Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/u-sMtBO5SaWtI6Pv5pX7jbClRTo.roa
File: u-sMtBO5SaWtI6Pv5pX7jbClRTo.roa (raw, json)
Hash identifier: N/2huMXIEdPbjqKv1AIcS6Ylkus3+inPMlQI1K0x+iY=
Subject key identifier: BB:EB:0C:B4:13:B9:49:A5:AD:23:A3:EF:E6:95:FB:8D:B0:A5:45:3A
Certificate issuer: /CN=167ba56cdc8c97662c1b57d901a1f86588adf2ae
Certificate serial: 01856F42B7D9A86C5498907F55E9DC136E0B
Authority key identifier: 16:7B:A5:6C:DC:8C:97:66:2C:1B:57:D9:01:A1:F8:65:88:AD:F2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnulbNyMl2YsG1fZAaH4ZYit8q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/u-sMtBO5SaWtI6Pv5pX7jbClRTo.roa
Signing time: Sun 01 Jan 2023 21:35:21 +0000
ROA not before: Sun 01 Jan 2023 21:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.3.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:b7:d9:a8:6c:54:98:90:7f:55:e9:dc:13:6e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ba56cdc8c97662c1b57d901a1f86588adf2ae
Validity
Not Before: Jan 1 21:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbeb0cb413b949a5ad23a3efe695fb8db0a5453a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:9d:3d:2b:39:46:70:64:bf:55:76:c3:99:
a9:30:d5:04:5a:98:8f:17:de:62:1b:d7:4c:d6:ba:
20:ea:04:46:be:98:51:b7:52:c2:4c:2b:c9:a3:96:
52:77:4b:f9:40:16:4a:d2:ae:bf:c8:6c:1d:71:66:
f9:4d:1f:b5:37:f2:21:7b:ed:76:c2:a9:30:73:f5:
11:93:2d:b7:03:f0:af:24:b2:38:d1:6d:f3:b7:b8:
5f:7c:66:5b:c9:44:0f:4f:8e:98:18:46:c3:3a:22:
bf:42:da:14:ce:2a:dd:0c:7c:c0:67:3e:f1:4e:bf:
0d:a1:db:73:4e:8f:0f:9d:18:f9:f3:87:87:55:cb:
e8:6c:8f:94:c5:a2:63:5f:08:7a:f3:b2:fa:91:c0:
5a:91:47:c6:53:38:2f:d6:e5:e8:93:ff:ea:dc:e1:
20:70:7b:d3:00:d3:83:96:b2:c7:f9:fc:e1:8a:54:
14:19:9a:48:fd:e8:08:e9:e9:30:42:f7:b4:fa:c1:
57:b3:94:62:99:69:69:24:3b:e0:bf:1c:55:cc:99:
77:8c:de:b1:97:20:8b:f8:49:eb:8d:0b:6c:bf:e4:
b7:5e:86:8a:cc:d6:bc:c7:67:58:cc:ba:3c:00:ac:
38:f2:d3:8b:e4:ea:66:40:99:84:ed:77:19:ab:9e:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EB:0C:B4:13:B9:49:A5:AD:23:A3:EF:E6:95:FB:8D:B0:A5:45:3A
X509v3 Authority Key Identifier:
keyid:16:7B:A5:6C:DC:8C:97:66:2C:1B:57:D9:01:A1:F8:65:88:AD:F2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnulbNyMl2YsG1fZAaH4ZYit8q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/u-sMtBO5SaWtI6Pv5pX7jbClRTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/FnulbNyMl2YsG1fZAaH4ZYit8q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.0.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:b4:19:d9:72:6a:cb:c9:ca:3a:40:55:f8:a6:e5:ce:4d:c2:
29:1c:70:71:f9:43:30:03:67:bf:f6:7c:80:37:bc:b6:18:f9:
46:35:12:4f:88:65:0a:ac:d4:f8:5c:64:3d:d9:3e:43:57:be:
a1:ab:d7:46:83:21:eb:8f:c0:69:e6:b7:8f:71:e1:20:59:96:
06:53:6f:ad:4f:83:3f:3b:4d:25:69:ee:1a:7a:6f:b3:0a:fb:
d5:2e:fe:f6:9b:71:57:d4:c6:b9:48:9f:49:9f:e1:f8:bd:c4:
d5:4f:20:0b:00:8f:45:74:ae:44:60:cd:48:95:d5:4a:31:a6:
18:05:da:c8:b9:5f:73:af:2f:81:ee:53:7c:bf:b4:c0:80:bb:
10:ef:41:a9:3c:43:e9:f4:91:ff:99:90:d7:83:58:b5:f3:d2:
d9:ee:aa:11:0e:ea:3f:b0:1f:0f:af:ce:b2:8e:43:f2:d2:d8:
26:48:74:b3:d0:d9:f8:bc:4a:e1:d2:cc:e0:71:ea:9b:ea:d3:
9b:d1:81:3b:c9:7e:ef:e7:df:a6:37:88:db:85:43:c0:a7:de:
6f:cf:43:f7:ea:cd:e2:07:de:5a:58:ed:71:d2:04:de:79:d4:
24:c5:b8:19:41:e8:9a:6c:6e:99:83:59:96:fa:5a:35:13:ec:
fa:cc:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 06:26:58 2023 by rpki-client on console-ams.rpki-client.org