Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8nFuUD8ZxH6Q3-jJ5hnLyCikdDQ.roa
File: 8nFuUD8ZxH6Q3-jJ5hnLyCikdDQ.roa (raw, json)
Hash identifier: O66icsEuZ9Gh48RjAtCLcNtTDw66+nLRsTyzqoEOZVg=
Subject key identifier: F2:71:6E:50:3F:19:C4:7E:90:DF:E8:C9:E6:19:CB:C8:28:A4:74:34
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01904E26599487221FAA1A187740D9CB79B5
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8nFuUD8ZxH6Q3-jJ5hnLyCikdDQ.roa
Signing time: Tue 25 Jun 2024 06:47:34 +0000
ROA not before: Tue 25 Jun 2024 06:47:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55933
IP address blocks: 62.60.216.0/23 maxlen: 24
213.176.72.0/23 maxlen: 24
213.176.72.0/24 maxlen: 24
213.176.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Aug 2024 07:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:26:59:94:87:22:1f:aa:1a:18:77:40:d9:cb:79:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 25 06:47:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2716e503f19c47e90dfe8c9e619cbc828a47434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:f9:bc:1e:04:f0:80:f1:cb:31:07:e7:b0:
a0:03:49:24:8c:37:43:55:7f:d9:2c:fc:be:ee:2e:
bf:c8:e9:b3:be:9d:31:c8:a8:79:bf:a8:30:bc:3b:
7f:e3:79:15:5b:fd:23:b5:e1:fe:d7:7e:39:2b:38:
37:4e:07:8d:d0:8c:1c:49:59:a3:3e:fb:33:20:6c:
6e:a7:b1:21:48:6b:ef:0e:42:15:fa:13:4e:64:5a:
e8:83:81:ea:2b:8a:97:70:19:cb:00:75:92:48:8b:
48:bc:f0:3f:48:3b:3a:06:31:d2:2c:d1:d4:5d:c8:
00:9a:69:1c:4f:6f:e9:79:0f:68:f1:cd:52:20:69:
3b:f4:54:b4:fa:f0:73:f6:ef:71:18:cd:5b:9f:0f:
b7:47:86:47:6d:c1:4e:52:44:8f:82:c8:17:d3:37:
fe:91:7a:ca:47:be:99:8b:20:63:23:e1:e1:6f:a8:
28:dd:48:88:bd:bd:ec:6a:97:c2:0b:05:7c:47:ba:
4a:b8:54:2a:b6:6b:bd:b5:89:b2:29:41:e0:29:e5:
0f:61:ff:3e:ad:b4:18:f5:21:27:52:00:28:ed:18:
4f:e3:a5:f9:29:bc:21:bf:f6:a9:d5:95:15:48:b5:
8a:e3:53:ea:49:e2:3e:ef:c1:ef:3f:b5:0f:a4:33:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:71:6E:50:3F:19:C4:7E:90:DF:E8:C9:E6:19:CB:C8:28:A4:74:34
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8nFuUD8ZxH6Q3-jJ5hnLyCikdDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.216.0/23
213.176.72.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:28:5c:4a:e0:40:9a:cb:44:c5:e0:1a:bb:bd:b8:e3:55:45:
b2:87:e2:1a:92:1d:28:e5:d6:f1:4e:82:99:2e:36:f2:57:1a:
8c:d5:9c:49:62:bb:03:2d:75:4d:d4:c3:d9:6e:3d:39:db:c5:
d3:ec:fe:ae:51:1d:2c:ed:dd:1d:69:62:59:c2:48:c6:33:07:
55:bc:f1:57:d0:fe:66:a2:53:3b:55:70:bc:ba:5a:a1:2f:76:
23:3e:74:be:be:18:93:bd:ab:ff:ee:9c:be:66:e8:b0:53:c3:
89:1c:fc:a4:b7:24:19:e2:ed:da:b0:05:2f:b6:d5:99:62:99:
ee:95:1f:90:16:9b:6c:45:4f:7f:cb:75:a6:6a:db:8e:a4:af:
f9:69:28:85:45:4c:5c:cb:17:c8:73:f5:76:4d:77:d5:0f:49:
72:f3:fa:74:8a:4c:93:fb:6d:e0:dc:7b:8b:21:c3:f5:c8:91:
cd:e0:3b:12:75:b0:d5:48:7a:c3:58:aa:5d:c6:f2:91:7f:aa:
c8:c8:ca:77:0a:ea:56:ad:17:97:98:01:19:f4:21:d9:22:2f:
84:9d:38:4d:e8:c1:30:1e:31:ea:59:e2:2d:31:57:80:39:cb:
fb:e6:0b:07:5e:cc:f2:b5:23:1c:d1:22:13:09:a1:9b:22:1d:
29:06:56:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 10:34:37 2024 by rpki-client on console-ams.rpki-client.org