Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/4uS5VQWYp6yp4xykHNaD1huSNyY.roa
File: 4uS5VQWYp6yp4xykHNaD1huSNyY.roa (raw, json)
Hash identifier: 4vOJ5DQrhrVIdMnLP2tCSgWIHs+QQM2C+Cn93ih8xiM=
Subject key identifier: E2:E4:B9:55:05:98:A7:AC:A9:E3:1C:A4:1C:D6:83:D6:1B:92:37:26
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01909BAFE5C36F14F5C92146CEF1016BD74E
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/4uS5VQWYp6yp4xykHNaD1huSNyY.roa
Signing time: Wed 10 Jul 2024 08:08:34 +0000
ROA not before: Wed 10 Jul 2024 08:08:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 62.60.184.0/23 maxlen: 24
62.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 06:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9b:af:e5:c3:6f:14:f5:c9:21:46:ce:f1:01:6b:d7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 10 08:08:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2e4b9550598a7aca9e31ca41cd683d61b923726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:86:68:0d:93:8e:71:2e:40:b3:4a:01:2b:
83:8a:1c:16:7b:a6:f4:d7:f9:d0:da:b9:30:f4:a1:
b0:62:fc:c8:03:b4:01:84:7b:2c:ca:c5:7d:74:1b:
57:9d:eb:d4:6f:65:aa:13:4d:c4:18:e2:c6:fa:e7:
cb:8b:d8:5a:f6:70:dd:f3:f3:f9:40:2c:97:98:ce:
ff:e2:6d:36:64:9c:cd:ce:97:ac:92:78:48:e2:04:
ee:60:0a:8e:3d:4f:fb:90:16:f0:32:b6:8f:8e:d5:
c3:41:1a:14:f9:c8:8c:0e:08:45:e8:2f:5e:e4:d3:
bc:55:d1:66:f8:70:62:72:de:29:84:c4:d5:8e:e5:
00:1b:56:ad:d4:67:1b:6f:e2:d8:c4:10:cd:e8:1b:
b2:aa:f3:33:d8:5c:a5:85:82:aa:40:62:8b:7c:45:
a1:07:8a:ba:1a:73:36:14:83:37:18:6d:5e:df:98:
ac:9c:08:09:f6:90:ac:ae:1f:43:6b:76:e3:70:32:
ac:2a:18:05:06:8a:33:72:da:54:15:b6:03:a9:3b:
3a:90:f3:18:5e:5f:02:27:81:f3:21:4d:97:db:6a:
a4:3c:e2:b1:0f:d5:04:41:a2:13:65:3e:17:6a:7e:
fe:b4:55:8e:76:b3:3a:de:b5:47:06:78:e1:18:19:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E4:B9:55:05:98:A7:AC:A9:E3:1C:A4:1C:D6:83:D6:1B:92:37:26
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/4uS5VQWYp6yp4xykHNaD1huSNyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.184.0/23
62.60.192.0/22
Signature Algorithm: sha256WithRSAEncryption
16:95:0b:25:2d:03:d8:72:72:07:74:05:53:1e:14:16:54:be:
df:59:25:07:26:f9:1e:cc:1f:68:a8:20:32:f7:30:2b:4c:1f:
1b:0d:37:c9:2c:b7:18:2c:fe:dc:fd:8a:00:14:9e:70:a3:26:
10:fa:2e:7e:a2:01:43:c1:bd:44:a3:16:b7:c2:a6:6b:59:22:
73:1e:39:1d:d1:3f:8d:88:6f:20:3f:ae:61:83:7a:4b:1b:6b:
9e:50:ea:f9:a8:c5:49:ad:44:aa:54:58:28:62:8f:56:ea:de:
36:99:d8:eb:a3:1d:46:02:49:68:66:78:3c:38:b3:d8:01:39:
73:4f:86:0f:32:7f:a6:72:1a:3d:c6:38:47:ed:cb:96:ab:64:
2b:d4:7a:35:ac:53:b0:ab:fc:c7:f9:60:05:4d:25:7f:31:7c:
f8:91:f2:35:81:e7:83:28:23:35:76:1e:15:9b:2c:bd:db:03:
42:00:ea:4e:3f:7e:ff:3d:df:5f:d4:e4:36:66:d6:38:ff:1a:
9e:c1:6e:2d:ed:28:e6:61:2b:e1:6b:f8:c1:fe:48:05:ae:ac:
4c:17:36:f8:b5:a6:73:e3:84:d0:e1:a8:c6:6f:6b:a7:21:58:
36:4a:82:9e:a2:ac:7a:7f:99:9f:bc:2b:2e:be:91:32:5f:63:
07:7d:71:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 09:20:39 2024 by rpki-client on console-ams.rpki-client.org