Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/613b2a-8cae-47db-8df0-607cd7f22469/1/2fZTFjDP3F8ApU6M_UEne-Kc2p4.roa
File: 2fZTFjDP3F8ApU6M_UEne-Kc2p4.roa (raw, json)
Hash identifier: SHlr/xueimdWr2Gpgjmyrky5lDWLU1iRPgjpmKgbMbc=
Subject key identifier: D9:F6:53:16:30:CF:DC:5F:00:A5:4E:8C:FD:41:27:7B:E2:9C:DA:9E
Certificate issuer: /CN=2d6f1fd4ef454476d12410fdf61d4df8c3c7c21b
Certificate serial: 0185723A3C9F8D2BDA83730B1484B8A9176D
Authority key identifier: 2D:6F:1F:D4:EF:45:44:76:D1:24:10:FD:F6:1D:4D:F8:C3:C7:C2:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LW8f1O9FRHbRJBD99h1N-MPHwhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/613b2a-8cae-47db-8df0-607cd7f22469/1/2fZTFjDP3F8ApU6M_UEne-Kc2p4.roa
Signing time: Mon 02 Jan 2023 11:24:57 +0000
ROA not before: Mon 02 Jan 2023 11:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 62.68.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:3c:9f:8d:2b:da:83:73:0b:14:84:b8:a9:17:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d6f1fd4ef454476d12410fdf61d4df8c3c7c21b
Validity
Not Before: Jan 2 11:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9f6531630cfdc5f00a54e8cfd41277be29cda9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:e3:69:ba:a4:32:90:2b:a0:e4:85:81:01:
24:04:df:68:79:72:71:a4:c7:36:a0:1b:b6:86:d4:
f5:77:a0:5e:a1:fc:74:d2:fb:1c:b8:de:9f:db:d1:
6b:f1:7e:68:0c:8e:3d:dd:69:8d:6b:21:41:61:23:
7c:0e:95:08:6e:a2:f7:b5:29:e3:29:8a:28:c5:ee:
3e:37:87:45:8c:62:27:9f:64:52:60:6b:b0:21:2a:
cc:e7:77:69:51:34:4f:bf:f5:24:0f:0d:db:6d:74:
b5:64:82:21:87:54:5d:e6:0a:5b:21:ff:5c:f9:56:
05:24:a3:a7:64:eb:f7:e0:f6:ba:35:c0:63:b9:81:
6c:75:8b:61:51:1a:1f:26:3a:e1:42:97:8c:aa:0c:
da:13:6e:99:b2:fd:58:d3:17:33:2e:65:99:47:76:
20:a3:ec:fe:9f:b1:1c:21:ad:dc:ce:43:a6:e4:0a:
e2:2d:a6:6f:b7:39:4c:05:ae:b9:5d:05:7a:a1:3b:
0c:f3:5c:ef:0c:d7:d3:18:e3:5f:67:63:0a:a7:30:
c6:d9:88:7c:fa:b3:b7:30:e1:00:ae:43:fa:ab:d1:
f8:bd:11:b0:0b:41:26:46:b7:c4:35:a8:9d:eb:e9:
b9:b2:a0:d8:73:43:aa:e7:02:3a:69:3d:82:46:f7:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F6:53:16:30:CF:DC:5F:00:A5:4E:8C:FD:41:27:7B:E2:9C:DA:9E
X509v3 Authority Key Identifier:
keyid:2D:6F:1F:D4:EF:45:44:76:D1:24:10:FD:F6:1D:4D:F8:C3:C7:C2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LW8f1O9FRHbRJBD99h1N-MPHwhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/613b2a-8cae-47db-8df0-607cd7f22469/1/2fZTFjDP3F8ApU6M_UEne-Kc2p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/613b2a-8cae-47db-8df0-607cd7f22469/1/LW8f1O9FRHbRJBD99h1N-MPHwhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.71.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:88:49:e7:cb:80:bf:60:0b:dc:5b:4a:5f:b0:35:3c:be:ba:
fa:fc:17:83:ae:7c:f3:36:fa:c6:b3:5f:72:bb:23:0b:0e:38:
87:95:c5:7e:9f:06:25:1a:62:bb:8a:e1:71:56:33:72:2b:05:
2d:2c:be:2d:43:5c:c6:56:f5:bc:10:69:8f:24:f8:ad:0c:3d:
e0:bc:ea:8a:15:72:d0:dc:1a:86:03:f3:27:b8:9b:01:c6:60:
37:5d:e8:9b:b9:47:a4:a2:38:04:6e:71:42:fb:d6:12:c0:e6:
b5:3e:95:ef:89:3d:13:51:39:2c:d4:8f:5e:6c:9e:50:36:81:
e4:a3:1d:c8:1a:ad:45:2a:da:cb:ec:69:3d:2f:87:26:75:02:
ea:7b:b3:41:db:15:3d:f8:44:0f:2e:8f:95:da:8e:cf:e4:8a:
2a:6d:fb:54:5c:20:10:91:2d:5d:42:dc:0a:6c:6a:7d:96:a2:
6e:9f:1a:0a:72:97:5c:c7:92:eb:19:f3:b5:f3:9a:49:2e:75:
45:7c:de:bb:40:aa:2f:d4:5d:d6:c2:88:2e:bf:33:f9:1a:f5:
bd:f5:1b:2b:d4:ea:3e:47:a4:29:9b:37:29:8a:90:fa:37:d4:
b0:b1:1e:49:64:28:05:69:a1:4c:d5:fa:48:2f:72:0a:b6:64:
21:13:28:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:22 2024 by rpki-client on console.sobornost.net