Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/92G9qD4elR-Hn0agcpsCAM5siuM.roa
File: 92G9qD4elR-Hn0agcpsCAM5siuM.roa (raw, json)
Hash identifier: b1oikBhgq0qSKSK38Z89wPw4OQkr+jDFuIFYNmttQ70=
Subject key identifier: F7:61:BD:A8:3E:1E:95:1F:87:9F:46:A0:72:9B:02:00:CE:6C:8A:E3
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0191647F7EF3B513F7D5DDC538077FCF3568
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/92G9qD4elR-Hn0agcpsCAM5siuM.roa
Signing time: Sun 18 Aug 2024 07:59:22 +0000
ROA not before: Sun 18 Aug 2024 07:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214922
IP address blocks: 62.60.192.0/24 maxlen: 24
62.60.220.0/24 maxlen: 24
62.60.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 07:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:64:7f:7e:f3:b5:13:f7:d5:dd:c5:38:07:7f:cf:35:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 18 07:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f761bda83e1e951f879f46a0729b0200ce6c8ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d7:b2:82:e5:85:41:d6:1d:27:09:c8:c2:7a:
d3:28:a4:c8:b6:c8:2a:77:68:63:ea:8d:34:74:41:
eb:79:c7:f7:32:25:14:f3:38:50:81:c9:bc:fd:c1:
9c:95:a6:20:1e:9c:23:d3:69:38:a7:d4:66:18:9b:
38:9a:eb:31:61:fe:25:32:fb:f9:23:f9:2e:36:56:
2d:17:7e:a9:f4:1a:8e:49:7e:8d:ca:93:ab:d4:0d:
64:a1:3d:a5:35:18:61:b7:4f:35:e8:06:48:98:89:
20:87:a7:16:cf:6d:b5:47:ec:0d:e4:3c:7e:db:a4:
bc:2b:e9:62:09:9e:43:38:44:b0:5f:e7:05:1c:23:
38:a8:a1:76:f3:31:5c:fb:b4:19:5c:74:e4:18:63:
ff:19:9c:cf:b5:6d:ef:7d:bd:9b:c7:a8:fb:e8:19:
2c:3a:c0:0a:61:3a:c6:c1:c4:42:18:4e:87:05:b6:
eb:4a:75:d7:4f:70:86:11:3c:96:e2:8b:bd:00:d3:
63:e3:a6:d9:f5:f9:78:94:f0:5b:01:86:03:b8:e2:
80:60:2e:4b:fb:fb:6b:6a:4c:81:4f:47:0d:a3:44:
4a:96:bc:3c:47:cf:f8:01:05:a8:a6:04:55:d5:e1:
2b:27:f2:f3:30:b2:cf:35:f2:aa:3a:84:cd:a8:29:
c2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:61:BD:A8:3E:1E:95:1F:87:9F:46:A0:72:9B:02:00:CE:6C:8A:E3
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/92G9qD4elR-Hn0agcpsCAM5siuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.192.0/24
62.60.220.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:49:5c:80:0f:97:99:f1:30:ad:f1:0c:4d:31:f4:14:e4:fa:
a5:a1:09:df:f3:9b:8e:23:ca:64:48:ea:b9:19:29:03:3f:3b:
2a:80:5a:0a:e9:4a:e5:3f:70:a5:e1:d9:8d:1e:66:ab:a8:f6:
68:34:80:ce:b3:93:be:19:02:12:8c:98:bf:62:b8:26:b4:0d:
33:4b:9e:90:c4:49:48:49:d7:52:07:a2:b6:96:7d:b3:2c:19:
3c:73:3e:c6:cb:63:0f:45:48:cf:15:8e:48:1d:90:b6:27:98:
2b:3e:80:07:3f:ff:27:59:5f:a6:45:28:32:5d:c9:47:5b:0e:
98:20:a6:9f:22:77:99:d4:4e:e8:00:c1:18:db:e5:00:92:77:
02:5f:5a:9c:59:8e:2a:fa:81:47:09:4c:0b:ab:52:6c:5c:f2:
0d:dc:52:9c:80:4f:e9:32:d9:1a:50:c8:82:67:dd:81:33:3e:
db:1d:6d:b5:3f:46:a6:77:35:1c:10:35:e3:9a:62:d8:50:5c:
fc:95:69:48:24:d7:28:37:38:2f:70:d3:7b:aa:d7:9b:e9:be:
6e:99:31:c7:3e:51:c4:33:81:ea:24:37:00:0f:ff:b8:55:1a:
de:ff:fe:03:5a:1e:31:aa:8d:29:a8:a7:5d:18:fd:5a:c0:f7:
bb:8c:1b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 12:04:17 2024 by rpki-client on console-ams.rpki-client.org