Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/6d9bd3-f0d4-4505-96f8-e40ea991404b/1/rlJb_ZuOZbi6VlwnY9iPdOfE_nQ.roa
File: rlJb_ZuOZbi6VlwnY9iPdOfE_nQ.roa (raw, json)
Hash identifier: ph+pgnaYmzqNfRHQcxxX4oYFmYGug6KwcNtR/LBXvs4=
Subject key identifier: AE:52:5B:FD:9B:8E:65:B8:BA:56:5C:27:63:D8:8F:74:E7:C4:FE:74
Certificate issuer: /CN=330716efa7392a523160c1723b3190b8fca868d2
Certificate serial: 01856CF84F997D25AC70D38A15FF105FEA67
Authority key identifier: 33:07:16:EF:A7:39:2A:52:31:60:C1:72:3B:31:90:B8:FC:A8:68:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MwcW76c5KlIxYMFyOzGQuPyoaNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/6d9bd3-f0d4-4505-96f8-e40ea991404b/1/rlJb_ZuOZbi6VlwnY9iPdOfE_nQ.roa
Signing time: Sun 01 Jan 2023 10:54:50 +0000
ROA not before: Sun 01 Jan 2023 10:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209235
IP address blocks: 62.68.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:4f:99:7d:25:ac:70:d3:8a:15:ff:10:5f:ea:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330716efa7392a523160c1723b3190b8fca868d2
Validity
Not Before: Jan 1 10:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae525bfd9b8e65b8ba565c2763d88f74e7c4fe74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:94:28:87:4e:10:21:38:e0:70:55:d9:93:36:
d8:9c:17:e2:17:bc:3f:3e:0e:8f:df:4e:f1:3e:af:
fc:a7:76:3b:64:63:db:b6:b8:3c:e2:73:aa:99:f1:
17:f8:85:24:88:b7:f0:7f:99:42:63:d8:22:05:56:
ee:be:b3:67:7b:4b:ee:3a:e7:11:ae:65:94:5d:31:
29:ed:b2:00:f0:51:71:08:96:b5:9e:6f:40:ab:e3:
ab:fe:0d:df:e2:eb:e8:43:fe:68:d8:be:a7:4a:42:
05:85:f7:b2:84:9d:51:1e:ee:35:7d:47:f4:7d:b8:
4f:32:a9:0d:d0:c8:4c:e5:c1:b7:b5:82:a5:d7:a3:
95:47:90:2f:1a:f1:c9:a7:b6:a0:92:fd:77:37:60:
02:e6:3c:17:e5:89:19:96:72:10:25:64:f2:d6:bd:
f4:7e:cd:c4:37:17:43:06:f4:d9:d4:c7:ef:05:bd:
df:f2:0b:2e:76:d6:ea:07:58:7c:bf:62:e8:a8:fd:
3b:37:35:3d:b7:17:ac:7d:48:5a:71:ab:65:82:d4:
38:1a:4e:61:dd:ea:9e:dc:9c:8a:37:3b:61:90:26:
c7:ae:51:19:e8:c3:01:e5:0a:8a:fe:98:7c:eb:dd:
5c:d6:b5:82:7c:37:ff:c0:d5:dc:8a:2a:23:35:d6:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:52:5B:FD:9B:8E:65:B8:BA:56:5C:27:63:D8:8F:74:E7:C4:FE:74
X509v3 Authority Key Identifier:
keyid:33:07:16:EF:A7:39:2A:52:31:60:C1:72:3B:31:90:B8:FC:A8:68:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwcW76c5KlIxYMFyOzGQuPyoaNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6d9bd3-f0d4-4505-96f8-e40ea991404b/1/rlJb_ZuOZbi6VlwnY9iPdOfE_nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6d9bd3-f0d4-4505-96f8-e40ea991404b/1/MwcW76c5KlIxYMFyOzGQuPyoaNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.78.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f9:cc:1a:56:08:b6:c5:22:1c:c5:c8:b0:59:25:4e:b7:7f:
21:27:81:1a:a6:ce:3e:4f:92:90:9b:fa:0d:84:fb:5d:2b:5a:
6f:52:26:ac:ca:4a:7f:62:ed:de:c9:ba:f2:f1:9a:4d:13:b4:
64:7d:42:13:41:23:ac:75:72:e8:00:d9:6f:dd:da:3c:f1:92:
3e:9b:9c:31:48:18:ab:63:6a:8f:a4:a5:32:0e:1e:52:87:8c:
2e:88:6e:98:8f:d1:2d:ca:39:dd:b0:ed:13:8c:23:ea:7e:d0:
bb:e2:f2:37:37:05:b9:c7:75:38:58:8f:6c:55:85:2e:7f:57:
9e:a8:8c:c8:94:3c:30:28:9a:53:57:29:36:ae:9e:56:cf:4b:
00:a9:01:02:5f:8c:59:e4:b5:b8:f6:c8:33:78:14:f0:04:65:
da:b0:bd:3b:66:30:a6:09:9e:0f:83:c6:5a:26:8e:1b:73:08:
f8:bd:d5:a1:a2:e1:79:60:51:e1:23:13:7c:b6:c8:9d:e3:64:
7c:ee:4c:0c:10:8e:39:6c:cb:04:44:41:27:0d:7f:e6:96:20:
83:2d:47:dd:50:89:c3:e0:84:5c:7d:2f:6f:cf:c3:07:af:79:
0b:a8:03:dd:d5:95:c7:7a:ae:3c:30:fc:f8:5b:47:6b:84:21:
0d:f7:41:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:20 2024 by rpki-client on console-fra.rpki-client.org