Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/a_VUgMEZaYFjPYavaW3EM97bcSA.roa
File: a_VUgMEZaYFjPYavaW3EM97bcSA.roa (raw, json)
Hash identifier: ala3TrwfgR3XW4TkrgeHLm4JL6Oqj7s5vI2AAQv68dk=
Subject key identifier: 6B:F5:54:80:C1:19:69:81:63:3D:86:AF:69:6D:C4:33:DE:DB:71:20
Certificate issuer: /CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Certificate serial: 01856BDC7487BBE070478AD29D24C8DF3EBA
Authority key identifier: 92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/a_VUgMEZaYFjPYavaW3EM97bcSA.roa
Signing time: Sun 01 Jan 2023 05:44:47 +0000
ROA not before: Sun 01 Jan 2023 05:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15541
IP address blocks: 62.121.128.0/24 maxlen: 24
62.121.130.0/24 maxlen: 24
62.121.129.0/24 maxlen: 24
62.121.131.0/24 maxlen: 24
62.121.132.0/24 maxlen: 24
62.121.135.0/24 maxlen: 24
62.121.136.0/24 maxlen: 24
62.121.138.0/24 maxlen: 24
62.121.133.0/24 maxlen: 24
62.121.142.0/24 maxlen: 24
62.121.141.0/24 maxlen: 24
62.121.143.0/24 maxlen: 24
62.121.145.0/24 maxlen: 24
62.121.144.0/24 maxlen: 24
62.121.148.0/24 maxlen: 24
62.121.150.0/24 maxlen: 24
62.121.152.0/24 maxlen: 24
62.121.146.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:74:87:bb:e0:70:47:8a:d2:9d:24:c8:df:3e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Validity
Not Before: Jan 1 05:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bf55480c1196981633d86af696dc433dedb7120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:8a:54:5a:44:f5:93:a4:e9:7a:09:54:19:
dc:e9:5b:41:16:8e:55:2b:4d:a4:7d:35:8b:8b:87:
2b:40:ba:05:fe:47:f0:3f:e2:86:db:ad:70:88:bf:
5b:7d:ec:67:2e:14:cd:a8:c1:ea:53:6b:e8:91:5f:
28:a6:03:32:9f:9a:7e:54:e7:ea:e6:27:1e:d2:63:
d0:36:a0:71:eb:95:d7:b4:95:82:e6:c3:2a:27:f9:
e2:0f:69:b4:4e:e9:86:a4:0f:b7:46:87:2c:ff:45:
5a:54:cb:0f:6c:5e:c5:53:12:d4:21:5c:ba:e4:ab:
18:d9:eb:c3:42:8b:1e:08:ce:19:83:f1:90:4e:05:
88:ec:33:fd:37:3f:41:26:c1:e2:8d:0e:96:84:fc:
d1:e5:64:ce:b5:24:a6:85:93:e0:38:41:4f:20:45:
28:72:80:94:86:70:84:1e:06:96:70:f9:bb:a7:29:
8c:7b:cb:61:fa:94:8c:78:47:fa:b4:f2:f1:da:45:
90:d1:1e:1f:6e:c9:69:39:c6:5f:bb:c4:72:8f:49:
fb:8b:f1:ad:80:31:98:00:ba:6b:dd:27:11:23:06:
a6:9f:44:57:ef:45:d3:d6:db:54:f0:45:02:45:2f:
31:c1:0b:ee:6e:ac:0e:17:e4:39:bf:ba:b3:19:e2:
69:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F5:54:80:C1:19:69:81:63:3D:86:AF:69:6D:C4:33:DE:DB:71:20
X509v3 Authority Key Identifier:
keyid:92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/a_VUgMEZaYFjPYavaW3EM97bcSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.121.128.0-62.121.133.255
62.121.135.0-62.121.136.255
62.121.138.0/24
62.121.141.0-62.121.146.255
62.121.148.0/24
62.121.150.0/24
62.121.152.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f0:1f:ac:d9:56:38:ad:a8:9e:93:ff:38:ab:04:ed:b8:f2:
52:6b:ed:cc:ff:76:ef:cd:ab:8b:70:18:f9:59:13:4e:fe:33:
79:71:db:a8:c0:e6:e9:f7:24:b8:2d:28:f9:4d:04:4f:42:38:
eb:09:31:05:0d:47:ef:4e:30:f9:dd:27:b8:4d:0d:8d:42:ff:
ac:aa:80:2b:b2:51:b5:fe:aa:75:6a:d7:98:9f:6b:da:4b:12:
40:cd:fb:24:c4:b9:68:4a:84:6f:12:66:96:5c:51:b9:32:cf:
91:46:32:59:96:2d:f4:f2:ec:7e:d9:65:8a:07:87:e5:c1:fa:
d2:07:4d:10:38:db:6e:9c:57:5d:9e:8a:51:36:85:34:91:38:
9d:bb:42:bc:36:0c:8c:79:c2:00:8b:c4:ac:9b:50:d7:91:d9:
d0:bf:32:4e:9d:f0:53:d4:a3:23:c9:57:e9:66:b6:25:f0:c3:
34:31:73:9c:88:c4:75:a7:19:8c:f2:5a:43:cc:55:e7:e0:ba:
bf:cb:2e:74:f7:77:4b:64:0b:8b:7c:c2:a5:59:42:f7:fa:51:
b4:60:18:30:d6:44:4d:e0:2c:1f:e5:59:80:57:3c:d2:34:7d:
e2:18:eb:77:65:f4:5f:f1:04:02:51:ae:cd:38:0f:9b:c5:ed:
0b:e8:59:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:09 2024 by rpki-client on console.sobornost.net