Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/dSMYC5H2tsZxdRN0fp8W7vnJfCQ.roa
File: dSMYC5H2tsZxdRN0fp8W7vnJfCQ.roa (raw, json)
Hash identifier: uS3+I87/fZeTyHXrN7QrMZHnT4JwmqBlvGLM3gjKJ2M=
Subject key identifier: 75:23:18:0B:91:F6:B6:C6:71:75:13:74:7E:9F:16:EE:F9:C9:7C:24
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 0185724C6752368A774C5BF929FC75DDFB66
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/dSMYC5H2tsZxdRN0fp8W7vnJfCQ.roa
Signing time: Mon 02 Jan 2023 11:44:47 +0000
ROA not before: Mon 02 Jan 2023 11:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50299
IP address blocks: 62.140.231.0/24 maxlen: 24
62.140.251.0/24 maxlen: 24
80.77.170.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:67:52:36:8a:77:4c:5b:f9:29:fc:75:dd:fb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jan 2 11:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7523180b91f6b6c6717513747e9f16eef9c97c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:3a:ea:3d:a0:50:79:de:27:97:41:37:6c:
98:11:b1:d0:7e:c9:18:7b:26:dc:03:2a:48:20:ea:
77:7b:ee:da:a0:ce:22:b8:ae:92:e6:83:94:19:45:
c3:1d:7c:7a:ec:6a:df:96:16:aa:56:18:8c:60:b6:
85:a6:08:d4:ac:a6:dd:cf:bf:5f:4f:a9:57:7e:6f:
6e:2d:94:51:b0:9d:bc:58:bc:4b:c9:96:e9:05:d5:
82:9b:52:83:7a:ba:53:cb:44:ff:87:49:de:c4:22:
9b:67:2c:0c:b7:27:ec:d2:a9:23:67:ff:0b:01:a6:
ef:9b:94:a9:bb:8f:f2:d7:81:8b:72:cd:ba:7a:75:
68:2f:46:88:4a:cb:cb:45:08:96:e0:fb:36:f9:13:
23:49:df:db:e0:ef:96:37:ef:67:50:c4:fa:b5:1c:
29:d0:84:41:4e:a8:b4:52:cd:6b:e4:a2:44:6b:0b:
98:92:cc:9d:0b:73:bd:7e:d3:31:73:68:c6:30:79:
f1:23:be:b3:d2:b1:f5:a1:c5:6b:ba:7c:dd:eb:e0:
8c:b8:b8:8c:4b:bc:4e:e5:fd:01:8b:48:ad:8f:57:
5d:68:b9:8f:6b:70:e3:e2:aa:c4:ef:9d:2b:bc:b3:
d0:60:d7:c3:f9:a8:64:7d:52:e0:07:5d:ea:5b:72:
33:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:23:18:0B:91:F6:B6:C6:71:75:13:74:7E:9F:16:EE:F9:C9:7C:24
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/dSMYC5H2tsZxdRN0fp8W7vnJfCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.140.231.0/24
62.140.251.0/24
80.77.170.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:b0:6b:ef:f5:74:74:d4:ac:15:31:28:5f:c6:af:5e:44:a8:
be:ce:2c:4d:8d:36:f6:f8:ad:76:d3:d2:9a:d8:b7:2e:1e:03:
01:7f:28:03:58:f4:c4:ba:95:27:b0:22:b8:5d:07:4f:b0:2e:
5c:2a:f9:78:d9:f7:c4:63:70:7e:1f:a4:3a:1d:19:52:d6:65:
0f:82:dc:ab:d3:69:37:fa:44:3e:cd:a7:61:11:3b:1b:bf:35:
8f:6f:69:f1:f8:e1:d4:57:cf:aa:f2:bc:b6:d1:8d:8a:b3:08:
2c:a8:66:54:f5:93:22:55:f4:8e:29:b5:34:33:be:d1:d9:10:
6d:1e:2e:12:f9:dd:41:e8:ed:87:57:0d:fb:1f:bc:f5:e0:84:
ab:bd:3c:c3:13:62:5d:37:76:0f:ad:d1:0a:e7:d0:4c:4e:59:
50:62:af:88:f1:2f:90:66:60:ee:9a:f0:18:d4:e2:9f:70:44:
04:d8:4e:0e:74:7b:94:fa:6f:cd:5e:bc:5d:52:80:bd:7d:5b:
06:65:53:d1:f9:96:09:31:7e:d7:10:02:a1:07:e4:2e:a1:9d:
a1:e1:6b:e4:23:82:26:a4:b7:0e:ac:5b:49:dc:66:46:6b:40:
4e:2a:c0:38:93:c2:ad:64:bd:69:49:df:71:42:6b:74:7a:38:
e1:1d:52:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:31 2024 by rpki-client on console-ams.rpki-client.org