Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9AW_XzBZlTkN1WfP4l5tYLqDD0M.roa
File: 9AW_XzBZlTkN1WfP4l5tYLqDD0M.roa (raw, json)
Hash identifier: +oamS3luzteQ9dIj0Ls8b/6cxnDl/laeL8vNE/SKP5c=
Subject key identifier: F4:05:BF:5F:30:59:95:39:0D:D5:67:CF:E2:5E:6D:60:BA:83:0F:43
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01915F45E8CDFFFA2017E44A6351072C7DE0
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9AW_XzBZlTkN1WfP4l5tYLqDD0M.roa
Signing time: Sat 17 Aug 2024 07:38:22 +0000
ROA not before: Sat 17 Aug 2024 07:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 62.60.148.0/22 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 10:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5f:45:e8:cd:ff:fa:20:17:e4:4a:63:51:07:2c:7d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 17 07:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f405bf5f305995390dd567cfe25e6d60ba830f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0b:30:10:f3:b2:49:ee:87:85:0e:a7:cd:02:
85:56:99:fa:43:1a:30:e1:31:77:71:9b:c1:ac:4a:
3a:8f:98:55:1c:c9:33:4d:0f:7b:15:8b:dd:1f:2f:
7e:14:e4:a2:49:c6:82:81:30:4d:e4:51:76:7b:ef:
ad:f0:49:95:3b:56:dd:b8:00:47:b5:d5:44:da:07:
fd:73:0b:51:15:25:25:5f:f6:6f:55:4c:c5:2f:37:
34:2d:2c:3e:c2:84:91:61:70:77:bd:80:32:54:0a:
2e:a6:1c:4f:da:3b:63:89:a3:b1:bd:3d:c0:9e:25:
4c:ae:88:64:e0:09:a6:1e:ad:f0:e5:4e:31:e4:94:
f6:2d:34:38:0d:66:be:3f:a1:39:69:e7:eb:71:5e:
2e:27:8a:41:4a:5a:32:46:18:07:25:97:23:29:9f:
84:55:76:30:cd:25:ea:c3:a0:ba:a3:3d:7a:f8:28:
31:05:e4:ed:c0:1f:81:3d:f6:95:c4:75:88:48:17:
c5:af:82:a5:0e:b1:1d:3d:12:7d:b4:48:ff:a2:ed:
d0:3b:76:a2:59:7f:3d:06:b3:69:f6:79:a8:4d:2b:
6d:07:0e:85:04:de:b2:1a:97:0e:59:bf:a9:1f:aa:
ee:8e:4c:d6:36:d9:d0:64:40:dd:ff:43:f4:02:0e:
7b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:05:BF:5F:30:59:95:39:0D:D5:67:CF:E2:5E:6D:60:BA:83:0F:43
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9AW_XzBZlTkN1WfP4l5tYLqDD0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0/22
62.60.196.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:2d:6f:55:f2:50:d2:68:9a:02:2a:d4:ea:de:cc:d5:43:22:
5a:95:43:89:73:69:a3:93:6f:24:25:c9:46:45:3e:67:58:37:
1e:79:24:9d:56:b4:32:e5:cd:1f:f5:85:85:c7:c4:f3:53:64:
d7:3a:46:4e:72:80:42:5c:e9:4c:bb:a8:d6:3a:b8:f5:38:f0:
5a:e3:17:c4:c2:9b:69:14:36:a7:2c:76:55:a9:40:2b:ee:7e:
ae:ef:66:82:37:17:c2:01:6c:1b:5a:ce:9d:1c:88:81:28:c0:
1f:79:95:81:77:69:7d:c1:2b:f1:00:22:ff:f0:2b:b9:f4:69:
6f:e4:6c:2d:50:74:4a:a6:af:ab:66:b6:e3:57:3a:2f:d2:58:
bf:e6:af:85:fb:4f:6a:18:ba:01:33:dd:d2:97:82:55:e9:99:
d1:e0:85:ba:fc:c4:f9:55:e6:b6:c2:39:98:cc:dd:26:65:06:
3e:82:f5:38:f5:c7:9b:e3:77:1a:6c:ae:3d:67:da:7d:83:3d:
56:90:6e:b5:88:02:8b:0f:b0:04:cb:c6:39:65:09:83:dc:a8:
5c:4d:e1:25:13:fd:6b:f4:d2:b9:61:e5:15:06:ab:51:9d:14:
f3:6f:fb:e2:87:f6:b2:32:3f:0c:ee:fd:28:4f:41:c8:36:17:
3c:2e:ec:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 17:10:12 2024 by rpki-client on console-ams.rpki-client.org