Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/8Ud_SVDsOMMbFXF_zBgcPeewR5Q.roa
File: 8Ud_SVDsOMMbFXF_zBgcPeewR5Q.roa (raw, json)
Hash identifier: 3uY3QqJlNqMNtz+YxnVBMbbsPJu/lnXCjcVSPEkVdfM=
Subject key identifier: F1:47:7F:49:50:EC:38:C3:1B:15:71:7F:CC:18:1C:3D:E7:B0:47:94
Certificate issuer: /CN=d3624e908c7498fdb613542753ef56c75cd704bd
Certificate serial: 0185710BFC8438164396E266FF7204091DB9
Authority key identifier: D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/8Ud_SVDsOMMbFXF_zBgcPeewR5Q.roa
Signing time: Mon 02 Jan 2023 05:54:48 +0000
ROA not before: Mon 02 Jan 2023 05:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8829
IP address blocks: 62.106.0.0/19 maxlen: 19
45.11.84.0/22 maxlen: 22
62.106.32.0/20 maxlen: 20
2a03:c80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0b:fc:84:38:16:43:96:e2:66:ff:72:04:09:1d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3624e908c7498fdb613542753ef56c75cd704bd
Validity
Not Before: Jan 2 05:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1477f4950ec38c31b15717fcc181c3de7b04794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d3:c8:a5:79:f7:9e:10:a6:c3:e8:eb:47:32:
42:0f:33:ff:0c:cc:13:77:25:a5:01:f3:42:74:10:
15:88:e5:43:e5:4f:3c:2d:b8:48:30:d7:b2:b0:1c:
c2:d7:cd:14:2f:33:97:53:a3:34:42:19:27:ce:a2:
65:63:1c:18:cf:76:94:6c:14:83:37:e8:b7:30:52:
38:43:07:b9:9f:1a:02:8f:5f:90:58:8b:c3:7b:19:
a4:95:27:4a:e8:3b:cf:a5:49:62:fa:f2:a2:26:30:
ad:30:97:98:f6:49:cb:26:50:d2:8f:d4:44:4b:d7:
a6:44:88:6e:58:08:05:38:34:0b:2d:d2:68:dc:c5:
e9:11:68:ab:14:db:c7:88:b7:18:6d:8a:78:4c:f4:
d6:8f:ce:ca:a1:97:c5:f6:66:ba:ac:87:d7:fd:6a:
32:54:72:a9:3f:6d:12:42:bc:5e:a9:ed:5c:f4:e2:
bb:f3:1e:94:fb:8f:e0:e8:93:52:f5:6b:1b:d4:b0:
d0:64:68:e2:8a:f2:0e:73:32:44:79:7f:93:e6:44:
ab:7e:16:b6:93:53:5a:a0:58:ba:33:e8:19:87:5a:
30:dc:a2:3b:ee:e5:62:8d:9a:f9:54:e3:e0:24:a4:
25:e4:c9:5f:6a:98:3e:35:f3:52:63:11:f8:12:35:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:47:7F:49:50:EC:38:C3:1B:15:71:7F:CC:18:1C:3D:E7:B0:47:94
X509v3 Authority Key Identifier:
keyid:D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/8Ud_SVDsOMMbFXF_zBgcPeewR5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.84.0/22
62.106.0.0-62.106.47.255
IPv6:
2a03:c80::/32
Signature Algorithm: sha256WithRSAEncryption
77:46:de:44:e6:3d:20:17:d5:80:59:d5:a0:bc:a8:29:84:db:
05:25:da:bf:80:81:d6:f6:d9:4f:e8:02:71:2a:72:a8:65:7c:
64:3d:46:7d:94:bf:6a:35:2b:15:28:07:d8:bc:d3:05:80:92:
0f:e2:b5:88:89:d1:61:1e:2d:e2:bf:1c:92:e9:57:d7:a2:fa:
d7:bd:0c:b7:47:2b:8d:f0:52:59:28:8a:81:e4:2d:3f:82:16:
6d:c3:65:b9:03:f4:c4:92:47:08:f8:3a:ec:f0:bd:38:7c:92:
64:94:10:3e:81:bb:9f:a6:6e:ac:05:7c:82:cf:ff:26:a3:a4:
a7:2b:dc:a3:e6:d8:26:5b:20:52:42:3b:34:67:4a:3d:56:9f:
ea:89:a9:bf:82:c9:98:9b:81:5d:50:8f:61:93:7b:bc:0a:0b:
13:8a:8d:b1:57:7b:87:eb:ff:27:81:36:06:99:8f:c9:dd:72:
00:43:e0:7f:a7:d4:3a:93:19:65:e0:97:55:6b:b9:b5:c2:9e:
39:d8:50:ef:59:94:f4:3c:1a:b7:41:ce:80:37:3b:55:83:22:
72:fe:aa:03:c2:d1:d1:5e:f6:f4:63:55:f6:5e:f3:24:d6:89:
a2:17:ec:28:d5:f2:b2:95:3a:56:bc:6e:4f:4d:e7:be:cf:79:
6a:b1:f7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:19 2023 by rpki-client on console-ams.rpki-client.org