Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/4k4U-5LhlVu1jdTxK1BxTQaJpUg.roa
File: 4k4U-5LhlVu1jdTxK1BxTQaJpUg.roa (raw, json)
Hash identifier: cF25o4gD/+JOR6Zv8pH/IMaKHj5qgtAf9KvgyvUP1bc=
Subject key identifier: E2:4E:14:FB:92:E1:95:5B:B5:8D:D4:F1:2B:50:71:4D:06:89:A5:48
Certificate issuer: /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial: 01901116A3AA8C4B71DF9D6BB632AEE9545E
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/4k4U-5LhlVu1jdTxK1BxTQaJpUg.roa
Signing time: Thu 13 Jun 2024 10:13:34 +0000
ROA not before: Thu 13 Jun 2024 10:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.3.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jun 2024 13:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:11:16:a3:aa:8c:4b:71:df:9d:6b:b6:32:ae:e9:54:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Validity
Not Before: Jun 13 10:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e24e14fb92e1955bb58dd4f12b50714d0689a548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:83:41:b4:7e:54:83:b9:e2:15:e6:bd:33:6e:
dd:0b:02:93:df:12:d8:23:ee:2b:f2:c0:33:33:16:
b5:23:04:48:ab:c4:2c:d0:a0:25:c8:bd:86:f4:7f:
04:e2:b6:6e:ea:dc:0d:a0:31:3c:c5:80:85:bd:5f:
48:6e:84:e9:69:87:ff:10:36:30:a1:6b:80:f8:3d:
6f:9d:ae:7e:b4:b1:8b:62:d3:e7:c7:f6:da:f0:f2:
80:b3:51:e6:a7:cb:ef:5b:bf:1e:51:09:f4:bf:79:
a6:26:12:1a:55:93:32:95:74:7d:46:78:e9:cc:59:
05:e4:38:e4:a8:f5:81:0b:c2:0f:26:be:3b:2a:07:
1e:4b:7b:b0:7a:11:1f:b3:ce:31:cb:9f:73:db:0f:
08:56:27:c7:88:73:a0:c9:07:da:8e:5d:71:a1:97:
24:d6:b0:7c:59:0f:8f:34:e2:66:d9:d9:8e:e7:16:
48:64:5f:be:b2:c9:90:ac:19:7f:12:34:ba:69:3b:
38:bf:ab:4a:cc:86:85:05:6f:e3:0e:97:ba:46:da:
e0:61:54:07:e2:1a:38:75:6d:8d:b2:2a:97:c9:76:
6d:2c:2e:b6:51:90:e2:77:b5:3f:83:97:22:b2:d0:
84:25:c0:a3:ac:9a:b1:73:5b:17:43:65:40:9d:46:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4E:14:FB:92:E1:95:5B:B5:8D:D4:F1:2B:50:71:4D:06:89:A5:48
X509v3 Authority Key Identifier:
keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/4k4U-5LhlVu1jdTxK1BxTQaJpUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.54.0/24
Signature Algorithm: sha256WithRSAEncryption
63:cd:b5:bb:c6:97:94:4b:00:f5:85:25:98:73:5f:d2:82:52:
86:45:3e:47:db:18:bc:e9:47:02:04:cc:ae:0d:c1:63:47:2f:
95:81:36:7b:c5:34:70:29:70:3b:6a:2e:4d:d7:9a:7d:0e:79:
e5:5d:89:1a:1d:19:39:cf:37:09:65:98:31:46:ee:ba:06:e3:
d2:33:59:ce:d6:dd:9f:a3:53:dc:cd:02:4e:4e:5f:a6:29:a1:
63:6e:33:ef:05:db:2c:67:12:28:69:73:a8:ce:94:79:2d:63:
dd:5e:27:73:ca:ec:f2:b3:65:84:7a:3a:6e:6f:5b:c9:84:58:
71:db:81:a6:69:e0:2c:1b:a9:b8:2a:f4:99:98:c6:41:a8:b0:
ab:fe:a8:a5:c1:7e:60:e2:b0:e3:4a:2b:cd:2f:d0:01:c4:a7:
f6:7b:d6:a3:24:b6:54:84:f6:17:95:01:77:66:0a:b7:6a:f0:
9c:fc:10:f9:9e:80:06:df:24:3b:8b:c2:98:59:94:e7:8b:d9:
34:10:5b:77:16:15:05:e3:7e:0f:c6:44:0a:fd:09:b9:1e:c0:
34:d8:a8:10:f4:73:fc:e6:a1:87:89:be:9d:04:8a:23:1f:84:
70:06:70:9e:35:9b:1d:3b:66:bf:16:b7:71:1d:39:82:5d:80:
22:72:47:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 17:17:10 2024 by rpki-client on console-ams.rpki-client.org