Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/5SYZY6yEle_ow67-BUtijU4lQ9c.roa
File: 5SYZY6yEle_ow67-BUtijU4lQ9c.roa (raw, json)
Hash identifier: ImhVGz5cH9Th1EuBY2EYoFPsSCWPLQvt5QwxmCB4adY=
Subject key identifier: E5:26:19:63:AC:84:95:EF:E8:C3:AE:FE:05:4B:62:8D:4E:25:43:D7
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018C5D1464765A2774BADCBBFB946FFF1527
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/5SYZY6yEle_ow67-BUtijU4lQ9c.roa
Signing time: Tue 12 Dec 2023 08:11:06 +0000
ROA not before: Tue 12 Dec 2023 08:11:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 62.60.224.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:14:64:76:5a:27:74:ba:dc:bb:fb:94:6f:ff:15:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Dec 12 08:11:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5261963ac8495efe8c3aefe054b628d4e2543d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:f0:c9:b8:ee:4b:39:72:1a:68:fe:a1:05:
b8:7c:74:67:40:ba:de:02:77:5d:34:b5:23:15:ac:
69:81:74:f8:8c:6d:f4:9c:bf:0e:f1:d6:a2:78:5f:
01:11:d4:46:77:64:6a:e7:fe:3a:a2:93:63:46:13:
40:00:89:20:81:0f:97:f8:02:0e:d1:a7:39:30:02:
a6:cd:8a:22:85:d2:e9:0a:45:ec:f2:5d:6b:ce:69:
29:44:37:d5:10:a2:64:86:d6:22:f9:3a:d8:56:86:
42:93:4f:61:e6:42:ef:09:fb:16:93:f1:ae:ee:ff:
73:39:bd:d5:2b:ad:63:dd:af:51:0f:df:ec:70:70:
a1:8e:d4:be:0e:5b:2a:d8:0b:58:dd:2d:d7:d5:be:
78:1d:1e:5b:47:60:c9:11:a1:cc:26:07:a7:4d:40:
80:2e:2a:bb:59:0e:ec:70:a9:b1:06:6d:f9:99:6b:
61:8a:c4:31:48:e9:74:0b:d7:86:ac:69:81:0f:7e:
30:de:b5:59:3b:70:32:a5:b3:1e:a2:e4:f0:79:5c:
33:ab:e1:68:b9:9c:ad:9a:02:14:78:76:ce:3b:ec:
e4:ee:fc:7f:89:96:64:b5:bc:2a:5a:8c:4e:99:82:
f2:88:6d:43:fe:cb:16:38:f4:01:21:82:b2:33:7e:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:26:19:63:AC:84:95:EF:E8:C3:AE:FE:05:4B:62:8D:4E:25:43:D7
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/5SYZY6yEle_ow67-BUtijU4lQ9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.224.0/20
Signature Algorithm: sha256WithRSAEncryption
83:d1:9b:ac:c1:0f:a1:25:6b:5d:50:27:57:09:6e:50:b4:ba:
f7:f7:62:ba:61:1e:5c:b5:37:cb:4e:f2:f8:c6:63:90:7e:5b:
34:af:ea:67:94:79:bb:d4:2e:c8:2e:48:cf:3e:de:68:c1:40:
15:4f:ae:a2:ae:80:cc:3d:87:8c:3c:0d:7e:28:6d:b6:d1:ca:
8f:60:a5:82:2d:73:a8:ec:2d:89:c3:3f:94:a9:d5:f1:71:77:
bb:cc:8a:86:10:74:0c:06:7f:64:40:60:4f:b3:95:f8:00:49:
a8:b7:07:43:8d:1f:0d:d6:68:0a:08:f6:3a:9d:76:fb:bb:89:
e5:99:2d:c7:52:8e:21:ca:68:91:c6:c7:e3:82:55:68:2f:80:
1e:d9:5e:ba:d3:e5:0f:88:37:02:fd:4d:1b:42:98:3d:36:42:
74:7a:a7:01:01:0a:e4:45:ec:c4:2d:af:5b:ba:2c:81:95:c6:
04:61:4e:39:d3:40:89:b2:1a:d1:22:9f:2d:cb:8a:44:68:df:
a6:83:ef:08:7e:ae:81:74:f7:17:9a:06:d6:6a:b0:4c:58:49:
c6:67:33:f5:35:70:4e:6e:b1:1b:e1:ae:56:73:0c:43:09:f1:
31:68:e4:96:5f:1e:8e:9e:c1:f4:75:f9:c8:72:c7:15:a2:6a:
bc:84:94:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org