Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/swwTcHLYghhT6aobkQJUT2LPVvU.roa
File: swwTcHLYghhT6aobkQJUT2LPVvU.roa (raw, json)
Hash identifier: STLkWvQfolqMsrkxul33j1Dc/yhpZIhx99bLfanUOVw=
Subject key identifier: B3:0C:13:70:72:D8:82:18:53:E9:AA:1B:91:02:54:4F:62:CF:56:F5
Certificate issuer: /CN=167ba56cdc8c97662c1b57d901a1f86588adf2ae
Certificate serial: 018A237F00739BB88C7B92AF0AD5E3D6C978
Authority key identifier: 16:7B:A5:6C:DC:8C:97:66:2C:1B:57:D9:01:A1:F8:65:88:AD:F2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnulbNyMl2YsG1fZAaH4ZYit8q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/swwTcHLYghhT6aobkQJUT2LPVvU.roa
Signing time: Wed 23 Aug 2023 17:44:00 +0000
ROA not before: Wed 23 Aug 2023 17:44:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 62.3.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:23:7f:00:73:9b:b8:8c:7b:92:af:0a:d5:e3:d6:c9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ba56cdc8c97662c1b57d901a1f86588adf2ae
Validity
Not Before: Aug 23 17:44:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b30c137072d8821853e9aa1b9102544f62cf56f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:06:1a:ee:61:7c:a0:2a:45:b1:e6:f5:0a:
25:69:2f:2f:b5:09:32:26:f2:32:d7:de:9f:0b:ea:
86:4c:07:b2:30:9e:e2:81:27:05:a3:bc:25:c2:d8:
45:f5:c3:4c:f7:22:9c:cd:29:4a:4c:02:bb:d3:48:
41:7d:00:ff:03:f4:8b:c4:f5:18:9e:72:c5:d6:2c:
b1:04:49:4f:f6:3b:65:a0:a8:82:d1:73:b0:4c:2c:
59:ff:e8:8a:34:3f:bb:6a:42:43:ad:77:fb:26:59:
81:0d:26:23:9b:d3:64:46:a9:1e:3e:83:af:ba:5f:
bf:2c:bf:8e:f2:61:e8:81:67:7a:8b:d6:67:fd:f0:
c6:93:fc:72:20:f5:b2:0e:1e:6f:98:f9:7d:73:ae:
67:b6:dc:7c:b5:0e:2b:80:f2:ac:df:2c:fc:a7:88:
5a:40:75:08:0d:aa:06:df:76:a9:ca:ec:14:fb:39:
44:46:8d:7d:ba:5b:7b:f2:ec:69:d9:1f:59:27:c5:
ef:83:23:41:fc:9f:73:19:cd:af:d2:d1:d2:1f:ba:
9a:57:5d:b9:eb:ae:3e:1c:34:b8:a5:e7:05:30:04:
80:dd:9b:d0:26:d8:7d:86:88:36:31:a3:87:e3:43:
cb:42:55:79:d8:0c:e5:6b:32:8d:05:49:cf:8c:ea:
26:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0C:13:70:72:D8:82:18:53:E9:AA:1B:91:02:54:4F:62:CF:56:F5
X509v3 Authority Key Identifier:
keyid:16:7B:A5:6C:DC:8C:97:66:2C:1B:57:D9:01:A1:F8:65:88:AD:F2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnulbNyMl2YsG1fZAaH4ZYit8q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/swwTcHLYghhT6aobkQJUT2LPVvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/FnulbNyMl2YsG1fZAaH4ZYit8q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:95:6e:2d:1f:e2:82:7c:0c:64:45:fa:6e:9a:2c:64:96:cd:
ec:73:70:96:7c:aa:fb:0f:01:3e:5c:ce:ab:0f:14:99:21:a9:
79:9f:c3:62:c1:05:d9:b0:9e:0e:49:ca:d7:34:24:27:22:81:
82:eb:19:e8:97:d6:75:1b:c6:62:a0:4a:ee:d7:3b:9a:05:45:
2d:e1:31:38:bb:34:57:f6:f9:80:53:33:4c:ac:95:d3:c3:1e:
8f:b9:ce:9d:0f:c8:20:99:42:2f:84:b6:e9:d6:17:d8:d6:91:
5b:eb:ae:70:a2:1d:c9:b8:a2:88:9a:47:5e:b2:ed:ad:be:2e:
c7:4c:ec:77:28:c5:8b:4b:aa:95:a5:36:b9:8c:18:49:6f:b3:
f4:c3:1e:84:bf:85:a9:c5:0f:09:f1:cd:6a:79:6b:dc:1d:70:
44:0d:e7:5f:06:10:44:0b:1d:84:12:1a:ec:95:1b:a7:8f:fa:
5f:26:b1:59:3d:3f:8c:4b:03:0b:c0:dc:82:2f:3c:d8:53:6a:
9c:08:b5:af:71:a8:26:0f:02:2a:69:f7:f4:9c:ec:33:4e:ed:
8d:06:05:56:58:5c:0e:40:fa:9a:90:6a:36:92:71:68:27:e8:
a2:56:10:e8:e7:68:f4:82:bd:b4:71:d6:f9:a1:59:96:7b:a6:
a7:5a:fb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 12:24:33 2023 by rpki-client on console-fra.rpki-client.org