Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/awjoD4ur2KPwJmzP_dHDGrJ0NmM.roa
File: awjoD4ur2KPwJmzP_dHDGrJ0NmM.roa (raw, json)
Hash identifier: 1OjzvKW9hsbjYJfNNQ9DVAPpZordgVd5ugnq8bKq//Y=
Subject key identifier: 6B:08:E8:0F:8B:AB:D8:A3:F0:26:6C:CF:FD:D1:C3:1A:B2:74:36:63
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 018CC9BC789DE9894A7810F64DA11B54A315
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/awjoD4ur2KPwJmzP_dHDGrJ0NmM.roa
Signing time: Tue 02 Jan 2024 10:33:41 +0000
ROA not before: Tue 02 Jan 2024 10:33:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206718
IP address blocks: 62.4.108.0/24 maxlen: 24
62.4.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 06:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:78:9d:e9:89:4a:78:10:f6:4d:a1:1b:54:a3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Jan 2 10:33:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b08e80f8babd8a3f0266ccffdd1c31ab2743663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:c1:44:51:1d:02:2e:af:38:70:ff:a4:41:
ac:74:52:21:7e:5e:aa:11:bf:cc:84:58:94:3f:28:
99:6c:f9:97:c0:e3:79:e7:0a:59:7e:55:ab:c3:d6:
de:6f:8a:a9:9a:d2:93:3f:bc:a5:4f:30:82:4c:3c:
89:c1:80:6b:f5:4c:22:80:4a:61:ae:c8:c8:5f:4b:
40:50:1f:88:34:36:28:e5:c5:f4:7d:18:84:bc:f2:
42:a7:82:2e:b0:59:9d:40:be:ac:c7:34:b3:fb:33:
99:84:ae:0d:b8:9a:5a:53:a5:3b:29:e9:66:48:bb:
fa:7c:46:51:ed:e8:69:c9:7e:68:fa:a4:d4:21:58:
8f:4b:01:aa:08:6f:9c:ca:47:b1:89:3b:5b:d2:c0:
34:b6:7f:90:01:0c:40:4f:4b:c9:0f:4b:10:e4:47:
f0:6e:29:60:1e:20:b5:9d:b2:89:6b:14:71:ca:6f:
e3:29:6c:6c:53:40:d1:9b:f8:c9:63:e0:e7:f2:5c:
6c:df:fa:e7:fc:da:21:57:55:21:95:31:d5:0d:b3:
7a:06:e4:bb:4a:4c:d4:c0:82:19:a9:86:65:c2:02:
78:4d:8e:29:4f:22:7a:45:20:fc:3d:5b:19:8e:76:
50:04:55:90:13:42:75:80:a8:a6:59:84:40:52:0b:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:08:E8:0F:8B:AB:D8:A3:F0:26:6C:CF:FD:D1:C3:1A:B2:74:36:63
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/awjoD4ur2KPwJmzP_dHDGrJ0NmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.108.0/24
62.4.116.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:57:27:7f:14:53:52:2f:7b:d7:ac:20:88:ee:f4:e1:22:a1:
f2:68:8a:f5:a6:06:e0:00:82:ee:bf:fc:bd:b7:e2:8d:f2:02:
25:cd:47:ad:52:f1:dc:c5:ad:59:92:61:c7:6e:df:f9:6c:79:
90:da:af:e2:03:bc:08:e7:e3:26:1f:2f:5d:79:ff:ef:4c:d4:
78:27:b6:49:1c:6c:d5:16:6b:78:fa:07:fe:63:d5:29:91:61:
e7:bc:07:be:24:9c:f9:db:17:10:64:07:ea:e9:24:f6:21:ca:
af:fa:e0:61:67:cd:e0:47:2f:37:15:05:81:fe:ec:d1:81:28:
b4:22:69:2a:f3:fe:bf:13:2b:85:7f:36:f9:87:2e:81:22:82:
8c:7c:69:94:c9:00:f5:81:cf:d3:35:dd:e0:bb:d3:7e:87:fa:
d4:41:e2:7d:3b:03:df:10:44:83:56:44:ec:2f:b6:f8:ab:4c:
1c:0a:22:cf:6b:12:99:d2:a5:64:39:97:f5:37:8d:4c:7a:fa:
68:0f:25:ac:23:11:49:5a:52:56:17:07:85:bd:59:8b:9a:9e:
58:4d:87:f2:ae:2f:5a:24:f6:b7:8d:b9:19:85:82:5c:f3:16:
ca:fa:3a:4f:ee:74:0c:25:9b:f5:ba:12:13:17:71:53:4a:ae:
99:7f:f4:61
-----BEGIN CERTIFICATE-----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Generated at Wed Apr 3 08:47:01 2024 by rpki-client on console-ams.rpki-client.org