Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-uT0k51F2SQLFzh-q7Ch4v9JkMk.roa
File: 1-uT0k51F2SQLFzh-q7Ch4v9JkMk.roa (raw, json)
Hash identifier: KqzvDFV30qlCgA8rxhfznD8cgFE56dG7gfRcfgSqd6w=
Subject key identifier: FA:E4:F4:93:9D:45:D9:24:0B:17:38:7E:AB:B0:A1:E2:FF:49:90:C9
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018B37C4805AA65FBFF45F0C3DA6BF156908
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-uT0k51F2SQLFzh-q7Ch4v9JkMk.roa
Signing time: Mon 16 Oct 2023 09:15:06 +0000
ROA not before: Mon 16 Oct 2023 09:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 62.60.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Nov 2023 19:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:c4:80:5a:a6:5f:bf:f4:5f:0c:3d:a6:bf:15:69:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 16 09:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fae4f4939d45d9240b17387eabb0a1e2ff4990c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:46:c6:b5:ec:5f:2a:9e:17:37:45:8e:85:72:
de:97:a3:32:31:cc:8c:7f:82:f2:97:52:b3:2c:1e:
8c:3e:02:7c:1f:93:a2:b0:3a:3c:6c:48:a2:0e:73:
05:03:66:dc:f0:2b:27:c5:a3:e5:94:1d:77:d1:10:
6d:3f:22:8a:3b:5e:b3:20:b2:99:0e:7e:4d:ce:42:
b5:b7:6d:c3:16:6e:14:bd:fa:d3:25:75:3a:2f:a5:
1a:57:e1:fe:bc:d3:a8:b0:9c:7a:79:f3:03:9a:a5:
59:e9:c9:7b:9c:5b:a4:46:3d:e0:6b:6c:e3:a8:ef:
05:92:ba:d9:61:9a:88:13:da:08:64:d8:7f:35:64:
bc:23:8c:be:7e:40:a0:b2:e5:c9:2b:dc:9c:7a:2d:
ee:dc:3d:7e:fe:d4:19:c1:30:ec:6a:9e:d8:80:58:
f2:c2:d4:4d:c0:a9:aa:52:27:e7:1d:26:7e:bb:de:
d0:e7:14:f0:74:fa:dd:99:3d:7d:d0:b7:07:77:9e:
18:45:cc:00:e5:b6:56:99:ec:bd:ac:f3:24:95:08:
6e:e8:03:ae:48:d5:b4:5a:92:b2:cf:3a:af:99:10:
02:45:a3:4d:c8:a2:59:54:ec:0c:10:c5:1c:e9:2b:
f9:cc:5f:81:85:87:76:95:ac:79:73:90:bd:8c:4b:
d9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E4:F4:93:9D:45:D9:24:0B:17:38:7E:AB:B0:A1:E2:FF:49:90:C9
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-uT0k51F2SQLFzh-q7Ch4v9JkMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.184.0/22
Signature Algorithm: sha256WithRSAEncryption
50:32:55:0a:ec:ba:41:67:e0:37:4c:01:25:c5:14:36:f3:ba:
40:e3:3d:28:e1:17:fa:ca:33:bd:74:ff:4f:d4:d8:f6:03:96:
64:79:5e:da:3f:54:d9:5c:1c:e2:85:9c:13:93:53:4d:54:63:
9f:91:d3:06:b4:83:ce:97:59:66:7d:ef:c7:cd:bd:36:ed:7c:
b2:bf:99:42:6e:4c:45:96:9e:93:57:96:63:07:40:3c:2c:79:
8a:b0:e2:82:66:98:91:95:9f:d7:73:90:f6:4d:89:28:91:34:
62:e0:4c:e2:c3:30:9c:8d:fc:d9:23:98:ec:b1:e1:27:a0:5b:
0b:17:e5:2c:3c:df:0a:5c:e1:47:21:12:16:20:93:87:03:6a:
ff:91:f7:73:4b:ac:ae:bb:24:55:8b:09:7d:67:17:90:0b:fe:
f4:ab:94:89:78:81:c6:0a:bf:c5:b1:85:eb:e2:4f:33:f1:dd:
61:18:cd:e6:5b:89:1e:94:d3:ea:69:f9:28:31:53:22:8e:04:
90:b3:62:b0:1d:f3:02:d6:59:29:5b:07:9b:8d:71:99:0d:6f:
41:6a:b5:2c:5e:23:d7:57:ec:f5:de:a1:01:d6:7c:a2:30:7c:
cf:55:ef:c5:8b:d4:a0:64:a9:3b:be:3d:e3:6b:fe:31:60:7f:
35:05:e6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:38 2024 by rpki-client on console-fra.rpki-client.org