Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3tET4IeZjVv5IKTDBrTmMMjBd5A.roa
File: 3tET4IeZjVv5IKTDBrTmMMjBd5A.roa (raw, json)
Hash identifier: Yj9fQwWBaB568th5zfCo4Wt9S4BtK/VSXMQeF/dlcP0=
Subject key identifier: DE:D1:13:E0:87:99:8D:5B:F9:20:A4:C3:06:B4:E6:30:C8:C1:77:90
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01875FA074AC6D5D52749CC02FFD424A668E
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3tET4IeZjVv5IKTDBrTmMMjBd5A.roa
Signing time: Sat 08 Apr 2023 06:49:23 +0000
ROA not before: Sat 08 Apr 2023 06:49:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53356
IP address blocks: 62.60.164.0/22 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.176.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.188.0/22 maxlen: 24
62.60.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Apr 2023 05:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5f:a0:74:ac:6d:5d:52:74:9c:c0:2f:fd:42:4a:66:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Apr 8 06:49:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ded113e087998d5bf920a4c306b4e630c8c17790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e0:b7:86:dc:24:4e:53:f2:01:f5:b3:be:9a:
95:e7:df:b5:bb:26:12:a6:6a:8b:22:6d:08:3e:48:
03:9d:61:03:cf:75:a8:92:56:3c:54:d4:26:e4:67:
89:70:10:a7:84:6a:0c:95:db:1e:63:eb:62:36:64:
c8:ed:c3:19:8d:32:50:5d:d8:83:0b:71:06:29:8d:
76:51:cf:7e:61:39:bf:60:06:8a:01:5d:28:69:ad:
2a:6f:3c:de:8e:54:4d:5f:92:3f:7b:d7:a8:a8:aa:
38:66:10:e1:55:9a:f8:b8:f5:7e:2a:dc:ed:70:e7:
9f:74:13:65:6c:05:2a:e6:b9:a9:a7:48:41:a7:0d:
7f:11:21:40:e7:a8:f2:87:cb:0f:b2:44:6e:5e:1b:
c6:fb:48:df:8f:18:e7:cb:e3:12:9a:fe:8b:b9:25:
d4:3f:89:85:73:7b:b2:66:37:ad:ee:76:fa:d2:36:
e2:1c:21:81:72:b8:88:b8:45:ce:77:7e:e3:62:2a:
a2:45:7f:a8:44:e0:21:06:e5:09:a6:b7:2e:04:57:
9b:76:17:56:17:1d:a4:60:f6:b8:73:c0:ea:64:86:
5c:8c:06:4a:01:3c:6e:5e:1b:ac:bc:f6:cb:5f:da:
8d:05:24:e7:d0:c8:8f:38:33:9c:ab:2d:a8:63:20:
45:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D1:13:E0:87:99:8D:5B:F9:20:A4:C3:06:B4:E6:30:C8:C1:77:90
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3tET4IeZjVv5IKTDBrTmMMjBd5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.164.0-62.60.179.255
62.60.188.0-62.60.196.255
Signature Algorithm: sha256WithRSAEncryption
45:4c:f5:11:fc:f1:0b:6f:72:65:bc:81:db:87:db:4b:8c:1d:
8b:ef:0c:44:98:ad:66:1e:43:37:9a:6b:b8:14:e6:e8:e6:27:
47:4c:53:ff:b3:85:6d:74:1c:56:7c:c0:cb:2d:86:4f:1e:a9:
77:04:38:1f:f3:c6:9c:fe:53:ca:23:1e:a8:c8:db:35:78:1c:
63:0f:b1:40:33:a9:05:45:b1:18:97:d4:50:0f:fc:d7:c6:5e:
9c:74:8b:94:c6:ef:c3:3b:5c:5d:fe:54:2f:16:40:53:03:38:
03:02:59:d8:ac:b3:9c:61:75:92:12:4c:bc:1e:69:73:fb:3b:
a8:bf:d1:14:14:b6:5d:c2:a3:5f:e6:57:20:85:3b:27:65:a7:
11:c9:a2:66:58:b5:b6:e5:e2:4b:93:b0:a6:ad:a5:f4:bf:98:
b3:40:c2:69:e7:ba:38:8c:1c:c4:97:e9:5c:79:a8:f7:d6:fb:
9d:af:ac:01:2a:d2:0f:06:f4:af:67:f1:59:9d:19:33:79:48:
14:3e:7d:69:d6:61:26:aa:92:cb:93:71:7c:8c:ed:cf:eb:d2:
9e:5d:b8:7e:87:8d:24:26:93:28:1d:62:d4:7d:dd:45:8f:7e:
ad:6b:58:e7:3d:d3:32:07:f4:da:a6:33:e8:c4:3c:7a:4a:5e:
95:1b:f2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org