Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/7yZmwCQu3LwvjGJwcqYTCWcRsfc.roa
File: 7yZmwCQu3LwvjGJwcqYTCWcRsfc.roa (raw, json)
Hash identifier: IWAxiZ51AWV2qkrUTauFsVUMxermAt56twO2jM+HAmo=
Subject key identifier: EF:26:66:C0:24:2E:DC:BC:2F:8C:62:70:72:A6:13:09:67:11:B1:F7
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0191647F7E3F2E22E05FB281FDA6B47CC551
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/7yZmwCQu3LwvjGJwcqYTCWcRsfc.roa
Signing time: Sun 18 Aug 2024 07:59:22 +0000
ROA not before: Sun 18 Aug 2024 07:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 62.60.162.0/24 maxlen: 24
62.60.222.0/23 maxlen: 24
213.176.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 05:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:64:7f:7e:3f:2e:22:e0:5f:b2:81:fd:a6:b4:7c:c5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 18 07:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef2666c0242edcbc2f8c627072a613096711b1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:07:38:f0:9f:30:14:64:1c:3b:4a:c3:2a:
b1:17:2f:b8:c3:50:d8:19:33:42:da:25:7d:b1:2c:
ac:65:f1:2c:b4:14:58:03:2f:b4:39:8a:42:69:04:
e2:27:58:50:3d:63:4d:39:be:8e:e9:7b:36:44:9c:
09:0d:1b:d9:40:80:ed:88:e9:f8:f5:ea:50:b5:12:
87:a6:f6:ce:ea:7f:76:68:16:60:a5:a2:fa:b1:4a:
2d:af:65:58:4d:e0:74:cd:8e:b6:0e:c9:fd:01:f3:
70:54:40:da:29:9b:8d:91:15:45:87:e6:d7:41:6f:
4d:1b:af:1f:17:43:b7:59:5f:a5:71:f4:3b:d9:8a:
b0:af:2e:77:7f:50:17:31:b3:16:fc:eb:eb:5c:74:
48:71:b9:86:99:dc:0f:5a:4a:d2:5f:28:e8:a7:e4:
4d:f8:85:13:d4:cb:05:08:ce:01:0c:01:9f:b4:05:
9b:85:4c:cd:28:42:e8:d4:a0:d6:2b:22:ed:06:cb:
2e:37:e6:0e:9f:59:35:dd:cb:be:20:9e:7e:d8:49:
00:0d:b8:17:77:f6:72:ff:5a:1e:07:4d:75:59:64:
4f:83:38:2e:57:99:77:ce:3c:a1:5f:64:30:bb:f0:
29:c7:9b:0f:41:92:78:11:57:ec:1e:15:5b:be:32:
89:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:26:66:C0:24:2E:DC:BC:2F:8C:62:70:72:A6:13:09:67:11:B1:F7
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/7yZmwCQu3LwvjGJwcqYTCWcRsfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.162.0/24
62.60.222.0/23
213.176.1.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:fd:d8:b8:c8:26:f0:46:e3:0c:9e:ab:bf:c0:78:f4:93:98:
d1:e2:fc:c0:a8:1f:5c:e7:9c:52:2f:32:52:a9:54:d1:f4:8b:
69:17:7b:1a:7c:0c:22:95:64:b3:00:d4:74:26:d9:80:1d:44:
b2:46:2c:cb:db:3f:58:44:a1:24:2a:23:63:73:62:c2:34:b8:
50:19:d0:8f:ae:e5:d3:99:7e:90:96:e2:64:58:a0:dc:5b:5e:
f8:67:28:bb:c8:b0:ef:9c:81:3e:45:30:a5:e8:24:e7:78:d0:
b4:7b:f6:29:de:a8:96:8c:eb:19:3a:5d:d2:30:11:69:bf:ab:
b4:5a:81:2d:d8:d2:ca:ef:7b:0f:a7:a2:d0:50:1b:7e:dc:1c:
16:ad:66:97:76:48:ca:42:2b:6f:77:9a:00:ab:89:e3:c5:0d:
84:4e:76:a0:7e:5c:46:71:ff:d7:7f:6f:09:ec:41:54:c9:30:
2e:63:d6:78:70:60:62:c3:c8:26:66:e7:e8:0a:fc:cd:32:21:
4d:8f:49:ef:d7:dc:6a:aa:17:ac:60:94:d5:61:2e:9d:a6:15:
3b:9f:57:98:0d:c2:6f:a2:5e:f5:eb:e8:f1:99:68:46:c3:71:
b0:73:b2:12:f6:e3:f8:cd:c3:83:4e:7c:b3:cd:e9:23:ca:d9:
a4:45:a6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 08:56:54 2024 by rpki-client on console-ams.rpki-client.org