Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/4T6MERV4HUIgZxvnwLFEkVdBF3U.roa
File: 4T6MERV4HUIgZxvnwLFEkVdBF3U.roa (raw, json)
Hash identifier: qRcgIBzw5WbCE5L1YbBuRMIeRlJx8hv0k/71k+i5FVE=
Subject key identifier: E1:3E:8C:11:15:78:1D:42:20:67:1B:E7:C0:B1:44:91:57:41:17:75
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CCA29C32B2DAB826527ACB18860707CFF
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/4T6MERV4HUIgZxvnwLFEkVdBF3U.roa
Signing time: Tue 02 Jan 2024 12:33:03 +0000
ROA not before: Tue 02 Jan 2024 12:33:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49217
IP address blocks: 62.60.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jan 2024 20:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c3:2b:2d:ab:82:65:27:ac:b1:88:60:70:7c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 12:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e13e8c1115781d4220671be7c0b1449157411775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:51:21:c8:cb:65:f1:b0:da:4b:90:f5:78:4c:
0b:5a:b5:0d:44:4e:27:c6:5e:0a:57:0e:77:26:7d:
22:61:44:ad:cc:d9:39:a0:dd:52:4e:e4:69:9f:bf:
7f:81:b3:ee:45:14:d3:84:71:48:ae:c7:b1:e6:89:
e2:a7:9c:03:be:87:d0:b5:23:80:3d:6b:b5:1c:85:
6e:77:ba:20:45:25:d6:9d:48:65:cb:ab:d0:68:0b:
0f:37:fb:77:a5:4a:25:75:be:01:c2:58:a0:ee:09:
a1:b1:0f:5e:94:40:6c:26:c1:39:f1:a1:05:74:c7:
a3:34:02:f8:be:ad:ed:39:a2:74:e8:7e:fc:29:0a:
2b:ca:fc:ef:3e:55:46:d4:23:90:f8:2d:5c:fd:c7:
39:63:9d:5e:1b:b8:a6:86:fd:7d:b0:5e:46:c2:df:
52:cb:2f:09:42:3c:d4:1d:20:9a:43:e4:8c:d1:b6:
01:d2:96:bf:f0:bf:79:d4:b7:36:bb:91:7c:1d:de:
09:46:cf:83:e0:12:c2:17:8a:d5:0a:f5:4c:f3:44:
54:cb:d5:e6:20:08:ca:ce:af:c9:d2:d9:d7:cf:3e:
8d:a8:fa:f5:30:5b:b5:a4:6b:0c:81:b1:db:db:82:
91:86:0e:6f:e7:f5:0e:ff:93:33:82:a7:42:f4:2b:
2e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3E:8C:11:15:78:1D:42:20:67:1B:E7:C0:B1:44:91:57:41:17:75
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/4T6MERV4HUIgZxvnwLFEkVdBF3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.240.0/20
Signature Algorithm: sha256WithRSAEncryption
b7:dd:3c:92:f7:40:10:88:23:53:35:a1:f7:c4:38:b6:95:11:
15:c4:f5:6f:6e:19:c8:54:b7:2c:27:9f:4b:71:a7:dd:80:f0:
ba:cc:5e:f6:43:5d:16:9a:4f:c0:8a:ca:7e:65:8c:3a:30:bc:
61:ee:18:53:d8:6e:d2:b4:e9:ce:08:c2:9d:bd:ca:84:68:d4:
b7:d6:1c:a9:03:04:2b:01:e4:15:9f:2a:3f:7e:d3:48:0b:5a:
53:80:d3:1c:8a:c4:6a:3f:4e:36:1b:e6:5b:24:4c:9a:14:39:
67:cc:f8:56:f7:57:40:7b:63:52:5d:64:e2:18:a4:e3:f3:17:
f5:cf:a9:3b:a8:67:3f:82:8e:45:e6:07:5e:2f:f9:54:b8:30:
0f:e1:13:0d:fc:3b:64:55:1f:13:4f:15:d2:41:5b:ea:43:8c:
84:97:8e:88:89:9b:e3:f2:22:20:79:fc:55:0c:d1:e0:dc:fb:
35:11:1f:f0:6b:08:18:12:72:1d:0b:0d:17:77:46:5b:38:27:
f0:73:e4:a1:52:2e:cb:70:90:a6:aa:6c:57:cb:45:65:ec:99:
91:3c:65:82:31:7d:3c:2c:30:d7:56:f1:f9:06:b9:5d:b2:01:
c9:99:2e:10:c2:32:fb:de:84:46:aa:b5:5e:b4:21:a4:07:0b:
a8:f7:9d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org