Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6aKqWYlt4M1I3tYUeNnyX2UpgVA.roa
File: 6aKqWYlt4M1I3tYUeNnyX2UpgVA.roa (raw, json)
Hash identifier: XcoYnLdN5k78pAzPIh0KEZZu9czweVKzc3fdZeEAiFE=
Subject key identifier: E9:A2:AA:59:89:6D:E0:CD:48:DE:D6:14:78:D9:F2:5F:65:29:81:50
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018DDA2620B16EF4B98B0CCB144CD5E9342E
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6aKqWYlt4M1I3tYUeNnyX2UpgVA.roa
Signing time: Sat 24 Feb 2024 08:05:48 +0000
ROA not before: Sat 24 Feb 2024 08:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15611
IP address blocks: 62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.147.0/24 maxlen: 24
62.60.168.0/21 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
213.176.96.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.127.0/24 maxlen: 24
2001:790::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 16 Apr 2024 12:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:da:26:20:b1:6e:f4:b9:8b:0c:cb:14:4c:d5:e9:34:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 24 08:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9a2aa59896de0cd48ded61478d9f25f65298150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:9e:6b:b4:68:1a:f7:f9:8a:1c:70:11:c0:
02:67:f3:40:b8:d6:30:90:68:d3:51:74:0c:f0:49:
2b:6d:c7:0c:d6:49:ea:ed:84:02:af:aa:ef:0d:e2:
2a:14:5d:09:f2:70:ce:48:12:b6:94:4a:c9:d6:bc:
b8:f8:65:20:10:11:a3:b0:e6:00:49:96:51:c1:8a:
42:fe:78:c3:8c:0e:17:9a:e8:68:70:b4:8d:f7:8d:
31:00:6c:0c:aa:2c:e4:85:c1:fb:09:83:67:0d:c7:
44:6b:f8:50:9a:dc:46:3d:8c:2c:86:3e:22:ed:55:
93:ef:db:fa:70:c6:28:2f:c5:d5:91:f7:69:fe:31:
24:39:c2:ec:ed:21:eb:75:bc:d7:0a:7b:ae:ef:2b:
e8:e6:fc:40:27:61:c0:21:6b:f6:8f:86:6c:ee:12:
cb:d4:9f:03:3a:49:c9:5f:c8:35:f3:fa:cc:fc:58:
86:85:cd:7f:06:df:d0:5d:7e:6b:1a:6d:0d:c9:8d:
02:6b:46:81:3a:da:97:ad:25:60:f2:53:c5:cd:0f:
4b:49:d3:e0:77:7f:3a:fa:75:84:d3:b2:62:06:8f:
f6:7b:13:6a:34:c1:e5:bb:bb:9d:fa:ef:f8:e8:a8:
f9:c0:57:a4:26:b1:3f:43:9a:7a:03:08:ff:03:f9:
9f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A2:AA:59:89:6D:E0:CD:48:DE:D6:14:78:D9:F2:5F:65:29:81:50
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6aKqWYlt4M1I3tYUeNnyX2UpgVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.140.255
62.60.142.0/24
62.60.145.0/24
62.60.147.0/24
62.60.168.0/21
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
213.176.127.0/24
IPv6:
2001:790::/32
Signature Algorithm: sha256WithRSAEncryption
29:8c:5a:e9:9a:82:73:c9:f7:b3:6a:0e:f4:11:a4:04:08:b7:
b8:c7:04:7c:33:7b:31:82:53:7b:16:07:df:2d:be:85:e0:42:
0a:80:38:82:15:a1:84:f1:f7:ea:ed:ca:46:bc:ce:a6:fa:be:
b3:c7:af:06:02:97:92:60:22:96:c4:f4:9d:4b:e4:ab:fa:1d:
21:d6:bf:ec:48:d8:8a:3d:4c:12:5a:dc:e8:d7:07:15:f1:0c:
1a:9f:15:6c:d9:e4:f0:5a:46:10:a4:08:a4:63:c6:18:4a:04:
6c:6d:0d:e0:60:a8:db:22:64:ed:59:23:d3:e9:0d:5a:d5:b0:
d4:7f:d1:66:1a:ba:73:f2:a5:fd:88:fb:0c:01:53:2d:b8:d2:
8d:ef:f4:09:4a:43:b5:30:ca:fa:3f:80:36:79:5f:ba:c4:70:
fd:47:81:2f:47:e2:ff:a3:a1:05:fc:0a:28:21:51:13:8a:40:
ed:33:90:01:03:1c:36:5d:73:eb:df:7e:98:ca:74:64:55:d5:
88:36:62:5e:ad:be:7c:d3:64:cd:aa:d2:26:8e:3b:45:0b:9a:
d3:e0:4b:2e:8a:5f:80:5d:cd:8a:09:33:a8:a5:bb:71:b7:57:
a4:4a:bd:77:00:15:f8:69:03:ad:ea:ac:71:6b:08:eb:d9:6b:
87:e6:31:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org