Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/226NjDlTc6AH1_eQYG5gCVMqqLg.roa
File: 226NjDlTc6AH1_eQYG5gCVMqqLg.roa (raw, json)
Hash identifier: 0q0zvJkcVM5Pe9SeonyanT0DF7ctUi7IbNzEKLLLFbw=
Subject key identifier: DB:6E:8D:8C:39:53:73:A0:07:D7:F7:90:60:6E:60:09:53:2A:A8:B8
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0188D3965426E27A17AE140794E4EA350A6D
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/226NjDlTc6AH1_eQYG5gCVMqqLg.roa
Signing time: Mon 19 Jun 2023 12:17:04 +0000
ROA not before: Mon 19 Jun 2023 12:17:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59441
IP address blocks: 62.60.128.0/21 maxlen: 24
62.60.164.0/22 maxlen: 24
213.176.28.0/22 maxlen: 24
62.60.200.0/22 maxlen: 24
62.60.204.0/22 maxlen: 24
62.60.208.0/22 maxlen: 24
62.60.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:96:54:26:e2:7a:17:ae:14:07:94:e4:ea:35:0a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 19 12:17:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db6e8d8c395373a007d7f790606e6009532aa8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1d:d8:13:e3:53:a1:51:5f:16:83:34:4d:80:
86:02:a5:01:7b:f2:a7:95:56:50:81:27:44:e9:e0:
aa:3a:fc:d4:81:89:b0:ad:fb:47:56:04:c0:d5:57:
cd:61:02:e2:e4:fa:89:86:b8:ad:33:e5:24:fd:7f:
b1:7d:da:ff:d6:c6:87:43:d5:9c:fb:5e:ec:28:ee:
bd:cb:f8:ec:93:83:73:2b:a6:28:73:84:5f:12:ba:
5f:b2:f9:23:df:ee:77:cd:43:7c:36:c8:c8:06:4c:
00:c1:81:ba:ed:58:54:40:f3:c1:60:69:b8:89:7b:
02:f7:b0:17:d3:a4:33:f8:e8:41:a2:06:72:bc:58:
7c:a9:72:d8:77:1a:9e:d4:af:aa:07:53:5d:81:8e:
5e:aa:4f:dd:9e:af:97:91:4e:da:ac:52:fd:f0:5a:
74:f1:68:26:60:e8:1f:2d:34:27:8e:ab:d8:70:69:
b0:99:2e:2c:0b:f5:78:96:60:50:f8:01:22:3d:c1:
2f:13:cd:12:fb:bc:7b:e1:ff:a3:bd:f3:03:07:58:
8b:d8:11:36:75:53:91:19:77:98:be:2f:5e:02:fe:
25:56:54:0a:98:35:7f:73:d1:34:35:f9:b7:23:e9:
ce:99:ea:e1:31:b5:f2:99:43:14:74:fa:cc:bf:fc:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6E:8D:8C:39:53:73:A0:07:D7:F7:90:60:6E:60:09:53:2A:A8:B8
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/226NjDlTc6AH1_eQYG5gCVMqqLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0/21
62.60.164.0/22
62.60.200.0-62.60.215.255
213.176.28.0/22
Signature Algorithm: sha256WithRSAEncryption
73:28:0b:35:e7:c3:3a:1d:ba:94:93:0c:84:28:2f:2e:68:ab:
88:aa:a2:04:01:d3:40:fe:de:a2:6b:18:82:b1:cc:28:c3:f9:
7b:7f:1a:a8:76:36:2d:be:f9:9b:ce:23:f3:1b:e8:ef:2b:e9:
10:04:e1:43:8a:c2:6d:81:dd:9f:29:13:98:37:39:05:57:0d:
39:49:c4:5d:72:e1:57:e3:c8:32:2d:f5:bf:fa:86:fb:f6:1e:
ab:e6:af:6e:88:ea:41:30:0f:47:30:9b:09:19:e2:e1:9d:ca:
7b:af:6e:ff:13:93:1e:db:08:98:31:2e:7b:b1:e3:d8:dd:34:
cc:c6:58:21:02:20:a2:06:69:b0:08:52:94:1e:40:d2:fa:ae:
7c:23:17:85:10:f9:8a:e7:ef:4c:01:c5:11:fa:14:50:84:67:
30:07:14:37:ad:78:49:4d:0b:e1:e4:b8:94:92:79:cf:8c:c4:
95:9d:a0:29:05:6b:45:2e:5f:79:cf:61:70:41:49:21:96:01:
f2:7d:95:4c:b2:a4:e7:62:23:ee:47:7b:b4:77:30:ea:63:e3:
8f:cc:37:0d:bd:b7:06:f2:eb:52:22:b8:e0:a7:38:2d:bb:ca:
44:46:3a:14:fb:4b:ed:74:43:fc:4d:af:c8:64:24:33:32:cf:
eb:60:ec:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org