Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/4f1oxKWB8lWQuhH2hjIC5P1RV30.roa
File: 4f1oxKWB8lWQuhH2hjIC5P1RV30.roa (raw, json)
Hash identifier: Nr45iRXhkzL18BtPzN3uDmuYC8446WTCRx/RT3vHONw=
Subject key identifier: E1:FD:68:C4:A5:81:F2:55:90:BA:11:F6:86:32:02:E4:FD:51:57:7D
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0186DBE5C7217201ADD129E844CD5076956B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/4f1oxKWB8lWQuhH2hjIC5P1RV30.roa
Signing time: Mon 13 Mar 2023 16:55:14 +0000
ROA not before: Mon 13 Mar 2023 16:55:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48147
IP address blocks: 62.60.146.0/23 maxlen: 24
62.60.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Mar 2023 13:42:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:e5:c7:21:72:01:ad:d1:29:e8:44:cd:50:76:95:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Mar 13 16:55:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1fd68c4a581f25590ba11f6863202e4fd51577d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:c1:b7:2c:3c:db:f0:f0:f0:c9:43:c3:09:
90:c4:62:80:03:f2:64:0f:c3:38:ab:a4:a5:aa:98:
c3:f5:27:42:ed:45:ea:75:1b:16:69:e6:02:1b:1f:
b9:90:81:f6:4c:bf:cb:7f:59:85:3b:5d:e2:e2:72:
5f:f7:e2:5d:cb:f0:5c:b0:b5:be:a6:bb:d1:d5:2e:
d3:7b:a8:ed:e3:95:fd:88:e4:a9:cd:0a:f6:2b:d2:
b5:39:74:bf:fe:1a:bd:2e:5b:18:61:9d:b9:5b:e3:
94:04:a7:31:9e:3c:bc:2c:37:c1:7b:a9:96:64:02:
21:ce:e3:ff:8e:55:fc:7e:a2:6d:2e:d6:73:d8:48:
d8:50:3e:1b:0e:c6:5d:01:db:c8:a0:e6:45:9b:58:
3b:6b:1f:ba:55:05:a4:69:58:05:6a:86:62:2a:a6:
c1:7f:d1:31:56:dd:b3:ed:f5:db:32:17:7e:63:1d:
6b:3d:c1:c6:16:f5:cf:72:18:67:3e:15:39:2c:23:
af:ee:30:71:b1:f3:1a:12:d6:e4:e8:a7:a5:79:51:
f4:c3:9d:51:2c:b8:26:a9:5b:71:a1:b0:10:d8:3f:
21:ba:e6:e3:94:d5:c3:e6:8f:0b:01:5d:99:ad:78:
9d:d0:2e:8a:93:f9:70:46:bb:d0:ab:c6:19:c1:d0:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FD:68:C4:A5:81:F2:55:90:BA:11:F6:86:32:02:E4:FD:51:57:7D
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/4f1oxKWB8lWQuhH2hjIC5P1RV30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0/23
62.60.162.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:ec:4b:ab:6e:f5:35:60:50:b8:3f:c4:68:14:13:40:ae:1f:
6a:27:fe:72:b2:87:7a:e4:3c:f3:f5:24:4b:d1:98:8b:bf:a7:
86:98:2d:d7:c2:5c:d8:6c:9d:52:5f:23:14:e1:72:31:5c:9d:
72:cf:23:26:b6:c2:e8:d5:25:41:c3:c7:77:a7:7e:32:bd:76:
68:06:30:88:5a:02:39:72:0c:0a:ee:f2:fc:a0:83:0b:35:e5:
51:6b:e7:bc:42:e4:83:68:e0:f1:24:a6:4c:82:e3:b0:cf:c5:
cf:d0:19:5a:9f:d0:0e:df:b0:d5:25:76:89:c2:64:a0:bc:e0:
59:dd:d7:68:95:7d:67:32:38:de:d0:0d:b6:ac:cf:9b:72:74:
cc:95:b6:ff:9d:12:c7:24:65:1d:74:45:e8:d8:2e:7d:d9:38:
c2:e6:79:e8:45:1a:ac:bc:21:48:6e:e7:49:bf:47:05:2f:77:
85:2c:79:75:b2:cd:19:e5:d2:4a:c8:99:67:1d:30:bf:d1:56:
70:be:74:3b:27:10:8a:f8:8f:64:44:11:07:7f:8e:3b:9c:d4:
95:92:80:b5:9a:c9:2a:2e:75:d4:d6:8f:14:82:96:c8:e8:34:
92:12:11:c1:ab:e5:c5:85:2f:bf:79:e3:eb:04:d5:a6:85:40:
3d:76:57:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org