Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/mqTmcoivLmc8kngiNA3VqBSNOwg.roa
File: mqTmcoivLmc8kngiNA3VqBSNOwg.roa (raw, json)
Hash identifier: efh93Lo5yU40GCSzB2L8OVdzzZTtvsEQ178JS1jorjg=
Subject key identifier: 9A:A4:E6:72:88:AF:2E:67:3C:92:78:22:34:0D:D5:A8:14:8D:3B:08
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 0192CD79128688E2F6851985CCA257529C4E
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/mqTmcoivLmc8kngiNA3VqBSNOwg.roa
Signing time: Sun 27 Oct 2024 10:15:16 +0000
ROA not before: Sun 27 Oct 2024 10:15:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43358
IP address blocks: 62.102.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cd:79:12:86:88:e2:f6:85:19:85:cc:a2:57:52:9c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Oct 27 10:15:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9aa4e67288af2e673c927822340dd5a8148d3b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:4d:87:33:7f:37:38:2b:29:c6:be:1a:7f:
48:5d:d7:8c:43:8d:92:d1:a5:94:4e:68:a4:7e:ad:
09:23:a4:11:8a:4a:83:81:81:48:a3:6a:08:34:5c:
5d:60:2a:08:e4:5e:1b:bc:e1:d4:f2:b9:60:a1:25:
87:94:6a:f2:bc:dc:f6:40:bd:8f:f7:d3:cd:13:db:
85:ad:62:d7:92:05:3e:7a:2b:23:4f:d0:1e:e8:d0:
0a:dc:e3:d4:42:9a:24:7e:ed:b7:8e:0f:e9:3c:ef:
ea:df:66:42:e4:60:27:20:e7:e7:0d:81:3e:2c:70:
3b:eb:a5:89:f5:87:ad:46:cf:5d:27:8a:5a:48:33:
ae:54:91:94:5d:fb:41:cc:74:26:8b:69:99:cc:2d:
ef:1f:96:b0:0c:2b:5b:8f:ae:95:7d:ed:bf:a9:2e:
01:a2:21:87:f6:53:56:1d:a9:3b:49:27:e0:ce:60:
81:2a:09:05:a9:ed:40:36:1e:a2:64:b8:d7:49:bd:
48:e1:aa:6a:cc:e4:e2:f1:12:ee:59:ec:7a:86:fa:
a2:e9:b7:86:58:b3:80:c9:cf:89:fd:8f:06:c3:05:
3e:eb:78:81:ce:1c:3f:6d:b4:27:ff:17:6c:04:91:
2c:52:b9:9f:5b:e4:d3:0a:84:5a:7a:f9:b8:45:3b:
73:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A4:E6:72:88:AF:2E:67:3C:92:78:22:34:0D:D5:A8:14:8D:3B:08
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/mqTmcoivLmc8kngiNA3VqBSNOwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.102.140.0/22
Signature Algorithm: sha256WithRSAEncryption
39:da:99:ff:b4:cf:88:21:d5:bb:27:dc:1b:78:1c:16:bf:94:
95:15:bf:49:f9:bd:b0:1d:1f:ef:a7:aa:a0:b1:98:66:a5:e6:
50:00:6f:3b:62:23:cb:74:91:9f:72:6c:7c:60:6b:83:fd:45:
3a:72:a0:17:5e:1f:da:10:1d:45:5b:8d:76:fc:92:13:2b:89:
d7:d6:83:83:6f:85:92:ae:3c:99:71:ac:09:b3:a3:c0:08:31:
71:d7:8a:cf:db:a9:2a:5c:c2:f5:b0:ef:3f:0c:12:29:7a:6e:
41:38:59:b2:f4:39:bd:3e:e7:fd:af:96:db:51:93:36:6e:b2:
dc:79:43:0a:6d:d8:26:93:25:51:4b:0e:05:74:7a:54:85:20:
eb:f1:48:5a:a6:f1:8b:51:39:92:a8:1b:c0:fa:93:6d:72:d3:
c6:e4:2d:27:5d:b3:33:b2:aa:1a:17:3d:68:20:e6:53:d3:12:
4c:5c:85:7c:3f:95:c7:bd:fb:7b:a0:80:d4:f7:80:2b:1e:2b:
04:59:38:f5:db:82:a3:27:35:fd:b9:ce:05:9c:64:55:1d:f1:
3e:a2:1e:b2:04:31:eb:d4:56:ad:5d:35:c9:0b:4a:04:ff:ff:
16:de:ce:ce:1d:b7:af:3f:5b:62:81:64:6c:21:3a:be:a6:96:
dd:98:46:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLNeRKGiOL2hRmFzKJXUpxOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NDdhYTkxYjA2ZDhjNmI4NzI4NGYzZjQ1YTIxZGMyODFm
N2JhNTUwHhcNMjQxMDI3MTAxNTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWE0ZTY3Mjg4YWYyZTY3M2M5Mjc4MjIzNDBkZDVhODE0OGQzYjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmdNhzN/NzgrKca+Gn9IXdeMQ42S
0aWUTmikfq0JI6QRikqDgYFIo2oINFxdYCoI5F4bvOHU8rlgoSWHlGryvNz2QL2P
99PNE9uFrWLXkgU+eisjT9Ae6NAK3OPUQpokfu23jg/pPO/q32ZC5GAnIOfnDYE+
LHA766WJ9YetRs9dJ4paSDOuVJGUXftBzHQmi2mZzC3vH5awDCtbj66Vfe2/qS4B
oiGH9lNWHak7SSfgzmCBKgkFqe1ANh6iZLjXSb1I4apqzOTi8RLuWex6hvqi6beG
WLOAyc+J/Y8GwwU+63iBzhw/bbQn/xdsBJEsUrmfW+TTCoRaevm4RTtz2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJqk5nKIry5nPJJ4IjQN1agUjTsIMB8GA1UdIwQY
MBaAFIhHqpGwbYxrhyhPP0WiHcKB97pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYt
Y2VhNzVkMGNkNjcxLzEvbXFUbWNvaXZMbWM4a25naU5BM1ZxQlNOT3dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYtY2VhNzVkMGNkNjcx
LzEvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPmaMMA0G
CSqGSIb3DQEBCwUAA4IBAQA52pn/tM+IIdW7J9wbeBwWv5SVFb9J+b2wHR/vp6qg
sZhmpeZQAG87YiPLdJGfcmx8YGuD/UU6cqAXXh/aEB1FW412/JITK4nX1oODb4WS
rjyZcawJs6PACDFx14rP26kqXML1sO8/DBIpem5BOFmy9Dm9Puf9r5bbUZM2brLc
eUMKbdgmkyVRSw4FdHpUhSDr8UhapvGLUTmSqBvA+pNtctPG5C0nXbMzsqoaFz1o
IOZT0xJMXIV8P5XHvft7oIDU94ArHisEWTj124KjJzX9uc4FnGRVHfE+oh6yBDHr
1FatXTXJC0oE//8W3s7OHbevP1tigWRsITq+ppbdmEZp
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:56 2025 by rpki-client