Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/55m1qIaalq1HNYu5DIOuTmNE_SM.roa
File: 55m1qIaalq1HNYu5DIOuTmNE_SM.roa (raw, json)
Hash identifier: cQylrflmYJzqN/ch2CRLDf06GbLyiPhNSEre3sfBPeQ=
Subject key identifier: E7:99:B5:A8:86:9A:96:AD:47:35:8B:B9:0C:83:AE:4E:63:44:FD:23
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0189392D8005727B9C167C58B0D4AFFADCEA
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/55m1qIaalq1HNYu5DIOuTmNE_SM.roa
Signing time: Sun 09 Jul 2023 05:43:50 +0000
ROA not before: Sun 09 Jul 2023 05:43:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53356
IP address blocks: 62.60.216.0/22 maxlen: 24
213.176.2.0/23 maxlen: 24
213.176.6.0/23 maxlen: 24
62.60.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jul 2023 10:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:39:2d:80:05:72:7b:9c:16:7c:58:b0:d4:af:fa:dc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 9 05:43:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e799b5a8869a96ad47358bb90c83ae4e6344fd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:81:a8:9b:db:9c:f3:1e:4e:e8:76:10:63:5d:
57:65:33:ea:80:1b:01:5c:65:86:ca:fb:94:5e:4e:
9c:6e:ab:98:02:c3:de:0b:49:b3:81:38:8e:3a:51:
43:27:18:75:a9:0d:0d:d3:cb:e4:6d:69:92:71:f9:
15:be:fd:b7:cb:72:5d:21:da:2d:3f:29:e8:0f:41:
03:2e:aa:03:5c:5a:83:9b:88:16:53:28:06:25:ad:
ee:02:bc:df:91:22:67:74:f3:f1:e5:10:28:18:2b:
3f:f5:52:5a:e1:b3:b7:f0:fc:e5:42:c7:f2:74:e1:
ca:3f:b3:74:52:f1:35:bc:52:b3:92:d4:1b:63:7f:
5c:56:eb:71:9a:27:a2:4a:d7:57:68:73:7f:bd:30:
0e:aa:a0:de:1e:cb:51:ff:21:5a:2e:9d:61:20:e1:
3f:87:48:08:34:47:1e:c8:7f:17:86:a2:e1:0c:fd:
8f:fe:74:32:c0:e9:a5:5c:58:a8:53:c5:d0:39:2a:
29:c2:a9:ed:8d:6a:3a:7c:32:9b:c0:a8:a5:cb:3d:
53:51:da:28:8c:80:5f:c2:2d:41:a3:ff:a2:c0:7b:
c0:8c:30:13:ec:a0:a9:80:4a:0f:a1:e5:9d:48:79:
4a:59:95:7d:bd:49:16:69:d3:b6:ab:6d:cd:7e:f7:
79:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:99:B5:A8:86:9A:96:AD:47:35:8B:B9:0C:83:AE:4E:63:44:FD:23
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/55m1qIaalq1HNYu5DIOuTmNE_SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.180.0/22
62.60.216.0/22
213.176.2.0/23
213.176.6.0/23
Signature Algorithm: sha256WithRSAEncryption
97:79:5c:30:00:84:70:67:e5:7a:1b:f9:7d:f1:1a:90:0f:3c:
0a:da:d2:c2:ba:45:55:85:6e:66:d8:ed:d2:21:cf:1b:db:b2:
25:99:69:24:f1:ef:54:41:0a:1e:24:3b:10:a6:c6:75:10:a6:
86:f8:ca:b0:59:41:c3:71:df:53:21:b0:92:4d:f5:ca:aa:b3:
cc:00:58:b7:19:45:d6:d7:cf:e5:aa:e7:c2:65:99:24:36:3c:
43:5e:6b:8f:cd:cf:79:b2:7a:db:bc:fc:80:66:e4:e7:d9:47:
fb:d4:0e:ae:c1:12:0f:2a:db:e0:9a:3c:8b:54:d4:76:96:81:
e5:24:12:1d:83:d7:59:e9:fb:f0:04:37:7f:e8:26:ec:c3:42:
e4:5b:cb:13:07:26:6f:9e:0e:53:43:e9:3a:62:2c:e4:58:bb:
8e:48:7c:80:cb:36:9d:42:9b:a6:36:f4:7c:61:00:4b:28:a3:
bf:35:f2:35:10:cb:ea:36:dc:57:8e:7e:03:e6:f3:cc:69:3b:
c5:cc:3c:94:ce:86:8b:59:07:97:34:be:ab:72:cf:ad:75:c9:
85:d5:64:4e:62:9a:0f:76:a4:c8:0d:20:1c:86:b5:78:37:b0:
8f:4b:19:7f:42:30:a2:c7:cf:75:82:e4:b5:6c:d2:d3:5b:3c:
49:70:00:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org