Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/XpPAy0yq5j9k1v50OxSjxT9xya4.roa
File: XpPAy0yq5j9k1v50OxSjxT9xya4.roa (raw, json)
Hash identifier: 1lguooRQWWcO9O5B/1RHCitk+pT1AYV3jsp7QOYsPpc=
Subject key identifier: 5E:93:C0:CB:4C:AA:E6:3F:64:D6:FE:74:3B:14:A3:C5:3F:71:C9:AE
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 0185BF1C96914C6F9A71D82941992A1E720A
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/XpPAy0yq5j9k1v50OxSjxT9xya4.roa
Signing time: Tue 17 Jan 2023 09:43:19 +0000
ROA not before: Tue 17 Jan 2023 09:43:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202756
IP address blocks: 62.4.112.0/24 maxlen: 24
62.4.109.0/24 maxlen: 24
62.4.110.0/24 maxlen: 24
62.4.111.0/24 maxlen: 24
62.4.113.0/24 maxlen: 24
62.4.114.0/24 maxlen: 24
62.4.115.0/24 maxlen: 24
62.4.117.0/24 maxlen: 24
62.4.119.0/24 maxlen: 24
62.4.120.0/24 maxlen: 24
62.4.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:1c:96:91:4c:6f:9a:71:d8:29:41:99:2a:1e:72:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Jan 17 09:43:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e93c0cb4caae63f64d6fe743b14a3c53f71c9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:83:90:a8:84:bc:52:c4:46:39:1b:27:5b:d0:
5c:cd:02:1d:3e:91:71:4c:fa:8e:e7:9e:b8:bb:d8:
5d:c3:e2:ad:86:ba:fd:ef:c2:b6:91:e3:76:6b:b1:
5b:cf:81:a6:af:48:c7:65:7c:da:10:01:54:f0:ff:
b9:fb:a5:ba:c4:5a:a1:80:43:b3:17:dd:c2:8f:67:
0d:91:97:c2:52:a4:56:27:14:a5:f4:94:6a:32:0a:
0f:56:14:b0:d5:a2:41:b5:fc:7e:87:c9:c2:ea:b0:
21:f6:a4:46:f1:ec:ae:0d:23:f3:45:89:9e:eb:eb:
f1:46:e1:75:7c:c4:e9:56:88:f0:6c:fb:bf:b4:d4:
3d:df:a4:19:5f:a5:72:fb:97:c8:c9:4d:cf:08:35:
b6:ca:15:8d:e1:0c:45:e9:49:d3:01:84:84:b5:19:
6b:c9:48:8e:17:bf:e4:7e:88:6e:80:be:98:33:46:
8c:ef:22:b2:04:e4:0d:4e:52:9c:f4:2f:07:ea:00:
80:6a:1f:3e:fa:98:2f:96:74:43:cc:7d:d8:31:f2:
25:b8:2a:44:a3:00:1e:44:f1:e4:f5:72:2c:2e:cd:
2a:30:75:2d:e0:1f:42:5c:9c:22:14:48:c1:bb:12:
d5:3b:c1:39:76:2e:0c:34:29:49:4a:1a:65:41:7b:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:93:C0:CB:4C:AA:E6:3F:64:D6:FE:74:3B:14:A3:C5:3F:71:C9:AE
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/XpPAy0yq5j9k1v50OxSjxT9xya4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.109.0-62.4.115.255
62.4.117.0/24
62.4.119.0-62.4.121.255
Signature Algorithm: sha256WithRSAEncryption
43:a5:cd:e2:9d:64:56:af:25:8d:e0:e5:47:76:0b:fc:b6:94:
6e:92:38:68:16:f5:67:0f:3a:40:ca:11:cd:e5:cc:f8:a1:66:
7d:89:18:3b:82:0a:22:f8:ae:a1:ea:35:02:0a:39:08:7e:38:
1d:e7:29:1f:26:b5:63:66:3c:35:41:40:4b:de:1d:9e:0e:ee:
3e:ad:59:81:5a:a2:f2:c7:01:cc:6c:83:03:5c:fa:01:a8:da:
8c:11:a6:38:f9:c8:47:4f:ca:15:c5:b2:1a:b7:aa:b7:2a:39:
5b:73:ab:9d:e7:9e:21:bf:c5:c1:1c:91:b2:53:36:a6:c5:75:
1e:e6:6c:50:f4:78:41:3e:16:b4:76:20:04:36:64:7a:e8:a5:
b7:0a:67:73:b3:eb:c5:ad:1f:5c:7b:2c:6d:ac:09:0c:d7:54:
77:48:eb:75:33:9e:fd:c8:3d:e4:0f:01:2b:4f:31:29:cc:70:
de:73:67:b0:7c:2b:df:b2:f9:85:45:a2:90:3e:ad:c6:32:04:
c8:51:3a:1c:7f:09:48:d7:81:2f:a1:6c:9d:70:28:be:82:65:
2a:4c:60:fd:08:e0:00:9d:09:40:ff:eb:a6:0e:1f:94:75:2e:
27:da:8a:64:c6:b7:11:5c:45:db:22:40:19:b6:5a:53:09:63:
4d:26:20:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org