Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/UPl4EgwrO1zU3LtRB5-xRLRNxYM.roa
File: UPl4EgwrO1zU3LtRB5-xRLRNxYM.roa (raw, json)
Hash identifier: UpuxGftuRhVYGZBh0RJTVagS/9HYAz7FXPXVSgaU/yo=
Subject key identifier: 50:F9:78:12:0C:2B:3B:5C:D4:DC:BB:51:07:9F:B1:44:B4:4D:C5:83
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 01856E5D6EACD609DAB07A389AAB610A37F8
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/UPl4EgwrO1zU3LtRB5-xRLRNxYM.roa
Signing time: Sun 01 Jan 2023 17:24:55 +0000
ROA not before: Sun 01 Jan 2023 17:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197775
IP address blocks: 62.102.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:6e:ac:d6:09:da:b0:7a:38:9a:ab:61:0a:37:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Jan 1 17:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50f978120c2b3b5cd4dcbb51079fb144b44dc583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:24:c4:d8:b9:39:4f:95:53:31:ba:7e:46:97:
2a:8c:4b:0a:df:d2:11:d8:e3:39:4d:d0:1a:86:09:
63:30:5e:ea:2d:30:17:96:a2:31:23:4f:42:f6:ab:
62:b1:f6:a3:5f:51:b7:9d:63:2b:be:fc:70:bc:a3:
e9:5d:5b:ad:38:48:df:cb:31:50:3d:27:4a:58:f0:
05:07:95:a2:32:d7:9c:65:36:f2:42:de:e7:aa:7c:
aa:79:c2:85:94:d3:7c:47:07:8b:09:13:b5:88:b4:
a6:c7:01:da:b3:a9:05:b8:31:9f:d8:bf:15:36:77:
bc:d9:5d:00:33:5a:d4:a2:3a:39:f0:8b:02:09:6f:
e6:6a:3c:7c:bd:4f:15:04:a8:60:8c:b3:94:c1:07:
59:f8:25:8c:eb:d5:36:af:b3:03:80:69:72:f4:1d:
45:4a:a5:b2:75:58:20:4e:5e:23:9d:b8:35:3f:fe:
46:27:1b:b8:30:72:cd:bf:d8:b1:55:9a:1b:77:1a:
bf:97:8f:aa:8e:5b:ed:44:4c:1e:ae:0e:18:52:84:
f3:64:c5:02:21:f3:65:1f:3f:ae:38:b3:66:63:26:
ff:af:d0:65:9f:7c:2c:0a:45:32:da:32:5c:5c:62:
56:00:77:84:05:01:fa:58:7b:d9:c5:a2:7e:7d:95:
8c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F9:78:12:0C:2B:3B:5C:D4:DC:BB:51:07:9F:B1:44:B4:4D:C5:83
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/UPl4EgwrO1zU3LtRB5-xRLRNxYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.102.150.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ba:f6:44:8b:7c:7d:6b:00:15:f4:85:86:67:f1:9a:18:86:
3d:aa:ba:92:17:c4:c6:76:6d:8c:d1:98:5e:bf:7c:9d:b1:97:
49:2d:95:5d:b0:e4:65:73:db:e9:59:6a:79:12:b2:ee:e4:2e:
d5:ab:af:63:e5:be:6b:9a:9e:e7:7c:9b:36:97:2d:9f:ea:f3:
af:76:a0:53:db:ed:7a:e4:95:84:37:04:ef:0f:25:f4:3d:b3:
da:d8:42:cf:64:b7:09:b3:01:09:c6:75:e8:11:eb:e0:c7:6c:
90:d3:92:89:d5:e5:66:d1:22:d9:66:a0:ca:c5:bd:9d:d4:ba:
f7:de:9e:4c:5a:f7:92:a2:e7:48:dd:14:68:09:a1:44:60:7e:
de:6b:f1:24:bc:e4:68:7d:2f:81:c8:65:3b:7d:8e:1a:71:a3:
9b:77:d7:63:5d:37:2c:6b:62:05:ef:4e:98:0c:e5:80:90:14:
4c:b4:1e:6f:1e:41:69:42:4e:11:3d:94:55:29:d6:2a:2f:8e:
ff:c0:b3:89:a3:61:48:be:96:41:7d:1d:e5:45:0a:5b:0f:a9:
4e:8b:11:e7:ba:14:b1:10:8d:97:fb:64:2b:23:43:bd:73:82:
62:4c:f2:47:81:7c:e5:08:37:b9:a3:c9:ba:d9:22:6f:01:49:
62:cc:3b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org