Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/A_z_t3f_Gyg23fN_vBNSQp3liNo.roa
File: A_z_t3f_Gyg23fN_vBNSQp3liNo.roa (raw, json)
Hash identifier: p2zyDKjrNdnHS+w8NdGrh+breJFtyvXyA/vS04elSt0=
Subject key identifier: 03:FC:FF:B7:77:FF:1B:28:36:DD:F3:7F:BC:13:52:42:9D:E5:88:DA
Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial: 018664B176A0675C572CEF02870D0D3F4398
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/A_z_t3f_Gyg23fN_vBNSQp3liNo.roa
Signing time: Sat 18 Feb 2023 13:23:17 +0000
ROA not before: Sat 18 Feb 2023 13:23:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42910
IP address blocks: 62.106.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Aug 2023 10:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:64:b1:76:a0:67:5c:57:2c:ef:02:87:0d:0d:3f:43:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Validity
Not Before: Feb 18 13:23:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03fcffb777ff1b2836ddf37fbc1352429de588da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:98:08:2c:4c:ce:1e:08:15:a5:4a:09:0e:14:
91:e2:c1:86:3c:5d:d4:8a:34:6b:10:e9:d2:30:a2:
d9:2c:84:f0:b0:b2:1e:14:b3:b3:48:21:b2:c6:03:
01:40:9a:0e:09:f7:93:38:36:89:fd:5a:f3:78:ce:
ee:a2:ef:e8:57:da:15:af:25:aa:8d:d0:b0:7f:75:
c8:e9:d0:4e:2a:aa:e3:b4:26:8d:75:05:fb:77:42:
46:fe:aa:0f:10:4d:df:1c:77:03:b9:90:ff:16:48:
92:fc:49:6b:36:0e:80:49:c7:0e:f2:14:e4:ee:fd:
02:29:44:47:34:eb:52:2f:7b:19:8d:0c:21:49:aa:
56:84:90:51:9c:96:47:84:b2:8b:49:0d:a5:b7:a1:
ee:62:8f:b1:30:5f:36:4e:c3:82:63:3f:22:cf:ac:
85:73:ab:f5:a0:8a:7e:83:cc:e8:c4:1d:69:96:d2:
c7:e1:42:9c:6f:84:a7:12:6e:41:f9:c8:60:af:80:
c0:ac:f8:fa:48:8a:91:43:d8:3e:f6:0b:18:5b:65:
fe:e7:f9:17:b2:41:ec:10:f7:de:53:b0:d1:18:c3:
6b:84:e3:8a:0a:1b:af:d6:e6:2a:7e:a3:b6:ed:f7:
b4:34:78:52:5a:c2:83:a3:e7:78:56:94:00:f7:32:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FC:FF:B7:77:FF:1B:28:36:DD:F3:7F:BC:13:52:42:9D:E5:88:DA
X509v3 Authority Key Identifier:
keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/A_z_t3f_Gyg23fN_vBNSQp3liNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.71.0/24
Signature Algorithm: sha256WithRSAEncryption
78:4b:52:f0:fc:ed:2f:d9:24:91:e8:a1:18:e2:1d:7e:b9:f9:
6a:ca:8f:91:5e:c4:dc:fc:c8:b1:b5:cf:ce:6b:86:b2:d1:e3:
34:2a:d0:67:b9:f4:3a:ae:ea:79:0c:fc:3e:59:48:86:14:c2:
84:f1:fd:de:16:d3:94:7e:ef:25:ea:a1:c0:31:50:00:99:ef:
a4:4f:14:6c:54:e2:3e:9d:ee:05:e5:97:5e:f4:7f:9c:2f:9a:
79:5d:cf:b8:0f:3c:a1:1e:95:82:f9:36:65:dc:70:bc:d9:39:
d5:fc:28:e7:c8:f0:4c:f3:36:50:ce:46:d3:d3:a7:fe:2d:75:
8c:67:e2:0f:4c:fa:c6:53:91:c8:e1:49:f2:2e:78:13:57:98:
1f:58:50:68:4b:01:e8:9e:14:a2:f3:7f:7a:d4:9c:cc:d3:ba:
df:df:8c:30:bf:65:f2:86:26:cc:78:a9:85:54:cc:4f:ad:df:
60:0b:ac:9b:0d:b2:b9:ca:ff:66:eb:e5:42:59:bc:8c:73:71:
2c:4d:84:c3:03:a2:7d:c8:d0:d2:69:3b:59:34:de:6c:fb:57:
be:d9:bb:e2:f3:a6:a5:c8:81:f5:14:9b:86:f2:07:73:ed:2b:
db:81:22:09:47:78:f5:e6:b8:40:17:c6:37:ef:f8:af:93:65:
44:a8:43:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:04 2024 by rpki-client on console-fra.rpki-client.org