Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Q6ehQd-N371GBietdeE7VOCjbe0.roa
File: Q6ehQd-N371GBietdeE7VOCjbe0.roa (raw, json)
Hash identifier: HtBn0ioAbvJ8oV4BdqB08c8EfaRFnx3qKhooGB81SwM=
Subject key identifier: 43:A7:A1:41:DF:8D:DF:BD:46:06:27:AD:75:E1:3B:54:E0:A3:6D:ED
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4FDBB74AD661CB3F0202090F34442
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Q6ehQd-N371GBietdeE7VOCjbe0.roa
Signing time: Sun 01 Jan 2023 19:35:30 +0000
ROA not before: Sun 01 Jan 2023 19:35:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207438
IP address blocks: 62.89.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:fd:bb:74:ad:66:1c:b3:f0:20:20:90:f3:44:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43a7a141df8ddfbd460627ad75e13b54e0a36ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:48:97:84:89:e0:d4:0e:c0:22:da:86:af:
3c:f7:fe:38:c2:ca:34:af:f4:55:35:c1:b5:f1:2f:
88:69:0e:94:76:65:0b:fe:88:bd:a9:1e:98:32:c9:
79:ae:6a:a0:6f:5a:87:fc:0c:10:85:e4:8d:ac:71:
46:11:c0:5b:31:a9:1d:9e:3e:ca:05:56:89:8c:40:
18:c9:02:07:ef:60:62:4a:94:44:91:c9:72:21:1a:
7f:1c:12:e5:12:f6:c5:7a:bb:b9:06:01:0e:66:e8:
2d:e2:7f:18:98:12:e8:89:5d:0b:7b:5e:67:a9:99:
77:d1:ba:90:e4:5f:03:ce:2c:4a:9e:93:9c:70:36:
11:10:39:2b:14:18:06:be:fd:58:8b:52:a4:c1:ed:
40:d4:47:5b:26:6d:f7:38:7b:d6:9a:2c:5f:75:35:
7c:4a:4b:63:cf:6b:d6:43:73:48:78:7e:a1:a9:be:
11:aa:f1:28:da:3a:3b:35:02:9a:ef:4d:33:67:00:
4c:e5:1d:11:ba:4f:b7:4b:16:5d:e5:c0:6d:7c:6e:
83:81:5b:5e:18:37:79:e6:f8:37:d4:89:92:db:6c:
e7:cd:42:1b:c4:d3:a0:63:3a:1f:fb:37:f0:e0:34:
4f:a9:96:f5:a1:88:61:6c:6d:06:10:fd:39:aa:6a:
3d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A7:A1:41:DF:8D:DF:BD:46:06:27:AD:75:E1:3B:54:E0:A3:6D:ED
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Q6ehQd-N371GBietdeE7VOCjbe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.202.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e1:0b:fe:44:8a:3f:d8:26:7c:84:75:af:25:bf:54:b1:ae:
03:58:e5:2c:1d:2b:66:5a:ae:08:ac:7f:80:5b:e9:54:35:13:
c1:c6:90:f1:89:0d:52:f2:f1:7f:60:28:18:c9:d1:f6:c0:03:
b0:f1:1d:3f:51:63:25:1c:91:ea:ba:ab:d7:2b:e9:0b:00:02:
94:49:d2:30:1d:ee:13:b9:20:5a:b7:9b:fe:53:a3:b9:09:6e:
f3:87:7e:64:30:0d:46:97:a6:f8:c9:ba:6d:5c:51:12:30:ea:
43:0a:c4:0a:b5:5b:b6:c0:ae:69:5c:45:78:a3:c0:f0:21:36:
37:1a:67:b2:3c:65:da:85:b1:4a:4a:8e:26:1f:ca:dd:87:75:
80:6c:f3:be:3e:4a:40:5c:a8:2c:bf:58:59:3a:bb:7c:90:80:
53:fa:23:42:6a:ec:9d:b2:45:51:c7:db:da:99:a6:0d:c3:29:
4b:be:00:63:41:04:22:9e:b6:60:8e:45:05:5c:9e:84:16:aa:
3b:fe:cb:2e:8a:7c:d8:4e:f2:07:8c:98:af:8c:e8:4c:54:2e:
30:d2:c3:0a:e5:bc:ed:86:a3:f5:08:96:0c:4d:d2:f7:41:ac:
41:35:e3:1a:b8:14:64:88:97:23:8f:b0:aa:d6:90:ba:1e:cf:
4f:05:8f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org