Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/7SMGO-ZtOvj2yyGpYtZKcBD-_R4.roa
File: 7SMGO-ZtOvj2yyGpYtZKcBD-_R4.roa (raw, json)
Hash identifier: qDAYFu14yn60SFgGJyQahNGzcTaTQ7YT8WDcy30iWG0=
Subject key identifier: ED:23:06:3B:E6:6D:3A:F8:F6:CB:21:A9:62:D6:4A:70:10:FE:FD:1E
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0191EF5CE7A6B9E6F7F763BC460E61125F01
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/7SMGO-ZtOvj2yyGpYtZKcBD-_R4.roa
Signing time: Sat 14 Sep 2024 07:08:48 +0000
ROA not before: Sat 14 Sep 2024 07:08:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 62.60.244.0/22 maxlen: 24
62.60.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 12:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ef:5c:e7:a6:b9:e6:f7:f7:63:bc:46:0e:61:12:5f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 14 07:08:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed23063be66d3af8f6cb21a962d64a7010fefd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:2a:04:c7:d8:cb:2e:ec:9a:57:c2:43:4b:
27:1f:14:ce:7b:78:ef:3a:f7:06:a1:1d:41:03:7c:
5a:c8:e5:8d:d0:98:f7:90:88:f7:f2:0f:af:c7:43:
bb:31:c6:cd:25:0f:59:c1:81:8c:89:53:b6:7b:c1:
12:80:78:1b:72:02:26:fb:6c:c9:32:2f:20:e2:72:
ec:23:8b:3f:84:9a:0a:f5:83:8f:78:d4:76:d0:54:
e1:b3:5d:19:d4:8b:b5:71:4f:3b:da:a9:d9:e3:70:
81:84:6c:b0:bc:42:2f:2c:25:61:1a:8b:ae:7c:9d:
82:d7:f0:f7:79:96:27:15:72:f4:e7:61:b7:2a:59:
f5:87:03:35:53:56:be:b4:d1:fd:b4:f9:d8:f3:17:
80:fa:86:c1:6c:01:e1:60:c9:77:79:54:da:d2:b1:
de:cf:8c:a7:70:9c:76:22:63:b5:50:c8:97:88:db:
87:93:bf:49:87:e7:9a:d9:93:a1:0b:48:25:a9:51:
34:bc:27:79:59:77:24:c7:42:26:ec:63:cf:59:78:
ae:fa:cf:9a:e9:4d:eb:1d:09:44:b7:82:b7:a4:f7:
8c:a3:8c:f7:4b:9a:a6:93:39:05:2e:79:2b:3d:59:
01:01:20:9c:d4:64:68:7d:7f:f8:5a:7a:23:f0:74:
29:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:23:06:3B:E6:6D:3A:F8:F6:CB:21:A9:62:D6:4A:70:10:FE:FD:1E
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/7SMGO-ZtOvj2yyGpYtZKcBD-_R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.244.0-62.60.251.255
Signature Algorithm: sha256WithRSAEncryption
89:e9:7c:fc:94:8a:63:4e:eb:bd:76:63:1b:ff:ca:e0:41:67:
1b:cc:22:b3:75:e0:0d:af:d5:38:e3:47:b7:e4:1c:75:0a:0a:
e0:a7:a2:e9:cf:52:7d:ff:24:08:7b:bb:7f:73:e3:4c:e3:a0:
38:54:50:4a:ed:09:5a:a6:7d:30:0b:07:bf:45:8e:fb:f8:c1:
fe:59:3b:9d:0a:67:c5:0d:da:ce:e4:0d:7a:a5:fa:09:19:71:
49:12:61:24:0d:a6:0a:8b:17:e5:2e:1b:97:f8:d0:2c:0c:52:
2c:db:33:f9:47:a7:40:6a:a4:ae:bf:02:a3:9e:20:13:01:2a:
71:63:63:ed:d0:43:f6:04:39:c3:16:2c:7c:e2:c0:e7:6b:bd:
cb:b1:79:a6:9e:79:48:4d:14:40:07:90:34:1c:2f:99:08:39:
1c:1b:c5:bd:6b:e9:5d:4b:3d:08:fd:8b:04:9d:c9:c1:f5:c5:
ad:b3:f0:57:83:8f:b6:b7:30:97:8f:e7:c9:52:50:e7:50:23:
a2:81:1a:c3:e3:48:f0:b5:ac:77:a6:ce:75:2d:ac:52:e2:df:
f6:d4:68:8c:00:ed:9b:1c:ff:37:3a:8f:2e:bd:10:10:b2:d5:
5e:8a:ec:ea:2b:a6:51:a3:6f:d1:d9:d4:5a:7d:22:28:27:68:
51:fc:54:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 14:58:41 2024 by rpki-client on console-ams.rpki-client.org