Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3X0pp4qJHikIhPAkkyHldbLB_yA.roa
File: 3X0pp4qJHikIhPAkkyHldbLB_yA.roa (raw, json)
Hash identifier: /d9pohade+mA0b9N0T3KNLnI6FU/jFIlcgEUEBmx+0U=
Subject key identifier: DD:7D:29:A7:8A:89:1E:29:08:84:F0:24:93:21:E5:75:B2:C1:FF:20
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01905D7CCDCC2CBBD2AD8F8D1E1A498B3CC1
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3X0pp4qJHikIhPAkkyHldbLB_yA.roa
Signing time: Fri 28 Jun 2024 06:16:18 +0000
ROA not before: Fri 28 Jun 2024 06:16:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40940
IP address blocks: 62.60.216.0/23 maxlen: 24
213.176.72.0/23 maxlen: 24
213.176.72.0/24 maxlen: 24
213.176.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 04:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5d:7c:cd:cc:2c:bb:d2:ad:8f:8d:1e:1a:49:8b:3c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 28 06:16:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd7d29a78a891e290884f0249321e575b2c1ff20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fe:79:0e:e7:91:35:24:42:9b:57:38:47:f6:
5e:ef:55:32:09:98:89:9f:d6:61:70:da:96:05:73:
d0:db:61:67:2b:87:eb:94:96:bf:26:51:4d:dd:9e:
5e:b3:32:08:03:99:fb:da:27:8f:d2:9a:e6:e7:24:
ed:43:67:0f:23:ed:f6:23:f9:1e:a5:64:7d:19:05:
db:a2:45:9d:91:d5:a1:ac:fa:3d:ef:ce:3f:ed:01:
d1:f6:ae:79:9e:d5:e3:f8:4b:5d:08:4e:e6:cb:7e:
05:b0:f0:37:f4:a8:f9:cd:7e:18:58:0d:1e:e5:b7:
cc:ed:00:1d:41:1f:d5:6c:2b:74:30:dc:de:99:e3:
a1:4b:dd:c9:f2:bf:9c:7a:f9:c6:cf:51:3d:83:ea:
58:1c:4b:b0:00:d0:5d:29:f0:66:8b:49:8f:20:9b:
1f:84:a7:2a:2a:2c:98:4a:5c:d3:0f:5c:63:b6:ed:
68:f9:ed:a3:d5:62:1e:8d:4d:93:c9:02:ad:54:09:
d3:1d:43:9d:85:3e:09:8e:82:5e:8d:7a:03:18:d5:
d6:c5:8c:a8:1d:9c:02:b2:0b:c2:d8:32:f5:6c:b5:
6b:c2:a9:ae:38:be:1a:b0:a8:ad:76:df:61:cd:a6:
9e:af:cc:c2:8b:2b:09:01:a5:3d:85:5e:00:e6:ea:
fa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7D:29:A7:8A:89:1E:29:08:84:F0:24:93:21:E5:75:B2:C1:FF:20
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3X0pp4qJHikIhPAkkyHldbLB_yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.216.0/23
213.176.72.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:4f:0c:90:89:97:df:c8:26:c3:a7:ad:52:29:73:dd:d1:64:
35:17:b8:5f:da:39:06:12:3a:41:6f:92:c5:5c:f2:bd:b2:cd:
f2:b6:c0:20:0c:67:63:7d:41:28:37:fd:ca:35:81:d4:ca:97:
f5:66:d4:f3:49:2e:d7:65:03:b0:2b:e1:bb:b4:81:32:88:f5:
d6:af:8f:53:c4:6b:02:fc:43:7f:68:a6:42:92:dd:27:6a:fe:
d0:04:43:bb:9d:6c:fc:2d:29:d0:9a:c1:73:68:9b:a2:68:36:
d6:d2:cf:87:0f:1e:d3:9a:ff:9e:49:9a:cc:1a:df:59:76:1e:
d8:4f:9d:5d:f6:03:91:d9:84:f4:10:9f:32:14:0f:4b:83:0f:
d4:c5:44:fc:be:8e:d5:b8:4c:9b:69:e7:d3:0a:e2:1c:37:72:
7c:82:58:36:2e:dd:42:51:d3:ed:1f:d2:0c:91:38:a8:08:9e:
eb:82:ee:59:17:31:39:97:07:5a:5b:58:98:a7:46:a0:ee:d5:
c2:27:75:50:15:0c:73:d5:a9:f0:ea:15:b2:d0:d7:85:f8:a4:
ce:7e:23:86:f4:88:a5:81:63:49:f8:af:a7:e1:bd:eb:ef:b4:
47:4f:7a:4b:9a:8f:54:85:18:6a:af:43:f8:33:d4:f1:d2:27:
33:2b:27:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 06:11:48 2024 by rpki-client on console-fra.rpki-client.org