Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/xEujcWABlPwoKeSyAZiB8DAkpLI.roa
File: xEujcWABlPwoKeSyAZiB8DAkpLI.roa (raw, json)
Hash identifier: n4g/V5e5wWCRSCimtswpEpzR5gyTYmv3FhWahMcgUrE=
Subject key identifier: C4:4B:A3:71:60:01:94:FC:28:29:E4:B2:01:98:81:F0:30:24:A4:B2
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018BBA26FE5DC43FE9119510531CA3D4B75A
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/xEujcWABlPwoKeSyAZiB8DAkpLI.roa
Signing time: Fri 10 Nov 2023 16:53:19 +0000
ROA not before: Fri 10 Nov 2023 16:53:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44620
IP address blocks: 62.3.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Nov 2023 16:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:26:fe:5d:c4:3f:e9:11:95:10:53:1c:a3:d4:b7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Nov 10 16:53:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c44ba371600194fc2829e4b2019881f03024a4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a9:49:7b:e8:7f:e4:bb:16:a9:2b:2c:c8:8c:
b0:74:c3:24:4e:12:23:ac:2f:7a:0c:37:34:07:91:
22:d0:64:02:f5:54:0d:9c:2c:c0:c2:47:53:07:cd:
19:0f:02:cd:e3:84:fd:07:64:a8:25:c5:49:73:d6:
e8:fe:84:92:37:5e:07:e8:b9:fd:e5:7e:0f:1d:2a:
4d:96:1e:b5:23:b2:7f:3d:2c:41:63:ad:8d:0a:5b:
5e:dd:f6:3c:5e:82:02:65:bf:f6:20:e7:67:64:9c:
e8:85:2c:94:3b:46:13:cd:62:26:d1:89:0c:0c:1d:
61:92:4e:e6:ab:60:b3:a4:c8:d4:58:56:dd:d2:4d:
a6:e8:a3:11:1b:2a:c5:25:cd:eb:22:4f:f7:63:e5:
fa:72:54:ce:a1:aa:f7:ec:8c:9d:59:8c:ea:28:9a:
74:33:29:83:e0:a3:06:4a:42:f6:c1:c8:2a:d9:61:
e2:90:42:79:1d:6d:95:87:4a:4a:fc:0c:81:29:57:
91:80:a6:30:5b:68:8e:01:28:24:f2:a4:52:26:d2:
ab:97:4d:b1:49:5a:99:c8:a0:ac:59:45:d6:f1:13:
8a:df:32:9b:44:5a:80:ae:d8:b7:f1:10:91:bc:97:
1e:47:6a:46:a0:d8:4e:1f:13:4d:6d:2d:32:17:67:
ab:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4B:A3:71:60:01:94:FC:28:29:E4:B2:01:98:81:F0:30:24:A4:B2
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/xEujcWABlPwoKeSyAZiB8DAkpLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.0.0/24
Signature Algorithm: sha256WithRSAEncryption
50:8c:7e:2c:0d:d7:e3:ca:0e:d4:36:74:4c:67:2b:82:04:7e:
13:ca:ea:29:f0:39:98:b1:07:98:5f:31:4e:0a:5d:86:49:12:
36:64:4d:e1:c3:8d:bb:b1:d8:32:68:73:7e:f5:18:d4:ce:f6:
ea:19:68:f3:84:c6:13:ff:64:a0:95:dd:40:d1:e1:65:d1:34:
bf:04:e5:4a:4e:58:79:f7:f8:0c:4a:68:f8:99:4d:3a:2b:fd:
2f:38:b0:40:e0:4a:a2:87:d9:00:ce:c4:98:6c:c7:b8:c3:c9:
75:65:f7:4c:06:3a:34:75:1a:c1:42:f8:e7:67:8d:49:03:d1:
f3:3b:3a:32:d6:5b:96:9e:d4:1b:25:81:1a:f4:c5:2a:ea:6f:
14:83:89:a1:1a:db:b9:51:c3:c7:3a:58:c6:e7:26:64:b7:93:
d3:fd:38:68:53:62:9c:c6:8e:27:bf:25:eb:aa:1f:3b:15:26:
f7:14:5b:76:78:26:36:0f:2b:5a:a4:0e:cd:c2:45:bc:9d:45:
ab:ca:de:6b:9f:3c:72:58:08:e4:32:b5:48:a9:32:d0:4b:b8:
07:e6:88:d5:e9:97:0d:c7:c2:30:8e:39:f1:38:c6:b0:d3:a2:
79:63:1c:8a:81:ed:bd:84:cc:0f:23:d8:11:9f:10:c4:a5:c4:
eb:15:15:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:49 2024 by rpki-client on console-ams.rpki-client.org