Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/YfS5qbliH-uZLu9P5ybhaO3-iRQ.roa
File: YfS5qbliH-uZLu9P5ybhaO3-iRQ.roa (raw, json)
Hash identifier: U9Mom5yfrbl39v5IE246INdfNAWlJSjlaL2feoR21Ts=
Subject key identifier: 61:F4:B9:A9:B9:62:1F:EB:99:2E:EF:4F:E7:26:E1:68:ED:FE:89:14
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 01856D6F6EAA52AB8AF750095AF294ECBD50
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/YfS5qbliH-uZLu9P5ybhaO3-iRQ.roa
Signing time: Sun 01 Jan 2023 13:04:57 +0000
ROA not before: Sun 01 Jan 2023 13:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8495
IP address blocks: 62.116.152.0/23 maxlen: 24
62.116.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:6e:aa:52:ab:8a:f7:50:09:5a:f2:94:ec:bd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: Jan 1 13:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61f4b9a9b9621feb992eef4fe726e168edfe8914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:35:50:dd:1c:ce:49:e4:8a:11:81:e4:11:
04:8a:4d:62:bb:54:9d:ff:f7:4c:b1:d5:23:aa:de:
de:6e:e6:54:e9:23:79:ea:ec:f5:d8:31:f3:4a:4b:
c3:cb:a3:c7:08:86:6e:70:89:f3:0e:a8:4b:f6:67:
0a:dc:56:0f:bd:b6:fe:07:36:8a:7f:93:b9:39:33:
0c:d7:28:8d:72:cc:96:16:49:56:57:bb:77:ad:e5:
49:21:58:b1:eb:24:f1:e1:f1:92:62:d1:fe:23:85:
48:38:63:49:1e:f5:6f:c5:82:45:7b:68:46:1f:20:
b2:8a:02:ca:6d:ee:f7:13:bf:13:69:70:14:c2:e2:
6c:a1:8d:f0:59:df:c5:19:a4:4a:c8:35:30:e5:95:
04:06:0a:f9:5a:d3:0f:83:f5:74:ce:d3:a9:50:d5:
8f:69:fc:7c:a7:41:d8:99:78:08:93:c8:d4:67:4a:
f1:b7:ef:b9:21:71:03:50:c5:8c:f8:76:77:fc:97:
3b:1a:47:70:3a:03:8f:2e:36:98:c9:44:3a:9a:cb:
d3:b1:61:6f:8a:46:c9:97:d4:b8:5b:47:61:6f:eb:
b4:14:fb:98:6b:d6:32:51:c7:82:3c:3b:53:45:be:
2e:f4:b0:eb:49:7c:59:bd:61:b1:3b:45:2e:82:37:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F4:B9:A9:B9:62:1F:EB:99:2E:EF:4F:E7:26:E1:68:ED:FE:89:14
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/YfS5qbliH-uZLu9P5ybhaO3-iRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.116.150.0-62.116.153.255
Signature Algorithm: sha256WithRSAEncryption
03:2e:f8:01:e3:65:aa:41:33:86:3a:2e:77:ad:89:50:72:5f:
1c:f6:56:ea:be:77:17:87:be:ae:f6:b3:0a:ef:48:46:eb:37:
ed:ac:9b:18:28:9a:e7:2c:57:5a:f9:9a:f1:55:2a:d0:e8:56:
ba:4e:3b:44:ce:e4:2d:55:e8:52:43:a0:b7:eb:36:e8:12:f4:
65:aa:5f:8d:06:5e:bd:47:e6:41:d5:4a:fd:26:94:d6:d8:6a:
97:c0:8a:54:ec:29:92:9c:74:d3:22:6e:be:7a:8d:4c:1b:bb:
de:ec:8c:23:33:c4:46:23:c6:d4:30:c0:05:53:e8:52:ab:6b:
9e:40:3a:e5:8a:bd:77:b9:7d:66:44:d8:56:5b:bf:23:98:e1:
fb:1b:de:dd:c7:68:cb:a6:e8:16:c6:86:b2:77:17:47:ee:e7:
05:c2:25:22:57:17:66:66:35:38:bf:1f:81:aa:81:14:2a:c0:
14:1b:09:31:69:02:44:95:2e:7b:7b:92:f3:56:e9:1a:35:b0:
a3:f6:67:99:1c:e4:35:99:ad:0b:59:a2:9b:f6:92:3c:1e:c9:
cf:8d:78:a6:b7:93:d8:06:bc:b0:92:82:5d:9a:aa:54:e2:8d:
8a:44:8c:d3:3e:39:17:ba:3e:85:82:91:56:fc:9b:76:cf:ec:
7f:22:c7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:51 2024 by rpki-client on console-ams.rpki-client.org