Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8RXkE6jQqe7omCAXYQffgxwfrLs.roa
File: 8RXkE6jQqe7omCAXYQffgxwfrLs.roa (raw, json)
Hash identifier: S+DepSfGQoEl+vyJqPFGWsMo/mGdxCmPUrTibpkKDZY=
Subject key identifier: F1:15:E4:13:A8:D0:A9:EE:E8:98:20:17:61:07:DF:83:1C:1F:AC:BB
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018DCA54AA5ABE0E4D5C753E4DF97FD2E56E
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8RXkE6jQqe7omCAXYQffgxwfrLs.roa
Signing time: Wed 21 Feb 2024 06:22:42 +0000
ROA not before: Wed 21 Feb 2024 06:22:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 62.60.146.0/23 maxlen: 24
62.60.216.0/22 maxlen: 24
213.176.64.0/22 maxlen: 24
213.176.120.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 18:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ca:54:aa:5a:be:0e:4d:5c:75:3e:4d:f9:7f:d2:e5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 21 06:22:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f115e413a8d0a9eee89820176107df831c1facbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:cd:94:e2:58:bb:ff:96:11:90:67:d6:e6:
31:12:bb:72:9d:ee:6e:6a:c5:8e:1d:f2:a2:98:76:
fe:04:9f:1b:65:71:4a:4d:bd:3a:9d:17:09:fa:1d:
42:11:bf:33:71:2c:e0:ec:90:ea:0b:0f:ef:73:30:
0a:a5:1c:b9:02:4f:12:ca:c2:95:c7:6a:b7:e3:ad:
07:3e:4a:73:ab:ff:0b:a6:e1:49:19:4d:38:f1:60:
45:9e:47:b4:0a:5b:c9:77:1a:31:1c:c5:bc:2e:20:
ff:46:a3:9a:ea:d3:db:e4:11:07:66:f0:0c:d1:4b:
58:02:49:73:aa:7a:cb:4f:9c:77:5c:ab:a5:c1:2e:
89:ed:50:57:f1:4b:6a:f2:af:fb:27:f0:04:1b:be:
5d:f7:5e:73:0d:79:b0:81:9d:88:96:da:55:bd:22:
8c:1a:bc:47:ca:55:82:2e:2b:36:09:bc:a6:d2:d7:
6d:06:59:89:11:27:ad:98:b8:41:27:71:ba:20:bb:
14:e4:e7:7c:95:72:e1:84:ff:a5:9b:8a:be:26:12:
39:17:35:c4:42:4c:91:fc:aa:e1:bf:25:ac:84:92:
26:8d:79:8d:2e:f7:c7:b9:14:16:9e:85:9b:ab:b0:
65:24:d7:4e:90:bf:da:14:06:25:1f:38:2b:73:b1:
a7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:15:E4:13:A8:D0:A9:EE:E8:98:20:17:61:07:DF:83:1C:1F:AC:BB
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8RXkE6jQqe7omCAXYQffgxwfrLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0/23
62.60.216.0/22
213.176.64.0/22
213.176.120.0/23
Signature Algorithm: sha256WithRSAEncryption
24:88:ac:6d:24:9c:67:f6:bf:dc:97:39:f1:0f:38:b1:3b:2e:
9e:e4:c5:44:29:4d:e7:22:05:3f:3f:91:d0:23:02:18:2c:80:
29:d8:4f:d9:04:9c:cb:af:b1:b5:fa:82:6b:c0:72:d2:bf:86:
29:14:20:aa:a3:37:7d:22:e6:f7:08:72:f0:0c:39:fa:a0:f9:
83:0d:e6:91:32:1b:eb:dd:ee:62:ab:a9:b3:9f:bf:d5:a6:fc:
e9:b6:5b:be:d4:f2:0c:eb:12:27:3d:96:23:8a:b1:c5:a8:75:
2d:d7:5f:44:b8:aa:2b:86:1f:1f:b8:c0:00:96:2d:6f:55:cc:
55:58:54:8f:b8:ed:94:e6:07:66:98:a8:d8:eb:db:8e:cf:13:
92:ea:74:cf:f4:46:98:fe:95:88:f3:72:fe:d2:a0:58:f5:89:
5e:f5:10:b5:30:a9:dd:1f:78:60:c8:39:83:9b:81:5c:c2:03:
39:b8:57:42:7c:c1:bc:6f:24:c9:a8:76:d2:06:4f:20:82:04:
51:f2:6a:3a:b6:85:53:ae:8c:d1:b1:19:22:1c:e2:07:43:98:
44:a9:5c:f3:aa:11:33:a9:0a:db:84:da:64:f6:90:ee:4b:cc:
0d:7e:1f:90:02:08:db:53:e1:26:b5:3f:a4:ef:c3:97:0c:d0:
d0:6c:61:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org