Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1XN74K-ZeUp8AXXOv7NJ83gDCw0.roa
File: 1XN74K-ZeUp8AXXOv7NJ83gDCw0.roa (raw, json)
Hash identifier: f7RkglgTZzDg13NGPDM4adyfDh2CAXFR8bc9y9mgf7A=
Subject key identifier: D5:73:7B:E0:AF:99:79:4A:7C:01:75:CE:BF:B3:49:F3:78:03:0B:0D
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0191DFC8DDB21CDCC449A707DE670D9A2C34
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1XN74K-ZeUp8AXXOv7NJ83gDCw0.roa
Signing time: Wed 11 Sep 2024 06:32:48 +0000
ROA not before: Wed 11 Sep 2024 06:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.240.0/22 maxlen: 24
213.176.74.0/23 maxlen: 24
213.176.92.0/22 maxlen: 24
213.176.112.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 06:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:df:c8:dd:b2:1c:dc:c4:49:a7:07:de:67:0d:9a:2c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 11 06:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5737be0af99794a7c0175cebfb349f378030b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:03:56:fd:27:99:8c:a9:41:92:3a:df:59:83:
6c:53:3b:21:45:9b:66:65:12:8c:30:6f:77:88:2c:
0f:8e:aa:ee:cc:ea:b7:11:a3:a7:09:e3:ec:a4:91:
99:b7:0b:db:e3:f5:51:df:e5:41:9d:10:28:6e:6b:
aa:01:5d:cd:46:02:6d:b8:86:72:0c:90:db:2e:85:
f1:ae:24:7f:c5:7b:21:bd:23:65:54:a3:7a:a3:04:
37:dc:b6:88:ae:fe:5b:05:fd:6b:2b:09:fe:30:74:
ea:31:0d:58:5b:dd:34:4d:ea:a5:d4:05:9f:2f:2c:
09:72:52:ef:e6:45:09:36:1e:f4:ad:24:e9:49:43:
d3:d5:f9:ce:19:3c:0a:5d:21:c9:5c:d2:1c:04:86:
22:23:e3:9f:65:2f:c5:fc:85:d8:fd:87:b5:26:64:
e6:91:d5:78:27:df:73:9e:5c:68:6e:8f:ef:4a:27:
98:d3:a5:8d:9c:67:d7:e9:14:a0:6f:70:55:2f:75:
c9:0b:ea:bf:6d:aa:1c:a4:8f:9e:9e:48:75:47:3f:
28:58:d9:4a:fc:42:21:5e:33:ef:6e:70:e9:9f:5e:
f4:b1:7f:2a:a3:d2:26:32:98:6d:ee:c4:90:3c:f2:
1c:f4:11:bf:79:80:7c:7e:09:43:a3:69:86:2a:3a:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:73:7B:E0:AF:99:79:4A:7C:01:75:CE:BF:B3:49:F3:78:03:0B:0D
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1XN74K-ZeUp8AXXOv7NJ83gDCw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.240.0/22
213.176.74.0/23
213.176.92.0/22
213.176.112.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:d8:76:bd:a6:bc:31:f5:15:ed:dc:f8:c3:8c:e3:5b:4e:19:
71:cf:62:81:fe:78:00:f1:45:0a:1f:ca:d1:29:8e:cb:d4:cc:
79:04:5f:58:1d:70:f7:73:ae:c8:6c:bf:41:3f:93:1d:72:4f:
4c:bc:5c:d5:b8:6c:a3:ff:57:e5:1e:45:97:27:c1:d2:71:fc:
01:4a:3b:45:cf:3a:7b:07:98:53:bf:19:0b:db:85:f5:2c:ea:
0e:7d:cb:82:68:72:bb:8d:d2:61:d1:c9:f0:fb:b4:1c:9d:78:
ed:ee:59:ed:f7:e2:f8:ee:91:f3:45:bd:87:15:a6:25:93:aa:
e8:df:ee:1e:e2:44:94:77:7f:ff:b1:88:5a:39:1d:7b:84:87:
e2:6b:47:a6:eb:ea:e4:98:7b:3a:ad:55:e7:25:4a:35:c4:89:
6b:2e:ba:02:73:d6:d0:d1:ca:bf:c2:a5:2b:5f:e4:f5:e8:86:
30:2c:61:81:b2:84:af:24:45:2e:19:3f:61:ef:44:37:d1:31:
6c:ca:06:b0:c0:ca:89:20:31:b7:b1:f7:54:c2:aa:b0:4f:ce:
1c:57:81:f0:7f:25:ac:6a:93:a9:4c:71:8d:9b:46:89:98:83:
52:29:fa:ad:18:ad:7f:6f:23:33:61:02:99:1b:b0:a9:f4:f3:
56:ff:91:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 07:51:12 2024 by rpki-client on console-ams.rpki-client.org