Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/50lPKGLHaZX61K0gjVM5TgteFWs.roa
File: 50lPKGLHaZX61K0gjVM5TgteFWs.roa (raw, json)
Hash identifier: n1eiSJOIGEwIMilMgeBYvZu9wXKchVMn5esXtXz0OOI=
Subject key identifier: E7:49:4F:28:62:C7:69:95:FA:D4:AD:20:8D:53:39:4E:0B:5E:15:6B
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018B23724FC658CD5DC055EBFD89482A9598
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/50lPKGLHaZX61K0gjVM5TgteFWs.roa
Signing time: Thu 12 Oct 2023 10:32:55 +0000
ROA not before: Thu 12 Oct 2023 10:32:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 62.60.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:72:4f:c6:58:cd:5d:c0:55:eb:fd:89:48:2a:95:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 12 10:32:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7494f2862c76995fad4ad208d53394e0b5e156b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:c1:39:f6:5a:cf:20:eb:65:aa:2f:e3:fd:
60:4b:8c:e9:26:e0:f9:0d:af:7f:76:14:1e:54:ea:
a6:f6:42:20:a7:01:34:95:69:f3:f9:73:bf:66:38:
26:03:72:50:d3:fe:39:02:76:a6:58:3b:0f:23:45:
6f:04:37:26:9b:43:72:0e:48:de:1c:63:1d:3a:aa:
26:01:88:4d:5e:5c:dd:70:5d:8c:03:ca:4e:91:64:
b0:0e:18:63:9d:e7:cd:e3:8f:eb:ac:6f:e1:de:ae:
c6:4f:f5:d0:c8:39:3a:ec:4e:85:7a:8a:cc:b5:bf:
a7:ac:80:18:fd:67:86:14:f3:0b:d3:0a:67:32:8c:
68:41:4e:bc:8b:ef:7f:8e:f9:77:e6:e6:a5:39:0d:
4f:df:76:94:be:b7:c0:c6:6f:c9:6f:85:a1:9e:e4:
4f:83:d3:24:fb:3f:f3:83:f6:a9:2d:18:47:3c:f7:
f1:71:63:dd:71:f7:56:49:14:4e:96:0d:34:f1:50:
a2:6f:10:f0:c7:99:4e:f3:c7:e9:00:bf:0a:94:36:
ec:13:ea:87:7a:7e:e7:03:52:95:b0:b7:2a:e0:26:
de:43:63:81:39:d4:10:9c:52:5a:c2:be:4c:c1:34:
d1:f1:94:39:ee:f7:4b:de:38:1f:af:b2:70:09:86:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:49:4F:28:62:C7:69:95:FA:D4:AD:20:8D:53:39:4E:0B:5E:15:6B
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/50lPKGLHaZX61K0gjVM5TgteFWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.152.0/22
Signature Algorithm: sha256WithRSAEncryption
85:7e:5c:1e:43:42:0e:41:6a:26:86:6f:b2:54:97:8b:b3:ae:
13:f7:a8:3f:5d:60:19:3b:ea:e4:c7:de:ad:e0:8a:38:1b:d5:
26:66:1b:e7:49:af:44:a9:b8:4f:a9:15:da:ad:d4:10:cb:ff:
75:b6:48:aa:da:77:08:89:b5:3e:be:8d:da:38:89:34:be:a2:
0d:9b:de:73:13:a2:e1:02:f2:1c:27:91:c4:80:4c:c1:71:da:
d0:c1:98:c2:d0:22:9b:af:1a:26:52:08:37:8f:ea:83:b9:a3:
9f:fb:67:86:8d:b3:c6:29:15:47:fa:2a:8c:0e:2c:d9:12:dc:
1d:5f:07:7f:dc:94:00:1c:ba:d2:b2:c8:24:7d:8b:fb:85:ba:
82:b2:25:0b:40:bf:15:13:30:db:41:48:9a:f7:c6:27:27:f8:
89:16:cf:de:e0:d1:58:4f:42:98:09:c8:57:02:e1:72:f6:88:
1f:58:1e:dc:36:d7:2e:62:53:5b:8b:3c:02:cd:dd:d6:ce:ef:
fb:37:76:ca:6e:f3:9b:c2:1e:56:4c:00:1d:2f:49:ff:1a:72:
e3:f9:f7:57:5a:72:96:77:ca:a0:1c:31:37:59:95:c3:ff:87:
2a:9e:19:2a:da:dc:c4:6a:7b:d6:be:ab:94:fb:a3:cc:df:ac:
28:54:46:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org