Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/9EPz_S4oeyS2Cr8JyL745ZEBIos.roa
File: 9EPz_S4oeyS2Cr8JyL745ZEBIos.roa (raw, json)
Hash identifier: 35OLXd7GEppP22/mbwMr1odsv7W0WMwRdrg1lQjuKvk=
Subject key identifier: F4:43:F3:FD:2E:28:7B:24:B6:0A:BF:09:C8:BE:F8:E5:91:01:22:8B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186186065EC9207A573804AD226782D9800
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/9EPz_S4oeyS2Cr8JyL745ZEBIos.roa
Signing time: Fri 03 Feb 2023 17:43:36 +0000
ROA not before: Fri 03 Feb 2023 17:43:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 62.197.128.0/24 maxlen: 24
223.27.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:18:60:65:ec:92:07:a5:73:80:4a:d2:26:78:2d:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 3 17:43:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f443f3fd2e287b24b60abf09c8bef8e59101228b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:66:4a:91:e6:64:dd:26:f5:ae:cb:d8:5d:62:
01:02:fd:15:ba:bb:7f:18:7c:cf:2b:c7:4d:39:2a:
b9:b2:9d:c9:39:cc:d9:49:a5:da:2a:16:b3:b5:f8:
aa:0e:85:c6:a0:1b:ac:06:74:1f:bf:09:9b:cd:76:
cf:33:9a:a4:21:84:fd:ab:e9:d2:1c:a7:20:1c:82:
d7:54:5f:ab:d6:6d:59:03:6e:a4:f2:e4:5e:5d:62:
ae:2b:70:97:50:03:4f:e2:15:8f:92:e9:ae:e7:52:
66:4a:5a:56:ee:d3:d5:70:80:65:24:7a:c0:c6:ec:
5c:4a:af:be:84:ec:92:a7:f0:2b:29:55:b4:df:df:
1e:16:3a:c9:8d:cd:8e:3a:76:4c:25:dd:94:54:bc:
3a:9d:44:a1:b9:92:91:5c:9d:d8:fc:93:77:b1:13:
68:cb:70:7e:33:05:e1:36:27:ae:e7:ae:bb:32:07:
cd:f2:cc:cf:0a:f8:18:64:ab:2f:5c:0a:a8:c6:8b:
cb:6f:9f:43:cd:83:54:79:ee:1b:89:ac:09:28:f0:
c2:ed:41:b9:91:9c:2f:e2:56:96:63:9b:19:b0:e3:
37:24:3e:ad:bd:ba:9d:87:71:6a:63:a8:24:4d:ee:
8f:91:bf:2e:88:7a:b9:1d:0e:29:7f:7a:6f:3b:71:
58:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:43:F3:FD:2E:28:7B:24:B6:0A:BF:09:C8:BE:F8:E5:91:01:22:8B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/9EPz_S4oeyS2Cr8JyL745ZEBIos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.128.0/24
223.27.114.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b7:7f:80:83:79:a0:e6:8c:e9:40:42:c3:86:d2:3a:06:4c:
ac:f2:74:c1:78:91:b1:d3:24:29:2c:3b:88:3b:86:80:38:b0:
87:8f:18:be:7c:4b:0f:00:c9:88:e9:fb:f1:26:c0:9f:44:d1:
d2:89:68:ac:6c:93:ab:2f:14:0f:9a:d1:c7:d1:8d:98:59:3a:
47:72:88:3a:66:ff:a4:96:e4:73:44:c1:5c:41:34:31:1a:63:
6e:b1:b8:87:23:85:93:16:5b:fd:63:62:0e:bf:62:d9:b8:6c:
9f:16:f7:50:51:c9:38:dc:51:c3:bc:cc:81:48:98:aa:a9:6d:
aa:22:24:32:27:ba:5b:25:48:85:7b:b6:eb:25:20:60:38:0d:
30:55:4e:ff:bb:38:38:bd:38:aa:06:f4:f0:18:4b:cb:2d:d7:
16:b6:cc:80:ef:df:ac:28:15:e1:6c:94:44:c7:0d:18:16:f2:
d9:36:bb:63:8e:ec:e7:a8:44:42:cc:cd:d0:19:1f:a0:0d:dc:
ae:e1:d2:55:d2:c4:5f:43:eb:05:ce:e5:86:28:d6:56:91:4b:
48:e7:23:24:0c:6b:88:fc:79:03:4b:1f:e1:2c:5f:61:4c:9f:
68:78:e2:d0:4f:7b:68:d8:f1:84:3e:17:da:d9:71:fd:89:05:
14:0e:87:7c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYYYYGXskgelc4BK0iZ4LZgAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMjAzMTc0MzM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDQzZjNmZDJlMjg3YjI0YjYwYWJmMDljOGJlZjhlNTkxMDEyMjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWZKkeZk3Sb1rsvYXWIBAv0Vurt/
GHzPK8dNOSq5sp3JOczZSaXaKhaztfiqDoXGoBusBnQfvwmbzXbPM5qkIYT9q+nS
HKcgHILXVF+r1m1ZA26k8uReXWKuK3CXUANP4hWPkumu51JmSlpW7tPVcIBlJHrA
xuxcSq++hOySp/ArKVW0398eFjrJjc2OOnZMJd2UVLw6nUShuZKRXJ3Y/JN3sRNo
y3B+MwXhNieu5667MgfN8szPCvgYZKsvXAqoxovLb59DzYNUee4biawJKPDC7UG5
kZwv4laWY5sZsOM3JD6tvbqdh3FqY6gkTe6Pkb8uiHq5HQ4pf3pvO3FYPwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPRD8/0uKHsktgq/Cci++OWRASKLMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvOUVQel9TNG9leVMyQ3I4SnlMNzQ1WkVCSW9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPsWAAwQA
3xtyMA0GCSqGSIb3DQEBCwUAA4IBAQCDt3+Ag3mg5ozpQELDhtI6Bkys8nTBeJGx
0yQpLDuIO4aAOLCHjxi+fEsPAMmI6fvxJsCfRNHSiWisbJOrLxQPmtHH0Y2YWTpH
cog6Zv+kluRzRMFcQTQxGmNusbiHI4WTFlv9Y2IOv2LZuGyfFvdQUck43FHDvMyB
SJiqqW2qIiQyJ7pbJUiFe7brJSBgOA0wVU7/uzg4vTiqBvTwGEvLLdcWtsyA79+s
KBXhbJRExw0YFvLZNrtjjuznqERCzM3QGR+gDdyu4dJV0sRfQ+sFzuWGKNZWkUtI
5yMkDGuI/HkDSx/hLF9hTJ9oeOLQT3to2PGEPhfa2XH9iQUUDod8
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:57 2023 by rpki-client on console-fra.rpki-client.org