Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9842db-e432-481f-961f-96824cbb6756/1/UFtXBv1E6-PAGdmihPur43QZ2DQ.roa
File: UFtXBv1E6-PAGdmihPur43QZ2DQ.roa (raw, json)
Hash identifier: 02tJ5UXa517+zqia2I7Wu00Y1F0MPVBrQfGqoXVLwS4=
Subject key identifier: 50:5B:57:06:FD:44:EB:E3:C0:19:D9:A2:84:FB:AB:E3:74:19:D8:34
Certificate issuer: /CN=c1cf5c1ef95344a7852f3e737bfff3da69b54269
Certificate serial: 01856D53EFA18396D6802A0CF1C3997D1E13
Authority key identifier: C1:CF:5C:1E:F9:53:44:A7:85:2F:3E:73:7B:FF:F3:DA:69:B5:42:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc9cHvlTRKeFLz5ze__z2mm1Qmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9842db-e432-481f-961f-96824cbb6756/1/UFtXBv1E6-PAGdmihPur43QZ2DQ.roa
Signing time: Sun 01 Jan 2023 12:34:55 +0000
ROA not before: Sun 01 Jan 2023 12:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 62.106.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:ef:a1:83:96:d6:80:2a:0c:f1:c3:99:7d:1e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1cf5c1ef95344a7852f3e737bfff3da69b54269
Validity
Not Before: Jan 1 12:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=505b5706fd44ebe3c019d9a284fbabe37419d834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:94:0a:b8:3a:e6:80:98:29:d3:2b:fd:bd:
21:1b:ac:eb:f1:c8:31:cd:8d:64:b8:0e:55:a3:24:
4d:28:3d:5d:1a:6e:79:b6:6d:e1:52:14:4e:f9:39:
a5:5b:09:f8:a5:da:0b:70:ac:bf:15:83:1b:ba:7d:
5f:d6:d0:be:a3:cb:af:fe:4e:e8:58:87:92:ac:c0:
79:14:d9:3d:a8:c6:7a:5e:44:ac:30:b4:fb:37:6b:
00:ed:33:46:7d:3f:b1:4d:54:ea:65:8b:aa:16:e3:
83:04:d9:ac:ce:cf:f6:75:90:32:37:79:4c:d3:2b:
36:fa:be:bb:d4:d1:87:11:5b:e2:34:93:79:b2:ac:
bc:3b:3f:ac:4c:76:4a:ed:42:91:21:3c:6e:07:03:
51:92:f1:c5:b3:a5:e5:50:41:a9:33:42:6f:ee:d6:
0b:6f:31:f7:21:65:0b:ed:1c:af:fc:25:80:88:7a:
0a:79:54:9c:f0:d7:2f:38:a9:4e:55:32:c6:2f:76:
92:25:4c:e6:71:63:40:dd:42:46:fa:d7:68:8c:02:
bd:ae:a4:77:6c:77:81:ea:7b:50:23:7c:ad:8a:2d:
26:60:40:e7:18:68:7a:66:4a:79:53:49:9b:43:29:
24:a3:f5:10:dc:b3:24:d8:21:ad:70:03:5a:6b:1d:
4f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5B:57:06:FD:44:EB:E3:C0:19:D9:A2:84:FB:AB:E3:74:19:D8:34
X509v3 Authority Key Identifier:
keyid:C1:CF:5C:1E:F9:53:44:A7:85:2F:3E:73:7B:FF:F3:DA:69:B5:42:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc9cHvlTRKeFLz5ze__z2mm1Qmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9842db-e432-481f-961f-96824cbb6756/1/UFtXBv1E6-PAGdmihPur43QZ2DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9842db-e432-481f-961f-96824cbb6756/1/wc9cHvlTRKeFLz5ze__z2mm1Qmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.91.0/24
Signature Algorithm: sha256WithRSAEncryption
13:7c:4c:1d:d2:92:31:0e:e5:97:27:fa:25:19:df:b3:81:aa:
e4:38:3b:ce:b7:30:6d:41:38:2d:75:45:2b:3e:d0:15:cf:5a:
bb:b0:f5:8e:18:ee:84:d1:0e:0c:37:3b:b6:83:ac:0e:91:98:
6e:27:22:35:e7:b6:a7:ef:e1:0d:1a:e2:6b:d2:52:39:33:f2:
83:7e:58:cf:c4:40:ee:25:c0:d8:ef:d2:2f:6e:f6:14:c6:6b:
fd:99:28:04:6a:49:06:d6:1d:75:d8:36:ad:fb:1e:80:44:4c:
00:d2:fa:ac:14:b6:cf:94:41:20:67:1a:04:80:b6:6d:25:c1:
d3:a3:aa:79:1f:d6:10:f6:68:d8:be:87:a2:c9:35:79:aa:e5:
9a:9f:e7:6a:c5:78:94:96:51:c0:ea:cd:cd:73:97:0f:03:24:
a2:f4:42:7b:b9:c4:4b:f0:90:34:dc:da:22:eb:a8:f6:7a:80:
6d:d6:64:a6:80:f3:90:44:c2:cc:f6:0a:e4:0b:9b:bc:0b:00:
a0:ae:0c:10:05:15:15:b8:98:6e:62:9e:99:3c:32:d2:11:49:
92:89:f6:be:5f:33:d3:3a:26:a3:b0:47:e1:35:8a:1a:2b:54:
91:cc:1e:49:57:36:03:80:8d:94:54:94:3e:e3:fc:22:5d:81:
e7:77:65:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:11 2023 by rpki-client on console-fra.rpki-client.org