Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3DKNXxNFNjruDWGXh58-sTzeWiA.roa
File: 3DKNXxNFNjruDWGXh58-sTzeWiA.roa (raw, json)
Hash identifier: fOnNJVpq1TJ3y1Tc0qMsMEAMoysc10CXjDwpXt9+zB4=
Subject key identifier: DC:32:8D:5F:13:45:36:3A:EE:0D:61:97:87:9F:3E:B1:3C:DE:5A:20
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01925B1A14D80D59A414FB26F889ECBEFE8B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3DKNXxNFNjruDWGXh58-sTzeWiA.roa
Signing time: Sat 05 Oct 2024 05:14:48 +0000
ROA not before: Sat 05 Oct 2024 05:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207388
IP address blocks: 62.60.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 08:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5b:1a:14:d8:0d:59:a4:14:fb:26:f8:89:ec:be:fe:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 5 05:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc328d5f1345363aee0d6197879f3eb13cde5a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:af:9d:1f:75:b9:be:0a:ac:fe:78:1f:36:
28:50:5b:2d:50:82:8b:47:02:b3:c2:5d:5d:59:ee:
e2:00:84:aa:1c:c1:a3:70:24:a3:5d:b2:5e:9b:9a:
dd:e5:c7:df:24:d8:5a:64:cf:07:b5:ae:45:99:45:
88:1a:ca:ed:83:06:4e:5b:64:05:14:49:8d:62:fd:
44:b1:92:e9:50:1b:4f:0a:24:94:2d:03:91:bb:7c:
18:1c:23:10:0b:d9:59:3b:61:e4:8d:b8:58:bc:b3:
5f:3a:34:8d:54:b3:92:f0:c1:99:38:0a:aa:5a:28:
18:ac:70:76:f6:b7:05:1c:80:0e:77:62:ac:29:c8:
a9:92:35:97:46:9e:22:a6:f8:46:32:6e:e9:61:ea:
bc:e0:19:40:6d:e7:6d:6d:48:5c:71:45:2b:f1:93:
e2:bc:18:eb:4b:41:00:d1:27:9e:34:6e:94:c1:66:
2b:7e:db:92:7d:a7:fc:7d:70:ed:79:a8:0b:aa:aa:
cf:46:8e:73:72:7d:de:16:a9:6e:e6:ca:cb:e8:48:
35:ec:d7:02:f4:59:b6:29:11:3c:50:ac:45:c5:fd:
72:25:56:ab:ff:3e:4c:8f:a5:82:79:66:60:5a:37:
ab:22:1d:ef:8d:88:d1:f3:87:e0:74:74:d3:15:ba:
ae:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:32:8D:5F:13:45:36:3A:EE:0D:61:97:87:9F:3E:B1:3C:DE:5A:20
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3DKNXxNFNjruDWGXh58-sTzeWiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:ff:c6:4a:37:24:3b:b0:71:b0:ec:4b:db:8f:9c:86:eb:f1:
a5:87:0f:66:2d:37:cc:03:dc:9d:d2:08:b9:36:11:e5:dc:1e:
e2:67:e8:87:a0:73:86:40:22:8d:15:9d:ce:63:d6:b2:c7:5c:
ee:90:f3:a6:da:57:60:41:8f:c8:37:4f:ec:6f:a4:cb:ee:b8:
7b:49:71:ad:94:52:d2:2a:cb:bc:c2:c1:6b:de:4e:9e:ec:0b:
b0:41:f8:25:3e:76:ef:21:67:0f:eb:e9:95:4e:99:3e:f9:f6:
73:64:22:0e:d2:7d:47:a2:0d:5c:b4:15:a4:1b:a5:5e:dd:9a:
15:1b:19:3c:37:e7:03:34:c2:f6:6a:85:cb:f5:6b:04:a6:a3:
a0:66:dd:00:21:17:a7:b4:0a:23:bb:08:0a:3d:98:e3:84:ad:
a8:33:16:42:22:bb:45:19:65:c0:eb:b7:a0:c0:92:36:94:6e:
27:c6:b5:c7:b5:10:3f:da:0d:8b:c8:cd:a7:f3:b3:d1:93:2b:
54:85:86:a6:23:a0:e2:fa:f8:76:8e:20:ff:69:43:fb:fb:de:
f6:3d:9e:49:a2:88:29:a1:f6:c4:ef:36:b0:c7:75:e0:6f:2a:
02:dd:5f:2d:a7:6e:44:58:8c:21:06:28:39:51:cf:f3:d0:86:
3d:4e:26:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 09:36:25 2024 by rpki-client on console-fra.rpki-client.org