Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/6N6hj_9Q_KJZO2TQl04wSqA0GAU.roa
File: 6N6hj_9Q_KJZO2TQl04wSqA0GAU.roa (raw, json)
Hash identifier: rYGiqmGzSFXda18XDQ7CT0xO6zxboFFHx92N+QOrKIg=
Subject key identifier: E8:DE:A1:8F:FF:50:FC:A2:59:3B:64:D0:97:4E:30:4A:A0:34:18:05
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 01857082ADFB98030A9D0EC84957B9D7CCD4
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/6N6hj_9Q_KJZO2TQl04wSqA0GAU.roa
Signing time: Mon 02 Jan 2023 03:24:50 +0000
ROA not before: Mon 02 Jan 2023 03:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197478
IP address blocks: 62.82.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:ad:fb:98:03:0a:9d:0e:c8:49:57:b9:d7:cc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 2 03:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8dea18fff50fca2593b64d0974e304aa0341805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:54:01:d8:40:96:0a:1e:ed:ad:73:47:ae:e8:
54:1d:64:b5:8d:6c:d3:60:97:27:9b:a2:cb:fe:bc:
d2:cf:ca:25:b7:72:85:d0:3a:a1:0d:e1:f1:b8:4b:
7d:f0:05:ee:34:52:8f:b5:11:2d:43:85:fe:ea:76:
02:88:da:91:75:e1:84:32:3d:c9:f9:9b:26:c7:5d:
2f:58:5a:67:a3:c9:f8:2c:48:7f:c6:32:b3:33:2e:
4f:63:71:a0:03:42:f6:ce:7e:00:0e:1c:86:91:e5:
e0:b3:2a:94:53:a0:5b:2d:76:21:57:44:50:47:03:
68:d6:00:34:72:35:ce:78:28:69:1a:2a:f1:53:d6:
28:1a:62:a6:9a:34:2f:30:e0:b1:fa:bf:19:3f:b4:
11:1d:30:bd:c1:18:6b:bf:63:2b:24:10:bb:fc:06:
d8:9f:bd:ca:e6:91:74:57:9a:39:9d:57:05:35:6b:
5b:ef:7a:e7:e5:3c:aa:de:97:b2:5e:fc:23:ab:15:
15:f3:5f:c3:7e:2d:0c:ed:bb:67:47:7e:52:a7:cb:
5d:77:80:ae:95:94:c3:cc:31:ce:de:df:2c:6b:4c:
7c:e6:4d:07:41:63:7d:19:89:ca:04:55:05:da:42:
d9:3e:ec:42:39:a4:84:b5:0c:c2:d0:16:a2:2b:c5:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DE:A1:8F:FF:50:FC:A2:59:3B:64:D0:97:4E:30:4A:A0:34:18:05
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/6N6hj_9Q_KJZO2TQl04wSqA0GAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.82.140.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0b:1c:eb:87:38:a4:0b:66:d2:a2:05:e8:44:59:42:d8:91:
54:66:ce:cd:93:61:15:c3:2c:19:c9:3c:6b:fa:27:dd:3c:44:
85:bd:e2:65:7c:88:af:74:76:18:ec:24:94:e6:e2:53:f6:4f:
cb:bb:32:63:15:4c:37:ef:83:a9:11:18:a2:05:8c:39:96:78:
e7:4c:28:ad:32:d3:01:a7:d2:4b:b9:3e:2a:42:62:71:c6:1e:
1b:61:4d:67:d3:c5:e6:e8:db:06:f3:55:be:2f:09:03:c2:08:
87:46:58:a6:bf:b7:b6:9e:ad:97:02:fd:ae:dc:b6:b3:eb:cd:
2a:24:30:de:67:50:4c:99:4b:04:df:49:75:c7:a8:93:ac:14:
94:e2:d1:e2:6f:68:c5:31:ed:37:5a:74:20:9b:4b:3b:b4:eb:
d1:98:65:1a:f2:59:ec:c1:4e:34:fa:4c:fd:2c:53:c3:f7:18:
9b:7e:9f:87:d8:0b:7c:ed:77:54:51:20:7f:eb:96:8c:e6:89:
c5:77:c1:e2:d3:e0:31:37:d5:6b:c7:77:f6:b0:72:77:9c:dc:
cc:d1:c2:c6:0c:ac:36:a5:30:c8:05:55:e5:c5:89:89:14:24:
46:fd:98:b6:05:90:93:89:7b:a3:f7:74:65:51:c9:8e:cd:1a:
a7:8e:3c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:28:02 2024 by rpki-client on console-fra.rpki-client.org