Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/99D02vrkDPCIGI8TJ9bsY3EWFZ0.roa
File: 99D02vrkDPCIGI8TJ9bsY3EWFZ0.roa (raw, json)
Hash identifier: kcrhYAzlxDss0AMJITFeDjVk1BxdOeUjqH25dxrzo7s=
Subject key identifier: F7:D0:F4:DA:FA:E4:0C:F0:88:18:8F:13:27:D6:EC:63:71:16:15:9D
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 01857082AD300609992D06B0D7A569C362EE
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/99D02vrkDPCIGI8TJ9bsY3EWFZ0.roa
Signing time: Mon 02 Jan 2023 03:24:50 +0000
ROA not before: Mon 02 Jan 2023 03:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60675
IP address blocks: 62.174.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:ad:30:06:09:99:2d:06:b0:d7:a5:69:c3:62:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 2 03:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7d0f4dafae40cf088188f1327d6ec637116159d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e9:df:37:1f:f7:7a:84:bb:63:17:0f:a5:88:
f4:d4:7b:92:82:22:85:12:24:8f:58:1b:8d:a6:c6:
6b:5c:c6:84:7f:58:d6:ac:86:4d:ce:96:d7:f4:40:
1f:58:b6:09:e3:14:05:66:fc:7a:42:7d:1e:6a:28:
cb:73:6e:83:b7:11:2e:e1:a5:57:3d:5c:41:c3:61:
e7:51:ac:b9:45:64:88:28:29:88:a9:9f:97:80:e4:
fc:b8:49:ad:3b:a2:eb:8e:f0:d0:a6:8b:ef:54:9a:
c3:2c:77:fa:e8:a7:ab:42:db:12:18:98:83:39:65:
74:b4:b6:ca:74:7e:f2:03:8d:e1:07:f7:39:58:1a:
0b:4c:8e:af:f0:d3:fb:89:e1:db:9b:54:a7:77:93:
86:4c:92:a4:53:e1:97:a4:a4:6c:77:a5:62:28:3d:
fd:24:12:6d:a2:3d:96:67:b1:6e:91:5f:5b:d7:5d:
12:b0:b7:03:d6:78:9c:b2:bc:10:ef:3c:01:97:4c:
ef:50:29:e3:e3:a0:10:2e:15:17:1a:a2:3a:c0:d8:
dd:e4:cf:4b:59:51:5d:1c:96:ba:81:46:da:b9:dd:
bc:cd:7c:b9:db:e4:a3:b7:a7:65:f5:cd:26:cb:71:
e5:f2:28:5d:26:0a:f0:a2:55:8d:d1:de:93:7d:fe:
6c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D0:F4:DA:FA:E4:0C:F0:88:18:8F:13:27:D6:EC:63:71:16:15:9D
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/99D02vrkDPCIGI8TJ9bsY3EWFZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.174.71.0/24
Signature Algorithm: sha256WithRSAEncryption
07:9d:76:78:37:99:8f:3c:07:55:67:31:be:52:2e:95:e1:f7:
b2:b7:16:3d:42:0b:90:06:7b:85:64:b1:78:ab:d4:c9:24:14:
2d:d3:87:69:f4:53:29:c5:04:71:6d:5f:13:7a:f8:0d:8e:35:
f8:15:8d:b3:36:dd:7b:9d:52:c7:0d:cc:7c:7c:b3:db:10:dd:
c7:c7:1a:ab:f3:05:84:23:b1:1b:83:77:0d:72:2b:97:ae:23:
03:fd:09:e5:3f:1a:e1:e0:2d:75:f0:95:53:1c:0e:cd:58:50:
f0:f9:d0:7b:98:2b:ea:13:1d:d8:f5:b6:9b:b0:a3:9a:ba:d7:
60:1f:64:fa:52:00:a4:3d:91:dc:73:71:4e:fa:f8:31:c7:eb:
ec:10:7a:9f:bc:df:ea:91:30:30:61:52:0c:80:e4:17:03:e4:
42:90:c5:ea:58:5e:be:ff:13:f6:a4:aa:9d:70:9f:6a:45:cf:
66:c8:53:7c:92:be:4d:3c:4b:45:9a:46:8f:b6:07:5a:55:65:
ae:05:41:57:4f:a7:db:3a:f0:ac:ef:2f:1f:7c:c5:e0:2d:49:
f8:17:0f:de:28:bd:3b:05:7f:54:2d:eb:fc:59:74:2b:99:fd:
f6:23:3c:58:b4:db:06:ad:67:dd:c9:57:78:11:78:5d:fe:74:
7d:17:cb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:28:02 2024 by rpki-client on console-fra.rpki-client.org