Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/5FfDq1ua7Md86bUMI6y3nYhL2Mg.roa
File: 5FfDq1ua7Md86bUMI6y3nYhL2Mg.roa (raw, json)
Hash identifier: TtJq/um+POBa0jOwg+E9YhaO8m1TGsU/bh6MqCHwez4=
Subject key identifier: E4:57:C3:AB:5B:9A:EC:C7:7C:E9:B5:0C:23:AC:B7:9D:88:4B:D8:C8
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018BADEF86D27C1BFB554424A0A41016DDC2
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/5FfDq1ua7Md86bUMI6y3nYhL2Mg.roa
Signing time: Wed 08 Nov 2023 07:57:17 +0000
ROA not before: Wed 08 Nov 2023 07:57:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55154
IP address blocks: 62.60.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ad:ef:86:d2:7c:1b:fb:55:44:24:a0:a4:10:16:dd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Nov 8 07:57:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e457c3ab5b9aecc77ce9b50c23acb79d884bd8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fc:c9:7e:07:b4:55:8a:a0:60:95:c2:75:08:
47:34:6f:7b:5e:27:b5:fa:6f:97:a1:5a:0a:fc:48:
03:b0:e5:d7:af:f5:34:55:00:ff:90:62:c8:7e:cd:
32:8b:68:8f:08:00:21:7c:db:50:2a:74:a3:57:f0:
99:4f:23:de:95:93:6a:18:f5:66:5b:ed:9b:4f:71:
ce:d4:e4:8d:93:39:7e:86:d5:a5:b4:fe:67:07:34:
87:51:af:23:83:e4:27:10:8f:1f:90:4d:93:eb:6b:
c4:58:96:4b:e4:f2:63:02:ee:b8:7b:2b:38:08:c4:
d7:bc:a4:74:90:e4:f3:05:91:c6:e4:8d:cc:68:96:
20:42:82:58:92:88:a1:a2:59:bd:1a:69:5a:9d:7d:
6f:fd:2e:7a:2e:57:ba:a9:e6:3e:8e:85:5b:cd:21:
9d:df:b5:0c:c5:7b:2b:73:40:39:c0:43:f9:7a:c2:
fe:b0:5f:aa:18:57:e9:9e:c5:7b:65:5a:f5:88:86:
12:e0:38:06:f2:4a:d9:fd:ac:c4:32:da:29:69:a6:
42:5a:0e:d6:b0:2e:64:63:4a:da:99:92:aa:92:9c:
ac:09:fb:f5:c7:12:3c:5e:a7:c9:6f:46:ec:d6:4d:
2e:fc:b5:22:2d:9a:a0:01:3b:b9:c5:f8:7f:6b:d5:
6d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:57:C3:AB:5B:9A:EC:C7:7C:E9:B5:0C:23:AC:B7:9D:88:4B:D8:C8
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/5FfDq1ua7Md86bUMI6y3nYhL2Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.150.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:1f:5d:a4:bd:90:53:d7:ab:55:82:b5:39:b4:c9:61:a7:ba:
87:c3:69:72:3f:a9:00:52:18:2a:ab:c0:13:4f:d7:6d:98:5c:
64:99:9a:39:16:d8:c4:8f:32:a0:ca:bd:8e:ef:c5:1b:c5:2b:
e6:a2:a1:8f:99:52:4b:91:72:92:7b:00:b4:48:de:c5:4a:fa:
3b:e9:47:53:26:20:45:60:ec:a3:3c:6b:3e:3a:24:50:7e:5d:
f4:75:8a:fc:0f:d0:ff:95:02:69:29:10:3f:ec:47:38:44:23:
80:99:80:f4:6a:0c:ae:95:4f:d3:b5:71:60:bb:d5:d5:89:fb:
3b:ad:a7:f2:4e:14:ed:69:dc:67:e9:54:d9:92:33:db:c4:c4:
9a:3a:46:c2:6c:58:ab:d9:02:97:a1:b6:a6:60:6f:bb:7b:87:
b4:b5:00:3b:f1:c4:ab:76:dc:0f:33:42:72:69:db:9b:01:f6:
5d:ed:00:3e:d6:e8:4d:f6:78:ca:c5:58:11:5f:4e:17:54:ea:
84:4b:6e:b5:65:70:71:96:d9:83:f1:34:2c:56:4e:ed:e9:e6:
f5:50:1a:80:e7:76:89:b6:ea:93:87:42:d6:6a:96:a9:79:7f:
cb:ab:eb:97:34:66:ca:f4:07:33:50:b4:4c:5f:5e:ca:41:1f:
b6:9d:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org