Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/P1xVmi9cD_IsGOsiSHgGk_ihUBk.roa
File: P1xVmi9cD_IsGOsiSHgGk_ihUBk.roa (raw, json)
Hash identifier: H4iXoUD1r3P3i/VFamx9EFEMgOVmG68Iw2GKJQFrF0Y=
Subject key identifier: 3F:5C:55:9A:2F:5C:0F:F2:2C:18:EB:22:48:78:06:93:F8:A1:50:19
Certificate issuer: /CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Certificate serial: 01856FD4F47A8D8ED0EDF30E862851DDF6FF
Authority key identifier: E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/P1xVmi9cD_IsGOsiSHgGk_ihUBk.roa
Signing time: Mon 02 Jan 2023 00:15:05 +0000
ROA not before: Mon 02 Jan 2023 00:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20546
IP address blocks: 62.201.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:f4:7a:8d:8e:d0:ed:f3:0e:86:28:51:dd:f6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Validity
Not Before: Jan 2 00:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f5c559a2f5c0ff22c18eb2248780693f8a15019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b5:c2:34:f9:f0:22:b1:00:06:b8:74:ec:ce:
c0:83:6d:f3:5d:5f:92:63:39:d1:6c:a0:7e:c6:02:
37:8e:8e:59:42:fa:86:2a:03:f2:59:a7:73:d3:68:
d7:56:b4:26:ed:4b:7e:ab:b0:eb:38:39:70:7f:57:
e8:cb:ec:38:e8:7d:fd:88:34:10:b6:a0:79:c4:d5:
93:7a:24:58:6e:a5:23:81:71:d1:05:19:8d:78:bf:
80:cd:f5:e2:d6:eb:b1:91:bf:e5:e2:16:3e:fc:36:
f3:e2:1f:20:c1:ab:1b:87:09:eb:c1:4b:81:8d:c9:
3e:b8:b0:bd:87:01:94:46:aa:6d:40:08:53:06:92:
a5:56:e2:59:db:48:0d:80:8c:ed:51:6d:46:6d:a4:
be:2c:da:0b:bc:8d:76:ce:37:0f:27:dc:f3:bf:87:
67:60:ed:14:af:52:e4:6f:5f:d9:9b:2d:f9:7c:90:
e2:e5:d7:ef:89:3d:6a:e6:b0:26:c5:b9:77:dc:31:
f6:e9:4d:4f:eb:b9:91:7a:03:a8:02:b1:00:20:e3:
97:29:01:47:e9:76:33:54:dd:4a:12:65:b1:f3:7f:
9e:4d:5e:6a:01:d0:99:1a:5d:5f:a3:3b:d7:fd:07:
3c:eb:1f:ae:d1:09:0e:a1:b8:ba:7f:fb:64:c5:a9:
f2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5C:55:9A:2F:5C:0F:F2:2C:18:EB:22:48:78:06:93:F8:A1:50:19
X509v3 Authority Key Identifier:
keyid:E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/P1xVmi9cD_IsGOsiSHgGk_ihUBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.172.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:12:80:ae:d7:7d:65:d0:bd:e9:b8:f8:1d:42:15:44:5b:84:
cb:05:24:51:2c:fd:36:53:d8:9a:51:6d:74:29:0c:d5:5d:c8:
14:a6:90:e8:ed:c4:df:14:30:96:5b:61:f5:1a:31:be:f9:be:
53:5e:8d:62:10:58:b5:50:80:90:c0:ac:d1:b7:be:a6:ee:91:
b4:3a:c4:6e:ad:18:c2:9f:2f:fa:c2:04:71:93:4a:80:d0:48:
5d:c4:c2:60:e8:a6:ca:76:e1:8d:c2:4f:66:59:f9:fb:bc:58:
e6:c0:2d:a1:85:a8:17:76:85:80:e5:99:55:e0:da:3d:44:b3:
41:98:df:03:a4:16:25:cb:78:24:b2:70:40:14:bf:3f:ec:40:
84:7d:6a:62:56:69:35:f0:84:2b:02:0f:cb:2e:b6:9e:06:78:
1a:57:2d:5a:30:11:27:6d:9b:16:21:d3:de:1a:02:bc:c1:01:
17:71:dc:50:fc:3e:eb:ef:fd:a0:3d:cd:61:b3:bc:74:28:39:
f2:21:48:80:77:b1:99:46:6d:fb:32:d7:3b:14:42:b7:da:26:
55:f3:8b:ab:b2:69:ae:0a:3e:79:69:77:ad:23:8f:51:e0:47:
6c:e2:c7:25:60:68:85:c3:5f:5a:16:a7:d7:c1:e3:f2:cc:82:
e1:1b:79:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:51 2024 by rpki-client on console-fra.rpki-client.org