Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cp8Z3hep-7KEBdwqzyfB7b40Vbc.roa
File: cp8Z3hep-7KEBdwqzyfB7b40Vbc.roa (raw, json)
Hash identifier: Oq+yOSrsaoDKgire/FturSMKYg8/0x2oioHDAGrZ6PI=
Subject key identifier: 72:9F:19:DE:17:A9:FB:B2:84:05:DC:2A:CF:27:C1:ED:BE:34:55:B7
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018707FE6DBADDD3AB0D712AC14FEAA64100
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cp8Z3hep-7KEBdwqzyfB7b40Vbc.roa
Signing time: Wed 22 Mar 2023 06:25:27 +0000
ROA not before: Wed 22 Mar 2023 06:25:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62390
IP address blocks: 62.197.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:07:fe:6d:ba:dd:d3:ab:0d:71:2a:c1:4f:ea:a6:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 22 06:25:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=729f19de17a9fbb28405dc2acf27c1edbe3455b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fc:74:f5:af:76:f0:7a:b4:1a:4b:58:eb:1f:
4d:b8:0c:4b:f3:86:da:7b:65:d5:4a:30:d5:69:6d:
f1:a1:9f:71:16:c4:6a:35:96:32:94:ed:2b:e7:c2:
7d:ef:a5:27:14:8e:d4:3e:2c:c9:df:e5:39:fc:62:
8f:b5:99:2c:5a:f7:64:da:9e:3b:73:8b:b8:7f:e7:
23:2d:e3:59:2b:fb:bc:90:e6:70:36:d5:0f:3c:e4:
73:b9:20:67:52:63:a0:83:8c:81:63:17:9c:eb:ac:
99:59:ea:38:a1:b2:b1:da:d7:f8:34:02:0f:c9:ec:
40:95:e4:e2:2d:00:95:b4:37:ee:cd:ab:82:d2:8e:
7b:c4:0c:fc:9c:fb:99:17:f0:0d:f8:70:7d:ae:d4:
e0:bc:eb:72:e2:3f:a0:49:26:d8:1a:bd:79:7a:78:
0b:34:e8:f6:cd:2b:6a:65:ac:3c:22:85:7e:89:0a:
b5:3d:12:6e:ac:5c:9b:61:64:cc:21:dc:4e:b7:dc:
31:b0:e3:46:00:76:07:1e:51:76:58:a5:c1:b5:f4:
34:0d:54:3d:cd:4c:da:ef:d1:b2:45:da:12:3d:bf:
86:4e:37:da:8c:cd:85:1f:17:54:ea:f1:28:d7:57:
43:87:7f:6c:c3:ca:13:9b:77:db:87:4a:98:3d:54:
27:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9F:19:DE:17:A9:FB:B2:84:05:DC:2A:CF:27:C1:ED:BE:34:55:B7
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cp8Z3hep-7KEBdwqzyfB7b40Vbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.133.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c8:10:8f:7d:2a:d4:4a:17:bf:cf:9a:88:1e:4b:d7:cb:9b:
3d:84:ae:48:d1:21:e9:b0:6d:0a:8e:72:e1:93:59:26:ef:2e:
97:c7:53:1b:b0:07:3a:52:ff:32:01:fe:eb:cf:53:80:78:58:
07:f5:a4:7f:e1:ea:6f:09:c0:8a:30:58:66:c1:54:23:7e:09:
46:e8:0e:c1:99:67:ee:7b:b2:9f:8f:79:55:93:d0:87:92:c4:
39:97:a4:e7:b8:69:99:4c:0f:20:2e:fb:81:79:56:74:3e:77:
7d:52:9a:07:7b:c9:b4:9f:f1:ac:e8:64:0b:83:2f:2a:03:56:
aa:73:42:df:c1:7c:87:ea:c4:c8:9b:76:23:c1:65:4b:c3:4f:
ea:07:ed:2e:5a:38:9b:71:95:aa:10:bb:c1:8b:aa:44:7c:18:
80:07:ef:12:97:0a:9c:b5:0f:26:b1:a0:89:4b:18:8d:49:f2:
62:af:b5:3e:aa:4d:83:56:0a:be:a7:5e:e6:ec:c9:8f:fd:a4:
49:8c:40:db:c0:4b:ab:20:b4:fe:2c:09:9d:9e:2e:9b:1b:c0:
ce:c3:47:b0:02:fe:3a:61:8a:8f:13:e6:ef:df:b4:cc:05:ef:
c6:d6:e0:90:c4:e0:ff:fd:30:a0:3d:f0:85:7d:b5:78:7b:8e:
a9:5b:20:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 23 12:33:59 2023 by rpki-client on console-ams.rpki-client.org