Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/A5JCilsG8xnEiD2A6XKNJSU7PGs.roa
File: A5JCilsG8xnEiD2A6XKNJSU7PGs.roa (raw, json)
Hash identifier: IMGbmKETXmv+pOwh7uUBvLCmQVUsjxB5Q4nWrVb0LuM=
Subject key identifier: 03:92:42:8A:5B:06:F3:19:C4:88:3D:80:E9:72:8D:25:25:3B:3C:6B
Certificate issuer: /CN=d3624e908c7498fdb613542753ef56c75cd704bd
Certificate serial: 0187FF8835AD67F8FD769AF9A19696AAD92B
Authority key identifier: D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/A5JCilsG8xnEiD2A6XKNJSU7PGs.roa
Signing time: Tue 09 May 2023 08:02:09 +0000
ROA not before: Tue 09 May 2023 08:02:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8829
IP address blocks: 62.106.0.0/19 maxlen: 19
45.11.84.0/22 maxlen: 22
185.158.72.0/22 maxlen: 22
62.106.32.0/20 maxlen: 20
2a03:c80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:88:35:ad:67:f8:fd:76:9a:f9:a1:96:96:aa:d9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3624e908c7498fdb613542753ef56c75cd704bd
Validity
Not Before: May 9 08:02:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0392428a5b06f319c4883d80e9728d25253b3c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:e8:a9:20:8f:a5:b7:5b:1b:bf:11:9b:06:
49:93:2a:94:db:6a:d0:18:80:15:e1:5b:70:05:05:
62:a0:f2:14:54:16:d1:d0:a9:7a:b8:a6:01:a5:d0:
a1:9e:a7:5b:a9:80:64:cf:5f:1e:74:d6:6b:ad:88:
dd:85:3f:96:fc:f9:a0:88:b8:a1:55:2b:ed:44:03:
44:c7:ab:b8:06:a6:c2:36:13:fe:44:16:d3:81:4b:
d8:0c:5b:6c:ed:2a:f2:c6:6e:39:96:0b:85:f1:c4:
0c:b0:55:d1:94:08:a7:ea:87:a4:c6:ce:3c:46:4c:
51:37:e9:e8:5e:3a:50:2b:2d:42:1a:80:81:40:f8:
5d:0d:82:b6:4d:3d:b8:d0:ac:16:fb:5e:9d:c0:c4:
5c:e5:24:00:e1:53:5a:6c:13:9c:01:fd:ba:36:e6:
85:f6:7f:75:c2:8c:ba:91:f9:17:c2:ba:46:27:0b:
48:47:7a:6a:d1:f9:be:ec:c5:c8:36:b6:c0:4e:0f:
2a:13:12:92:7a:f7:11:01:09:f5:ca:10:30:92:7a:
d5:6c:85:74:a6:88:c5:8f:bc:ea:a5:bf:43:c0:8f:
57:e6:81:f3:96:fb:b9:9c:88:0f:62:20:d3:51:55:
52:67:7c:41:0b:ad:c1:e2:c4:60:67:53:6f:a5:63:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:92:42:8A:5B:06:F3:19:C4:88:3D:80:E9:72:8D:25:25:3B:3C:6B
X509v3 Authority Key Identifier:
keyid:D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/A5JCilsG8xnEiD2A6XKNJSU7PGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.84.0/22
62.106.0.0-62.106.47.255
185.158.72.0/22
IPv6:
2a03:c80::/32
Signature Algorithm: sha256WithRSAEncryption
66:16:c9:a8:f0:f1:5a:c1:14:f3:ac:19:7f:b0:ab:2c:d2:c6:
d5:8a:9d:bf:48:cc:94:ff:5a:a9:1f:95:9f:2a:aa:07:82:13:
f8:bf:f5:67:96:3b:ed:6d:52:ee:de:2b:02:d9:5f:41:de:54:
fa:6e:08:8c:1e:03:19:f2:7a:0e:1e:1a:83:e5:72:c3:97:cc:
ec:7d:32:69:b4:4e:5b:89:94:4c:21:43:e1:1b:eb:9a:69:2b:
47:76:32:8d:0a:fd:6c:9a:b5:bb:ea:a7:24:a0:bf:ae:5b:a7:
94:b1:d5:ce:43:82:79:e8:aa:30:86:aa:0f:77:dd:d2:37:da:
14:92:82:e0:57:7a:3b:fe:92:8f:2a:87:62:3a:67:9d:c6:34:
2a:7c:f6:0a:95:bc:f4:4f:91:59:7c:ac:a3:8d:bb:2d:b9:0e:
ac:6b:3d:a3:1f:b7:cc:1f:ee:62:52:71:d1:1d:44:22:af:53:
b7:52:a3:15:74:dc:0b:ca:ec:12:ac:e8:a8:d9:c0:84:b9:65:
ce:56:b1:86:7a:e8:ec:7e:1e:f9:4e:bf:ea:c8:77:93:c1:75:
88:fb:48:e6:95:97:12:16:f0:45:63:7c:c6:f4:3e:91:1c:1e:
58:6b:6f:9a:c8:24:16:8f:42:01:2e:83:29:f3:81:1f:38:f2:
3d:f0:c8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:40 2024 by rpki-client on console-fra.rpki-client.org