Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/e7gm69ITFOAHhmOQd7sKa7tzOwk.roa
File: e7gm69ITFOAHhmOQd7sKa7tzOwk.roa (raw, json)
Hash identifier: om8wgJ8DfHezRz/3KhQvRubRM5brub82JnyHLWCWtDA=
Subject key identifier: 7B:B8:26:EB:D2:13:14:E0:07:86:63:90:77:BB:0A:6B:BB:73:3B:09
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 01869C23037B4BCCFF8400CFD8DA8F0372EE
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/e7gm69ITFOAHhmOQd7sKa7tzOwk.roa
Signing time: Wed 01 Mar 2023 07:46:25 +0000
ROA not before: Wed 01 Mar 2023 07:46:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12713
IP address blocks: 62.75.58.0/24 maxlen: 24
62.75.54.0/24 maxlen: 24
62.75.52.0/24 maxlen: 24
62.75.64.0/24 maxlen: 24
62.75.62.0/24 maxlen: 24
62.75.3.0/24 maxlen: 24
62.75.1.0/24 maxlen: 24
62.75.2.0/24 maxlen: 24
62.75.10.0/24 maxlen: 24
62.75.8.0/24 maxlen: 24
62.75.15.0/24 maxlen: 24
62.75.16.0/23 maxlen: 23
62.75.13.0/24 maxlen: 24
62.75.24.0/23 maxlen: 23
62.75.22.0/24 maxlen: 24
62.75.23.0/24 maxlen: 24
62.75.20.0/24 maxlen: 24
62.75.21.0/24 maxlen: 24
62.75.18.0/23 maxlen: 23
62.75.107.0/24 maxlen: 24
62.75.108.0/24 maxlen: 24
2a00:1cb8:1::/48 maxlen: 48
2a00:1cb8:2:3::/64 maxlen: 64
2a00:1cb8:2:8::/64 maxlen: 64
2a00:1cb8:2:d::/64 maxlen: 64
2a00:1cb8:2:a::/64 maxlen: 64
2a00:1cb8:2::/48 maxlen: 48
2a00:1cb8:2:7::/64 maxlen: 64
2a00:1cb8:2:2::/64 maxlen: 64
2a00:1cb8:2:c::/64 maxlen: 64
2a00:1cb8:2000::/35 maxlen: 35
2a00:1cb8:2:6::/64 maxlen: 64
2a00:1cb8:2:b::/64 maxlen: 64
2a00:1cb8:2:1::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:23:03:7b:4b:cc:ff:84:00:cf:d8:da:8f:03:72:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Mar 1 07:46:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bb826ebd21314e00786639077bb0a6bbb733b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8c:59:cc:d2:71:de:dd:03:ed:af:b9:76:88:
8e:55:71:c3:13:0b:10:94:2c:14:8e:c5:cb:c3:6e:
71:e9:09:99:b8:ab:18:71:b8:e4:bd:14:97:dc:ec:
76:81:25:18:a5:cb:25:55:8b:5a:8e:a3:53:ed:db:
83:32:38:ba:8b:7c:57:f6:8b:84:2a:21:e7:08:1e:
d6:5f:ff:a2:06:9e:6a:92:fd:3f:14:d4:53:48:c6:
c5:72:f7:d2:f7:1e:f6:8f:d7:ca:7a:66:a3:35:cf:
90:c1:09:ef:43:05:22:77:f9:57:4b:7f:56:7d:ab:
3f:7c:d9:61:20:e9:c7:96:d1:4a:92:71:78:a7:fd:
1d:87:0e:a1:8d:0f:bc:8d:12:54:25:98:8a:71:db:
00:33:ce:f1:a0:1c:68:99:41:2b:9d:4c:e0:db:95:
f1:bd:fe:95:70:d6:45:0f:d0:f8:f2:49:fc:36:b0:
b5:d6:76:36:2c:15:b7:42:33:84:d6:fa:79:ba:18:
c2:ba:23:8d:06:8a:7d:c5:08:6b:ef:e4:34:c9:a9:
ed:7e:57:d4:3b:a3:9d:46:45:f1:68:1e:83:7a:2a:
71:43:60:85:7d:d2:32:95:e1:8e:ee:05:1e:21:22:
34:e4:f1:a1:d9:84:c7:3f:1f:38:c4:51:af:28:b3:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B8:26:EB:D2:13:14:E0:07:86:63:90:77:BB:0A:6B:BB:73:3B:09
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/e7gm69ITFOAHhmOQd7sKa7tzOwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.75.1.0-62.75.3.255
62.75.8.0/24
62.75.10.0/24
62.75.13.0/24
62.75.15.0-62.75.25.255
62.75.52.0/24
62.75.54.0/24
62.75.58.0/24
62.75.62.0/24
62.75.64.0/24
62.75.107.0-62.75.108.255
IPv6:
2a00:1cb8:1::-2a00:1cb8:2:ffff:ffff:ffff:ffff:ffff
2a00:1cb8:2000::/35
Signature Algorithm: sha256WithRSAEncryption
13:25:62:a8:08:10:0b:a0:cd:14:1b:d5:60:6e:79:93:48:52:
f6:c7:8a:28:95:17:e7:e3:a1:5b:2e:3d:44:e5:9e:00:70:92:
93:c6:c5:4c:4d:0e:96:e0:0d:13:47:f3:5b:95:ae:ce:7b:c5:
9c:96:ac:a2:0c:52:0e:f3:19:66:8d:e8:a6:14:43:7d:04:98:
cf:f9:45:de:f1:fc:02:c3:f4:f2:3a:8d:75:b7:8c:e1:ae:7a:
6a:e0:58:f3:6f:49:c7:13:ea:ac:8b:ad:22:ef:55:f0:e7:f5:
f5:b3:fa:3b:12:13:89:90:29:f1:58:68:cd:99:b4:3a:7f:74:
cb:c9:da:4d:2c:38:e8:61:27:5f:cb:16:f9:6a:77:5b:2a:f4:
3c:ef:b7:e8:de:89:0d:99:6d:67:60:06:9a:0c:22:af:9b:7d:
80:a1:18:4f:ba:c5:69:06:6c:08:ec:86:84:d1:dc:48:38:10:
e8:ce:1b:88:63:62:06:e1:7f:1d:69:f3:4c:f8:b9:98:58:f2:
d8:6d:09:8e:d9:00:7b:fe:9e:b1:f2:de:43:dc:40:d4:27:50:
54:36:2b:05:01:74:1e:aa:1b:b9:fa:4c:9b:3b:37:10:10:3c:
36:55:c4:d1:cd:bc:84:49:8d:a2:d9:17:16:96:03:c1:a3:d8:
90:c0:c3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:11:02 2024 by rpki-client on console.sobornost.net