Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/7_uS6O-nqCbwGafOhibYyV8EKQM.roa
File: 7_uS6O-nqCbwGafOhibYyV8EKQM.roa (raw, json)
Hash identifier: bslJ2RV57Dif2BckulzPvZ2D/ICl2ycgSG6UIeCj2nI=
Subject key identifier: EF:FB:92:E8:EF:A7:A8:26:F0:19:A7:CE:86:26:D8:C9:5F:04:29:03
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018C9FC505F507002333855AAD41EF0AFE10
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/7_uS6O-nqCbwGafOhibYyV8EKQM.roa
Signing time: Mon 25 Dec 2023 06:58:58 +0000
ROA not before: Mon 25 Dec 2023 06:58:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35372
IP address blocks: 62.60.138.0/24 maxlen: 24
62.60.144.0/24 maxlen: 24
62.60.147.0/24 maxlen: 24
62.60.160.0/22 maxlen: 24
213.176.0.0/24 maxlen: 24
213.176.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9f:c5:05:f5:07:00:23:33:85:5a:ad:41:ef:0a:fe:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Dec 25 06:58:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=effb92e8efa7a826f019a7ce8626d8c95f042903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:a4:e7:26:52:39:c6:0e:da:44:74:76:02:
c4:33:d2:49:6e:8d:cb:7d:5e:b6:7d:7e:6f:55:23:
66:98:8a:ab:d4:9d:89:fb:aa:2d:40:bd:89:c9:3d:
0f:48:a3:77:76:7b:29:b1:9d:7c:0c:df:26:ca:bc:
cc:f3:f1:c0:08:4c:0e:be:e4:f8:48:52:2c:0b:51:
41:3b:cc:f6:53:66:dc:eb:3c:8e:ef:1c:c5:8d:f7:
83:8d:99:f5:d3:da:4e:3f:ac:88:cc:61:bb:f9:ec:
6a:47:9d:a9:f0:26:1a:78:c1:e0:1f:5f:5f:54:d0:
91:67:86:6e:db:4a:cf:24:7d:65:e1:71:eb:25:ac:
34:8f:f4:83:e4:72:b1:47:28:d9:77:89:5f:11:60:
4d:3d:5d:c6:0f:fb:7b:b3:64:7f:e4:14:a9:d3:58:
eb:27:04:52:1d:1b:de:45:08:16:96:16:1d:e5:60:
d4:63:c1:d1:db:b0:cd:92:b1:8d:2b:e2:57:88:59:
56:78:e6:99:5b:0f:1e:ce:1e:d3:70:50:ff:fe:17:
34:3b:68:7c:e3:c4:6e:dd:24:00:ae:c7:fe:3c:ee:
80:31:da:46:91:47:2a:8f:dd:75:f0:36:da:6e:26:
6a:78:33:29:e3:47:86:80:b2:23:e9:af:65:47:3b:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FB:92:E8:EF:A7:A8:26:F0:19:A7:CE:86:26:D8:C9:5F:04:29:03
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/7_uS6O-nqCbwGafOhibYyV8EKQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.138.0/24
62.60.144.0/24
62.60.147.0/24
62.60.160.0/22
213.176.0.0/24
213.176.7.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:68:67:83:ef:05:a6:6a:83:e7:79:74:3b:90:3a:19:6f:1e:
1b:2b:ca:0b:7f:ff:14:8c:52:f0:d0:35:ec:a1:3c:51:0c:2d:
43:36:1c:ea:a2:78:fd:c4:fb:be:37:b9:d4:04:dd:d9:cc:51:
72:f8:26:2a:7b:58:6a:a0:85:02:ee:f1:d8:3e:9e:bf:fc:21:
b2:d4:10:b2:52:87:61:d1:51:e5:fe:5b:eb:65:71:bc:8c:16:
4f:98:eb:e6:d2:06:7e:9e:dc:97:14:ba:c0:9e:49:d8:9d:eb:
7c:b8:a2:6a:0c:69:6d:8f:56:46:61:70:f3:c5:4f:99:01:97:
46:09:8e:c6:f0:d1:e2:21:79:c9:92:ed:ab:c9:6b:0f:0c:57:
cb:b7:04:f7:06:40:1d:1f:ed:ea:6c:5d:6a:2a:d0:0f:b5:84:
c9:02:f9:e1:f7:22:95:84:1f:f7:36:c5:d4:1f:7c:dc:83:af:
28:1e:17:e9:ca:ea:54:d3:70:0f:6d:c1:73:e9:c5:39:e8:89:
37:a1:0e:67:6d:37:e0:5c:16:7e:72:d7:e4:8d:bc:74:38:e1:
5d:22:28:fd:bf:8b:d7:d0:8f:32:da:99:02:2f:c6:b1:b3:49:
f5:be:8b:12:8a:c2:ff:81:14:3a:21:c2:3b:08:40:63:9f:bc:
36:4b:e3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:44 2024 by rpki-client on console-ams.rpki-client.org