Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/j0J4jWfgIq9Bug5W9Ct0G3esYtM.roa
File: j0J4jWfgIq9Bug5W9Ct0G3esYtM.roa (raw, json)
Hash identifier: qNHA5KMf5LKrvNGU+lKD7pZO1Yx3pm0XasyxWoOm48Q=
Subject key identifier: 8F:42:78:8D:67:E0:22:AF:41:BA:0E:56:F4:2B:74:1B:77:AC:62:D3
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 0185724C6635BA967CE344508422DE6EA943
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/j0J4jWfgIq9Bug5W9Ct0G3esYtM.roa
Signing time: Mon 02 Jan 2023 11:44:47 +0000
ROA not before: Mon 02 Jan 2023 11:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47282
IP address blocks: 62.140.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:66:35:ba:96:7c:e3:44:50:84:22:de:6e:a9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jan 2 11:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f42788d67e022af41ba0e56f42b741b77ac62d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:53:97:82:04:de:9a:1c:a8:03:50:d9:b9:
04:2b:fd:67:f6:58:c0:6f:81:7e:b8:63:15:d2:4e:
c3:95:c9:60:34:d5:85:6b:21:51:15:d1:33:8a:91:
e0:44:ac:31:db:90:61:a0:91:5f:6e:d6:23:19:50:
2a:a4:ac:aa:5a:9c:c6:65:c5:e0:f2:2c:6f:be:f3:
ee:82:94:a1:86:62:47:f7:bf:dd:8f:06:a5:75:5b:
d4:cb:a1:a4:8f:69:6e:cf:48:f6:4f:90:88:16:5d:
82:6c:77:d9:2f:3c:73:cc:dd:b8:d1:0c:85:4a:2f:
36:fe:a5:90:17:93:5a:ad:87:fa:b2:07:6e:7d:aa:
8a:e0:25:d9:fd:b6:ff:1c:34:0d:ef:51:5b:bc:b8:
1e:a2:d1:51:04:4e:40:ec:58:b4:bf:d8:1e:14:02:
b9:29:4e:2b:cb:11:84:a4:15:1c:9e:19:6b:75:33:
dd:ad:50:7f:77:28:3e:3d:c2:6f:7c:f6:23:a0:96:
07:8d:58:1b:90:2f:67:49:2f:18:e9:b6:c7:2a:60:
b0:2b:9c:d1:93:2d:e0:d4:4c:7b:c3:6a:d8:3d:d7:
09:59:c2:59:5b:71:39:d6:af:db:f1:b9:25:1d:cc:
54:bc:68:c0:da:dd:da:86:f0:07:13:30:63:2c:c2:
6d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:42:78:8D:67:E0:22:AF:41:BA:0E:56:F4:2B:74:1B:77:AC:62:D3
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/j0J4jWfgIq9Bug5W9Ct0G3esYtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.140.242.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6b:99:91:47:38:48:3d:07:d0:7b:aa:8a:c8:00:b1:17:13:
b1:5f:8c:5b:ff:f5:e6:6a:7a:73:59:a3:c7:b8:99:3f:fa:8c:
36:7c:7e:36:80:f1:aa:35:79:5e:46:f7:a5:45:64:18:65:ea:
86:25:a9:5d:7a:55:45:70:65:6d:e6:b1:5d:5a:8f:11:68:8b:
ea:06:5e:ff:f2:74:57:ba:ef:8a:2e:aa:d9:cc:0a:69:62:8f:
97:65:32:ba:80:00:d1:97:10:36:99:78:b6:9b:cc:4e:3c:20:
e9:2b:86:cc:97:f1:f5:1f:ff:a2:54:61:6a:22:15:23:be:02:
5c:85:d7:d1:eb:1c:2f:80:c0:77:25:94:ff:c9:bd:03:bc:fc:
62:f6:f5:f8:c8:2a:39:3c:31:d3:07:72:c6:ea:af:c4:69:bd:
26:b8:a7:2a:61:16:92:68:90:c8:ab:d0:4c:0c:07:95:33:3d:
ec:e5:0d:e2:a0:c7:0a:f3:41:d8:17:d1:3b:4d:93:58:a0:e3:
2d:7b:08:97:3c:8f:80:f0:c9:3a:bb:fc:98:25:cf:1b:37:54:
d8:cd:f1:f9:24:35:6d:5d:31:52:87:c0:be:9d:0e:0e:93:48:
d5:21:d7:eb:d9:4d:fa:70:ac:56:06:a2:9c:3b:42:b4:0e:c0:
f9:5b:4d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:17 2024 by rpki-client on console-fra.rpki-client.org