
b0:2a:53:7a:2f:9c:33:a9:9f:bd:20:d7:5c:ef:db:f7:94:69:
89:9a:06:19:15:37:63:00:f7:7d:a9:31:3a:8c:b0:8c:33:08:
dc:40:02:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 7 15:36:09 2023 by rpki-client on console-ams.rpki-client.org