Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/04Mce7CDOkyUFwcLlQezGzZ85Rk.roa
File: 04Mce7CDOkyUFwcLlQezGzZ85Rk.roa (raw, json)
Hash identifier: 6otlvVTHwfGsopl7m+3C2X4QXSsxCo0L3y4OE1F3fFA=
Subject key identifier: D3:83:1C:7B:B0:83:3A:4C:94:17:07:0B:95:07:B3:1B:36:7C:E5:19
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01906D1E4D4864151E87D448FB3C2373ACA4
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/04Mce7CDOkyUFwcLlQezGzZ85Rk.roa
Signing time: Mon 01 Jul 2024 07:07:00 +0000
ROA not before: Mon 01 Jul 2024 07:07:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44559
IP address blocks: 62.60.184.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jul 2024 10:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:1e:4d:48:64:15:1e:87:d4:48:fb:3c:23:73:ac:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 1 07:07:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3831c7bb0833a4c9417070b9507b31b367ce519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:db:58:bb:12:2d:1e:7c:78:cf:08:7a:ac:
2f:50:bb:8a:b6:5a:06:56:4e:75:60:15:68:7f:78:
09:17:88:3d:ae:02:6d:43:0d:36:a9:2b:fa:73:78:
24:b5:7f:2c:6b:69:24:e4:92:02:b4:85:00:aa:7c:
06:28:d8:43:c0:dd:78:2a:72:51:85:08:e9:df:8d:
1f:3c:22:af:6f:a9:b9:1a:35:94:f0:b4:d9:cd:9c:
b9:42:cd:a6:b7:9c:00:42:3f:c9:66:f6:0d:1b:bd:
4e:c1:e7:b9:5c:fb:13:77:41:a8:38:5c:99:ca:a8:
3f:25:c7:8b:34:c2:9a:5e:dd:72:af:c7:18:39:99:
02:ba:11:52:69:11:36:f8:8f:96:8e:c0:73:b4:90:
4d:78:47:3c:b5:d1:ed:41:6d:ad:f7:bb:de:12:11:
de:cb:15:b6:36:77:67:a7:01:1a:52:a3:5a:1a:ee:
1c:58:c3:8c:97:d7:f0:a0:8e:69:12:c0:b5:b3:f3:
20:c7:cf:7a:49:be:6b:4e:4b:e2:ef:8f:3c:d9:83:
84:7d:75:8d:ba:22:a7:59:74:2c:3c:89:9c:85:21:
0c:c4:37:5d:6c:74:16:24:0b:6c:af:2b:9e:80:9f:
b3:78:e0:85:3d:85:f5:40:ba:2a:c8:13:3c:28:81:
e4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:83:1C:7B:B0:83:3A:4C:94:17:07:0B:95:07:B3:1B:36:7C:E5:19
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/04Mce7CDOkyUFwcLlQezGzZ85Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.184.0/22
62.60.192.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:3b:b2:8d:a2:e2:99:04:ea:87:4e:9b:26:58:25:61:2d:c5:
2d:ef:2d:71:e9:8a:ab:48:8f:75:c5:4b:3f:a7:c5:2b:e0:c2:
9a:f6:ae:b8:30:8c:7c:64:c3:9a:61:85:84:5e:c6:fc:fb:16:
2c:fa:37:a0:f7:b0:dc:a4:ff:0c:d6:2d:ec:12:ee:fb:de:77:
4e:91:ef:18:33:85:5f:38:ee:38:8a:52:42:3a:50:38:1c:af:
3f:f3:8a:06:5e:f2:24:78:e4:85:e7:7d:4c:e4:6b:de:d1:61:
05:b4:39:a3:7a:42:34:cf:21:5b:e1:7b:1d:e9:f6:f4:23:31:
e5:a2:e8:d3:80:9a:46:89:5e:3f:58:be:ac:ba:35:07:af:9a:
21:05:b3:4b:a5:a3:2d:5b:2a:9b:81:88:73:59:39:7a:96:29:
86:a1:6c:94:27:7e:10:de:b5:df:50:62:f9:b8:06:4e:52:e8:
4f:ac:0c:02:89:7e:fa:c8:0d:61:11:9e:e9:23:1a:1d:36:32:
fa:55:22:a1:64:45:07:61:71:d0:c9:62:a3:b1:20:5e:3c:54:
d8:03:8e:35:f0:de:9e:c5:97:65:62:63:07:ca:42:42:08:1f:
3d:91:77:e2:8c:3c:6f:94:67:97:0c:c3:22:41:e7:03:4b:0b:
05:11:5e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 12:13:11 2024 by rpki-client on console-ams.rpki-client.org