Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6g2yTDnwaQd2iuWfeBcZH1sBPIQ.roa
File: 6g2yTDnwaQd2iuWfeBcZH1sBPIQ.roa (raw, json)
Hash identifier: SssrlhlftnF9+kTT3sjtgMEcCEipw1PadnKXIDWoSxU=
Subject key identifier: EA:0D:B2:4C:39:F0:69:07:76:8A:E5:9F:78:17:19:1F:5B:01:3C:84
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018AFE28238BEC2B8F08D29DFAEF11C88B1E
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6g2yTDnwaQd2iuWfeBcZH1sBPIQ.roa
Signing time: Thu 05 Oct 2023 04:45:57 +0000
ROA not before: Thu 05 Oct 2023 04:45:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15611
IP address blocks: 62.60.216.0/22 maxlen: 24
213.176.96.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.188.0/22 maxlen: 24
62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.141.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.152.0/21 maxlen: 24
62.60.147.0/24 maxlen: 24
62.60.148.0/22 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
213.176.127.0/24 maxlen: 24
213.176.126.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:28:23:8b:ec:2b:8f:08:d2:9d:fa:ef:11:c8:8b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 5 04:45:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea0db24c39f06907768ae59f7817191f5b013c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:cd:cf:fc:14:cc:ba:b7:38:bd:a6:f2:af:
b2:7b:70:92:f0:b3:72:bf:08:80:b0:17:2c:fe:9c:
05:a5:7e:af:59:b6:0b:a5:eb:be:b3:e2:19:b0:f8:
f5:d5:48:dc:27:ae:ad:fa:26:0e:e2:85:b2:e0:4f:
2b:c4:2c:5e:8c:59:60:a5:d7:3a:77:0e:46:25:94:
c0:f6:82:0d:67:0f:b8:ec:05:66:c5:83:59:b3:15:
50:f4:9a:26:a1:be:9a:b7:d6:7e:8d:9c:d6:07:3d:
df:93:68:aa:f7:e6:70:c0:1d:c6:5b:95:26:87:95:
60:f7:39:f3:49:eb:10:f6:1f:fd:8a:a3:44:65:57:
42:16:62:47:27:7b:af:72:fa:b4:2d:44:ca:dd:7d:
47:22:fd:63:c6:9b:1a:55:d2:a6:d8:29:c0:23:c9:
12:53:20:07:4b:95:8a:76:ba:2c:24:61:e0:64:aa:
75:e2:0e:d4:6f:c9:ff:d9:05:09:27:97:01:54:24:
89:a9:34:99:c1:5e:12:7e:5a:45:f9:d5:4f:4b:26:
c5:1e:ff:d9:dc:27:02:b5:1f:43:a0:80:1f:49:c1:
55:b2:8e:9c:b8:24:41:90:ce:9f:a4:28:3c:2b:6b:
e6:05:8f:ea:c9:48:93:b2:f9:7c:cb:27:02:f6:7d:
b9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0D:B2:4C:39:F0:69:07:76:8A:E5:9F:78:17:19:1F:5B:01:3C:84
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6g2yTDnwaQd2iuWfeBcZH1sBPIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.142.255
62.60.145.0/24
62.60.147.0-62.60.159.255
62.60.168.0/21
62.60.188.0/22
62.60.216.0/22
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.127.255
Signature Algorithm: sha256WithRSAEncryption
0b:37:7c:43:00:b4:3a:01:31:d8:85:ff:c2:51:3f:ac:30:d7:
ff:16:8c:7e:8e:2e:d1:29:50:db:5a:cd:4e:94:ea:66:ba:65:
af:30:d2:de:dc:a0:0f:01:8a:81:18:c1:70:f0:f2:05:50:dd:
78:ee:bc:fc:1f:8a:33:9e:a6:fa:39:c7:f4:ba:b3:d1:6d:82:
4f:60:0d:ec:4e:0d:a5:c9:b9:f6:b1:92:b7:21:6a:8c:3c:6f:
0e:90:d7:40:e3:ea:a1:69:35:1a:2f:6f:98:29:74:81:0b:15:
c9:ec:83:4f:f3:ca:d3:66:dd:c2:2e:94:09:2e:49:05:85:9f:
ad:1f:74:38:01:55:03:3e:c1:91:9c:a0:b6:3d:13:45:f0:e9:
7d:92:91:a7:bd:9c:df:7a:8d:4a:bd:70:fc:83:75:f0:79:e4:
18:50:6f:e6:25:05:91:ad:80:0f:72:85:d0:77:b2:13:48:e7:
38:2d:dc:25:35:5f:a6:f0:3b:9f:33:58:ca:c0:fb:8e:d0:c2:
84:f8:52:87:0b:98:06:31:f5:e2:51:13:d1:8f:b2:9d:c4:bb:
ac:39:5d:58:fb:f5:64:ce:36:ba:f0:eb:d3:24:93:b8:aa:8d:
f1:38:99:5d:0f:a2:18:b6:f4:44:87:0f:5f:75:46:cb:0a:cd:
14:05:29:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 13:26:57 2023 by rpki-client on console-ams.rpki-client.org