Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8VapWyy3T---QCuZXVg8PepX7cw.roa
File: 8VapWyy3T---QCuZXVg8PepX7cw.roa (raw, json)
Hash identifier: MdrlQcwBWj7gRW59tGuD8LXCQ7tFo7SH2Mp14qs8fv0=
Subject key identifier: F1:56:A9:5B:2C:B7:4F:EF:BE:40:2B:99:5D:58:3C:3D:EA:57:ED:CC
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CCA29C3AB87589CDD712585D076D82A76
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8VapWyy3T---QCuZXVg8PepX7cw.roa
Signing time: Tue 02 Jan 2024 12:33:03 +0000
ROA not before: Tue 02 Jan 2024 12:33:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 62.60.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 06:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c3:ab:87:58:9c:dd:71:25:85:d0:76:d8:2a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 12:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f156a95b2cb74fefbe402b995d583c3dea57edcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4d:d7:f5:52:65:63:26:51:b5:2c:3c:71:82:
51:b1:aa:49:1b:1d:96:37:05:b6:52:5f:46:ea:0d:
39:23:67:0f:35:9a:b0:e1:46:cc:3c:8c:02:fa:9e:
d9:33:08:9d:0f:d5:5d:cd:f4:7c:19:2d:33:1e:89:
7d:68:77:00:27:09:8a:66:3d:0d:cb:5e:4d:13:bc:
33:7a:f9:d6:70:cc:d8:63:c2:b3:9b:91:e5:64:cd:
45:30:b2:04:a6:aa:be:9e:17:26:78:84:04:cd:e3:
d9:1b:5d:84:de:e4:e0:d8:b5:42:81:c1:f3:5c:a7:
ab:f8:8b:7c:86:6b:4e:62:bb:61:c7:aa:06:d6:95:
7c:4d:8d:80:1f:ab:a2:2c:87:9b:b0:3d:18:3d:80:
3d:e9:ee:6d:3c:81:3c:e5:8c:75:ad:28:53:dc:71:
aa:b0:ea:be:9f:71:c6:6e:0c:10:e9:1c:18:ba:91:
de:6a:da:81:ba:65:2d:c4:35:31:10:68:69:f0:77:
f1:9d:91:aa:52:3d:e5:f5:2d:54:cc:83:1f:3a:7e:
b4:58:7a:72:04:55:e6:ae:20:b9:62:fe:85:c7:89:
68:14:4c:16:fb:42:af:7d:7d:62:c9:d8:06:50:45:
73:41:74:ec:3d:c5:33:0a:20:bf:bc:9d:15:78:46:
c5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:56:A9:5B:2C:B7:4F:EF:BE:40:2B:99:5D:58:3C:3D:EA:57:ED:CC
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8VapWyy3T---QCuZXVg8PepX7cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.152.0/22
Signature Algorithm: sha256WithRSAEncryption
87:31:1a:71:c8:91:25:a7:d7:45:26:e6:f8:5d:66:b7:4d:2a:
1f:8f:66:98:bd:a7:37:91:55:a1:82:89:bf:d2:51:25:17:b8:
69:cb:65:89:e0:3a:8e:0d:68:ca:e6:ab:d8:ad:33:8c:0d:08:
96:13:05:72:09:10:48:31:31:ef:29:de:ac:6d:47:65:55:1c:
d1:ec:2b:5e:c1:0f:31:01:9d:15:67:fe:0d:04:ff:c7:13:a9:
ab:66:14:3a:b3:72:1e:b7:e9:43:79:8d:62:b1:61:cf:15:05:
45:67:78:b9:af:5e:c1:47:d3:c7:61:b0:9a:67:5f:43:14:b8:
23:16:02:79:0c:a9:fb:45:af:b2:06:8c:e7:27:be:9a:a0:f9:
c3:f9:f5:7c:98:81:cc:9e:1c:a5:69:12:59:25:b7:8f:4f:c7:
7b:0f:a2:d6:99:5f:3a:55:be:7f:db:d6:c6:22:b5:89:f2:20:
13:90:df:87:83:80:b8:09:2a:81:0d:df:7a:a5:01:84:52:f5:
d7:c4:16:0b:2d:f1:ef:c9:39:eb:f1:5c:9e:a5:a4:25:71:ca:
8b:17:6f:31:a7:fa:53:42:26:a0:08:95:5a:34:51:ea:6c:f4:
80:fe:ee:ab:68:a9:b7:70:1d:68:b0:c0:7c:76:6e:6b:37:d4:
21:9f:22:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org