Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-R1kD4kQlwnZ_rh8rwGLaq_asaE.roa
File: 1-R1kD4kQlwnZ_rh8rwGLaq_asaE.roa (raw, json)
Hash identifier: faNyM9lxEEe2nlOds0ws1Co/OxiXkePM3jxmiHF6lgc=
Subject key identifier: F9:1D:64:0F:89:10:97:09:D9:FE:B8:7C:AF:01:8B:6A:AF:DA:B1:A1
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018FD289F5DB33B18C024B1CB7A573BFE358
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-R1kD4kQlwnZ_rh8rwGLaq_asaE.roa
Signing time: Sat 01 Jun 2024 06:43:27 +0000
ROA not before: Sat 01 Jun 2024 06:43:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 62.60.152.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.216.0/22 maxlen: 24
62.60.224.0/19 maxlen: 24
213.176.64.0/22 maxlen: 24
213.176.72.0/22 maxlen: 24
213.176.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jun 2024 06:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d2:89:f5:db:33:b1:8c:02:4b:1c:b7:a5:73:bf:e3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 1 06:43:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f91d640f89109709d9feb87caf018b6aafdab1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:66:8e:7b:4b:86:46:ca:77:e4:a6:83:5a:
8b:eb:d3:ed:9e:4c:a9:3a:f7:d6:b5:73:fa:c0:4c:
f0:9a:9c:0e:02:18:1b:19:b1:9d:d5:9f:aa:e2:a9:
67:e2:1e:49:30:5e:65:d0:77:6b:d2:e2:89:25:39:
1a:78:2f:25:54:86:65:4d:80:f2:4c:c3:77:d7:59:
23:3e:5b:c5:25:19:1b:aa:07:36:5f:81:96:1e:38:
f1:46:49:3b:d1:88:a6:33:87:61:b8:2c:44:11:bb:
85:fc:f3:c0:6b:26:cb:0c:85:f4:4e:80:f3:0a:7a:
59:23:09:6d:ae:8e:68:4c:7e:65:50:d8:46:39:32:
b5:9a:15:07:9d:80:ba:c4:b3:e9:15:c8:b0:1b:44:
2c:15:03:55:75:0a:af:32:79:06:72:a6:76:80:24:
6c:78:a8:29:64:5f:76:90:7e:1e:28:1a:33:a9:a1:
5b:7f:9b:6a:07:98:8e:6a:0a:29:18:23:7f:c4:58:
33:e6:24:22:d1:de:7c:f7:ce:c0:db:1b:7d:31:a3:
88:6e:e6:bd:f2:89:33:f1:ec:34:5a:54:04:ea:eb:
28:8c:04:07:47:e8:a8:a8:77:65:2d:be:9e:b2:df:
dc:a5:38:8b:49:a9:96:f9:b7:0a:aa:5b:d3:1b:65:
d4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1D:64:0F:89:10:97:09:D9:FE:B8:7C:AF:01:8B:6A:AF:DA:B1:A1
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-R1kD4kQlwnZ_rh8rwGLaq_asaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.152.0/22
62.60.192.0/22
62.60.216.0/22
62.60.224.0/19
213.176.64.0/22
213.176.72.0/22
213.176.92.0/22
Signature Algorithm: sha256WithRSAEncryption
38:39:88:45:e5:a0:e8:58:3f:f5:0a:0d:1f:a8:58:9b:4c:70:
d0:60:76:8a:4c:46:30:c4:33:50:8b:2a:5d:e1:ea:1a:a3:46:
a0:1f:d7:4e:04:0f:74:85:0f:4c:a0:ed:ea:7f:b3:c1:08:fd:
0d:84:e9:67:5f:c3:2d:71:9a:83:2a:db:47:70:2d:76:99:55:
cf:92:d9:7b:4f:42:29:c6:f5:d4:b1:75:35:70:d4:51:76:3c:
fa:2c:4c:5c:77:eb:33:01:03:1b:a8:8a:e1:3c:e4:d8:7c:61:
4c:67:a5:80:52:fb:10:f4:84:ac:0c:34:33:db:56:93:26:5e:
5c:7f:b9:fd:b4:f3:91:32:14:0b:ca:f3:63:72:be:57:b9:ce:
1d:e4:13:bf:c7:eb:b5:97:f9:61:d5:2d:8e:f2:48:44:3d:7d:
e2:0c:55:98:b8:41:b0:ac:25:1e:40:43:2f:82:56:86:93:8b:
11:dc:a4:a4:7e:81:03:ec:bc:21:38:27:66:78:a0:96:b2:cd:
98:c0:be:77:7a:d7:ae:ce:0a:f4:10:e5:3b:cf:07:df:46:94:
c1:7f:85:7f:d4:41:94:6e:2f:5f:bb:d1:a7:a8:69:0a:9b:cb:
02:43:00:35:48:f3:55:be:4e:32:fa:33:33:b1:3c:ce:9c:af:
31:5d:63:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:19 2025 by rpki-client