Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8DmU-b54AM-JMeFhbcQCJyXcPZg.roa
File: 8DmU-b54AM-JMeFhbcQCJyXcPZg.roa (raw, json)
Hash identifier: jB0+soQFzs2p1z+qWqyLSseRzPf04m3nVSk64b9UOVI=
Subject key identifier: F0:39:94:F9:BE:78:00:CF:89:31:E1:61:6D:C4:02:27:25:DC:3D:98
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0193151D994ECB108EC55E91B1E32F11FDD1
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8DmU-b54AM-JMeFhbcQCJyXcPZg.roa
Signing time: Sun 10 Nov 2024 08:08:01 +0000
ROA not before: Sun 10 Nov 2024 08:08:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 62.60.148.0/22 maxlen: 24
62.60.152.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 05:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:15:1d:99:4e:cb:10:8e:c5:5e:91:b1:e3:2f:11:fd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Nov 10 08:08:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f03994f9be7800cf8931e1616dc4022725dc3d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:1f:b1:6a:d2:57:86:e2:11:6c:79:7a:f0:
d8:6d:93:60:f8:c4:f1:c1:00:38:27:ac:33:d4:f0:
cb:6a:2a:e9:43:56:af:fe:d5:b0:65:76:9a:06:d2:
45:6f:7c:e4:87:49:0c:6f:84:3a:ca:da:08:67:0c:
01:87:b5:8d:ab:4e:19:8d:be:f6:d6:02:fa:de:fa:
6a:a9:af:be:03:51:d3:76:23:ff:0f:18:4d:de:18:
1f:7d:0f:90:bb:5b:24:e0:1b:df:fc:4c:bb:7c:de:
c1:e7:4b:f9:d2:64:6f:1a:d8:b4:41:ae:0c:2a:53:
28:42:15:66:26:9f:87:fe:61:04:6b:b8:fb:3d:4e:
39:79:81:e7:21:5f:46:8d:eb:f9:74:c9:ba:b9:d0:
53:87:b2:38:21:72:03:cb:00:1d:b3:1c:aa:1b:81:
28:01:07:a4:77:17:84:38:24:9b:81:f8:73:40:5d:
d8:b8:f2:24:b2:68:81:44:29:f7:3b:78:22:55:24:
66:cc:91:02:96:d1:e4:f8:ec:84:5b:32:e4:1d:c8:
43:ba:c8:c5:80:c2:39:3c:0c:93:0b:31:65:f1:f4:
57:8f:f1:7d:a9:5a:fc:71:e9:d6:0c:ea:84:a9:12:
23:91:55:ec:c5:b2:80:36:aa:01:bd:5f:67:74:29:
d4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:39:94:F9:BE:78:00:CF:89:31:E1:61:6D:C4:02:27:25:DC:3D:98
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8DmU-b54AM-JMeFhbcQCJyXcPZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0-62.60.153.255
Signature Algorithm: sha256WithRSAEncryption
a7:df:9e:3c:f4:5a:e5:ad:03:62:45:83:8e:2f:cc:d0:a4:fa:
22:0d:73:2e:5b:05:cd:0d:9a:b9:93:ea:0b:ee:cc:93:b4:00:
92:64:25:45:e9:71:87:28:83:51:3d:02:80:62:36:97:89:1f:
f8:05:c6:12:3c:66:e9:09:e7:ed:7b:a8:bd:c1:38:0a:28:8a:
3b:ee:26:15:0a:e8:28:55:b1:f8:9f:07:a2:ea:f1:04:1d:b2:
7d:0c:8e:8c:b6:ed:56:23:e3:c2:68:52:73:c9:92:f1:21:7e:
d2:c2:59:59:82:10:0b:35:54:1e:31:e8:45:31:94:51:80:e7:
42:39:42:de:d5:eb:ac:9f:f5:a9:76:78:24:1c:eb:eb:97:5a:
3e:c9:38:c6:0b:3b:57:c6:39:24:a3:51:b9:52:ee:6b:e0:95:
42:c5:f4:4d:58:c5:28:a7:66:55:00:75:14:29:ba:74:64:0c:
e2:77:e1:16:32:c6:03:5e:cc:a5:24:e3:5a:cd:57:67:1a:1e:
05:12:91:70:62:10:c4:1d:4c:ef:56:ac:e1:6e:a1:0b:0c:77:
0d:2f:48:c2:27:d8:ba:0b:3b:32:14:74:28:9f:2a:37:11:61:
8b:4d:bc:72:8f:36:21:56:97:df:25:a5:b0:60:e9:85:87:84:
1f:6a:32:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 07:15:31 2024 by rpki-client on console-fra.rpki-client.org