Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8pQSpSoeUsjNHAmSd3_Qm0ff6lY.roa
File: 8pQSpSoeUsjNHAmSd3_Qm0ff6lY.roa (raw, json)
Hash identifier: KhgflLLH5AFHCzrAX9TCqJFhi2m3jsPw5u5mTrHoaYI=
Subject key identifier: F2:94:12:A5:2A:1E:52:C8:CD:1C:09:92:77:7F:D0:9B:47:DF:EA:56
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0191FEAD316F37B5448AEC05CD9A546D67FA
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8pQSpSoeUsjNHAmSd3_Qm0ff6lY.roa
Signing time: Tue 17 Sep 2024 06:30:48 +0000
ROA not before: Tue 17 Sep 2024 06:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57456
IP address blocks: 62.60.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Sep 2024 20:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fe:ad:31:6f:37:b5:44:8a:ec:05:cd:9a:54:6d:67:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 17 06:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f29412a52a1e52c8cd1c0992777fd09b47dfea56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f0:ae:d5:ce:3b:ae:4a:07:3d:a1:d5:25:dc:
bf:bb:fe:47:0b:17:0c:18:a1:1d:30:4a:7f:ee:b2:
58:1e:8e:90:68:8b:c4:e6:90:7b:88:fb:d5:d5:24:
d5:fb:b2:70:0d:97:05:11:90:c3:c5:d3:12:68:45:
e0:cb:e7:d4:29:33:e5:74:f0:1b:a8:d5:be:ba:76:
7f:73:16:ec:24:a5:c7:61:33:f4:65:16:7b:45:16:
9c:26:58:63:d1:74:b1:47:61:b8:56:74:73:41:59:
2b:46:cd:63:99:c1:8c:87:f8:22:84:52:60:d7:cb:
ec:09:72:ff:2c:11:5f:d9:b4:f7:33:92:76:0b:75:
e4:6e:f0:f7:40:6e:7b:ec:3a:02:5c:35:e0:76:1e:
43:cd:71:2f:94:c3:28:6f:af:d6:57:61:52:fd:09:
80:4a:10:22:51:62:70:a7:2d:2d:bd:6b:dd:a5:2f:
e8:ff:8a:f1:db:3c:2d:65:68:d3:c7:49:42:4f:67:
df:e8:08:6e:e2:5d:6c:61:ac:d4:62:1c:77:4e:35:
b9:a9:38:1d:e0:da:d1:4b:0d:17:e9:de:e8:9a:31:
5e:af:a6:75:67:62:2e:4c:a0:f2:31:2c:71:dd:e8:
ea:e8:53:ce:4e:3c:3a:32:e3:7f:93:9b:b0:26:32:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:94:12:A5:2A:1E:52:C8:CD:1C:09:92:77:7F:D0:9B:47:DF:EA:56
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8pQSpSoeUsjNHAmSd3_Qm0ff6lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.187.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d1:8a:d4:1b:55:be:57:d5:67:75:bf:dd:5c:62:36:4c:dc:
31:84:67:ef:a1:65:29:62:22:d3:3d:10:b5:03:d8:0c:94:18:
3f:f0:c9:0a:40:5c:6e:ca:47:93:51:e3:cc:92:7c:8c:12:ae:
33:4a:93:52:71:df:a3:10:9f:b3:76:ed:20:ea:10:0f:d3:ba:
f6:30:fc:fe:5d:46:9e:70:b7:73:81:9c:db:8d:3e:6a:c5:59:
0e:a4:ab:37:e3:a3:6e:77:b5:e4:be:80:27:60:3e:9e:2a:9a:
ac:4f:43:6f:17:0d:37:b9:59:59:44:28:65:8f:d3:12:a0:57:
80:93:57:0d:45:37:cb:b0:a6:e6:b5:c0:07:9a:f6:5d:93:ea:
39:31:73:0d:12:3f:f1:d6:f2:22:e1:7a:41:57:86:b8:be:06:
a4:ee:5c:4e:8b:7e:86:06:af:ce:c2:6c:d5:ac:ca:f3:4f:46:
ba:0b:43:52:8e:b0:fb:97:94:48:e0:11:a6:62:60:77:5e:b7:
69:58:e4:21:88:9d:83:dc:13:ce:99:ba:f9:59:fc:dc:6d:9c:
f1:58:6e:ae:0d:53:1e:33:4f:d1:9c:ab:96:76:17:3f:37:05:
74:fa:64:8a:54:ce:3a:40:d1:66:56:65:d1:76:04:8f:83:36:
4d:a6:0d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 23:21:45 2024 by rpki-client on console-fra.rpki-client.org