Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6ofq-o5ORI2UYhpt7az96u4q37U.roa
File: 6ofq-o5ORI2UYhpt7az96u4q37U.roa (raw, json)
Hash identifier: kqzTUMx5ry/qcjRa1RY8YbtIEH4ROCq86ubl3m8myOw=
Subject key identifier: EA:87:EA:FA:8E:4E:44:8D:94:62:1A:6D:ED:AC:FD:EA:EE:2A:DF:B5
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018875D98F4B80CFBD17CC69006FC74BF74D
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6ofq-o5ORI2UYhpt7az96u4q37U.roa
Signing time: Thu 01 Jun 2023 07:26:12 +0000
ROA not before: Thu 01 Jun 2023 07:26:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15828
IP address blocks: 62.60.164.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 12:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:75:d9:8f:4b:80:cf:bd:17:cc:69:00:6f:c7:4b:f7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 1 07:26:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea87eafa8e4e448d94621a6dedacfdeaee2adfb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:55:20:d1:13:66:c9:2d:8d:61:86:b1:7f:31:
df:3b:15:55:57:3f:70:1c:8b:7d:d7:71:57:25:db:
d2:f5:a0:3d:84:b6:72:d0:17:bf:9e:55:f4:1e:2d:
6d:64:de:4b:e4:ab:2b:fb:2d:a3:80:dc:3c:0e:8c:
20:28:4d:69:54:3f:db:f0:5e:db:88:4a:7b:91:67:
3a:28:b4:97:2b:09:57:c1:4a:db:14:bd:0c:54:e0:
8e:61:eb:0c:58:a6:5e:85:d2:22:88:d5:52:64:c2:
2a:de:10:12:3d:3b:cf:1f:10:58:5d:9d:32:83:80:
11:7d:07:05:3f:44:35:36:f5:12:10:2f:51:04:34:
88:fd:f8:56:32:5b:88:3a:bb:ce:3f:9b:fc:13:6b:
2d:2a:7c:b5:b6:72:eb:fb:ef:0c:41:b4:ee:df:b6:
d4:cd:08:94:16:f5:ab:80:57:d2:7d:cb:c0:70:57:
a8:51:cd:01:b7:5e:9c:3d:ca:48:d3:bc:16:ec:52:
ef:ef:7a:c9:f1:b1:b6:1d:3b:c9:88:b0:15:4c:3d:
2c:0b:0c:fd:0b:fa:18:a8:62:92:e0:b9:ea:9c:f6:
7e:17:a0:2e:0b:49:0a:8a:a5:91:f4:08:02:dc:a3:
7a:0a:8d:f6:85:ec:86:3a:78:1b:b3:99:ea:97:22:
56:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:87:EA:FA:8E:4E:44:8D:94:62:1A:6D:ED:AC:FD:EA:EE:2A:DF:B5
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6ofq-o5ORI2UYhpt7az96u4q37U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.164.0/22
Signature Algorithm: sha256WithRSAEncryption
92:b6:92:69:77:88:d8:49:7c:90:f9:e3:32:c9:e1:eb:48:b1:
1a:35:e7:da:51:8b:bc:25:a6:96:00:d5:63:c9:8b:79:6e:1c:
81:24:dc:f4:f7:7d:5c:2d:23:d5:fd:4b:97:85:1b:9f:fc:32:
d1:3c:9e:77:bf:e8:a7:12:e3:13:d8:ed:37:4c:74:dd:ef:5c:
d5:91:a3:7e:94:5f:ae:c9:69:a1:42:4b:f7:b6:ee:6e:53:a7:
29:c5:7f:ca:02:23:10:6a:e2:fb:bf:c2:da:b9:be:b4:9c:c9:
3f:7a:29:e4:ac:f1:77:5e:e0:56:e4:bd:5b:c9:54:df:55:41:
44:85:c1:51:d3:03:be:27:94:8e:ef:09:5f:90:18:a3:42:cc:
c8:88:ef:62:ac:a0:13:ed:db:0e:74:c5:85:67:ba:5b:96:6c:
f0:3a:f8:13:52:74:80:cf:01:31:57:ce:a5:b8:63:59:53:bb:
50:a9:2a:f2:ca:4a:cc:83:66:61:50:cb:31:7b:11:c5:56:60:
94:31:e3:2c:b2:9a:51:be:1d:17:95:86:6b:fd:1d:15:98:8d:
8f:7c:b0:0d:34:ed:0c:29:4b:7c:47:e6:0a:e5:60:03:a7:5c:
62:18:a1:06:4c:22:2f:81:54:b8:d0:26:eb:d8:43:a8:a4:3f:
0c:d7:c5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org