Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/p-X9MuFYltcb9e6a5YUCI453REA.roa
File: p-X9MuFYltcb9e6a5YUCI453REA.roa (raw, json)
Hash identifier: r2IG7aQ3EvULV3cSvmIDQZu2JyV6cJaOwdDSCix/7I4=
Subject key identifier: A7:E5:FD:32:E1:58:96:D7:1B:F5:EE:9A:E5:85:02:23:8E:77:44:40
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018C8882C3E3428D17680ADD91FE8A5FA9D3
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/p-X9MuFYltcb9e6a5YUCI453REA.roa
Signing time: Wed 20 Dec 2023 18:35:20 +0000
ROA not before: Wed 20 Dec 2023 18:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 62.112.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:88:82:c3:e3:42:8d:17:68:0a:dd:91:fe:8a:5f:a9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Dec 20 18:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7e5fd32e15896d71bf5ee9ae58502238e774440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:3b:39:3a:bf:9f:89:a3:68:79:ae:23:9b:
d1:6f:84:5a:db:38:55:db:0b:8f:1a:8a:fd:f0:e1:
38:b5:25:f2:23:6f:e0:51:c6:8e:ed:c1:0b:20:3a:
cf:b6:c0:94:b2:a6:5b:d9:e9:df:9e:58:d2:10:f3:
f3:eb:ad:83:a7:73:8a:55:86:7f:7e:0c:0f:79:a4:
9a:66:ac:82:70:3d:ba:60:f6:bf:ec:56:5e:11:9d:
93:da:cf:28:32:b1:6a:95:ff:c0:01:ba:79:52:6b:
37:91:9d:4f:d2:0b:09:29:fd:6a:ca:e9:25:18:65:
70:ad:66:57:ba:b6:93:46:fc:c1:ac:ea:99:28:60:
d5:95:5e:ac:43:d1:b1:4a:66:78:12:0c:0c:c5:e6:
41:75:34:57:3a:24:b1:17:45:3c:6b:05:f0:99:6a:
2c:cd:9e:0b:08:6a:e7:e3:9c:9d:62:d7:9b:12:04:
0c:de:14:4b:d3:1a:81:68:36:90:ca:89:79:f8:f3:
74:04:39:41:bb:52:08:36:6e:41:56:f5:45:2f:2b:
21:5d:aa:c2:e5:cc:17:57:af:ab:51:24:a7:52:11:
f8:b7:fd:19:4c:3f:94:56:85:80:84:df:d0:3e:96:
6c:5e:66:7d:31:6c:a5:d4:fb:49:40:1a:f9:a1:13:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E5:FD:32:E1:58:96:D7:1B:F5:EE:9A:E5:85:02:23:8E:77:44:40
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/p-X9MuFYltcb9e6a5YUCI453REA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.30.0/24
Signature Algorithm: sha256WithRSAEncryption
69:8f:5e:e8:22:11:c9:0a:e5:7d:84:77:b2:c0:d7:26:e8:a5:
22:69:ad:bc:dd:fe:1c:00:83:25:a6:19:a9:97:6b:76:78:51:
ea:f2:0b:75:96:76:37:48:38:27:fc:5a:19:2c:ac:8b:40:29:
6f:16:8c:31:f2:11:d0:ab:79:13:26:47:bb:3a:78:39:64:16:
54:cd:b6:36:0c:e3:ab:c8:92:f5:00:d3:04:87:26:fb:9e:58:
c3:04:a2:7f:75:28:02:92:e0:c1:b1:0a:48:11:df:a0:19:63:
d7:f1:4f:1d:e9:28:bf:5e:8e:56:fb:8e:f2:73:21:2e:cb:15:
cf:e2:30:84:0e:b4:5a:88:7e:de:35:ef:93:f4:25:b5:6c:1f:
bf:b2:9d:bf:a5:d6:d5:ee:b2:23:98:8b:3d:46:b9:ca:29:ca:
5c:57:91:30:2e:32:3f:40:e7:6e:4a:8a:39:8f:8d:a5:7b:3e:
15:b6:8e:82:09:31:1a:e3:08:39:9b:12:ae:35:9b:9b:d1:d9:
a6:a2:1f:c5:d1:51:57:46:96:2c:fb:2a:3b:e9:06:3e:1f:bd:
31:57:78:da:f1:0c:c0:3f:eb:95:6a:e0:60:d3:20:da:79:17:
e6:ff:fb:c0:4c:69:e4:bf:98:83:c1:83:8e:13:77:07:2a:65:
6e:01:91:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:45 2024 by rpki-client on console-fra.rpki-client.org