Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9o8KduSSfW8DLtbgV9T1jgveTZo.roa
File: 9o8KduSSfW8DLtbgV9T1jgveTZo.roa (raw, json)
Hash identifier: hoKuDbR8JZzpGEjDpj98llvgd8XQ/qCGlv5MGL0urwg=
Subject key identifier: F6:8F:0A:76:E4:92:7D:6F:03:2E:D6:E0:57:D4:F5:8E:0B:DE:4D:9A
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0186217CC2E6E394494E68FC4BFE1873E398
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9o8KduSSfW8DLtbgV9T1jgveTZo.roa
Signing time: Sun 05 Feb 2023 12:11:09 +0000
ROA not before: Sun 05 Feb 2023 12:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 62.60.164.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:21:7c:c2:e6:e3:94:49:4e:68:fc:4b:fe:18:73:e3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 5 12:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f68f0a76e4927d6f032ed6e057d4f58e0bde4d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:42:d2:b8:3a:b2:f6:6c:8d:44:26:e2:86:3f:
0a:0e:69:df:c3:21:3e:d6:fd:38:7e:32:f4:20:5f:
72:73:47:88:f6:1e:62:f7:16:cf:08:5f:b7:07:e5:
cf:69:2e:0a:00:8a:b9:d9:e2:7d:22:21:82:3f:94:
ba:ec:72:31:1c:39:fb:7d:5e:e7:1b:a1:07:38:f5:
aa:87:27:fe:ab:59:ba:f9:99:04:d9:6c:99:aa:d8:
0b:87:48:ce:d6:8c:ec:24:3e:af:b9:50:78:58:83:
d6:85:56:5c:ce:c5:e5:b9:00:8a:ec:a5:54:1b:89:
20:3b:8c:90:8d:00:79:83:6e:2c:be:84:3d:5e:dc:
50:95:2c:8d:2e:4f:60:06:9f:9e:de:2e:5f:b7:fc:
ec:96:11:a6:73:87:03:4d:7e:63:fd:31:3e:cb:f5:
41:15:64:2b:c4:69:67:3d:5c:ab:c1:f8:36:87:6f:
ae:1d:d9:bb:32:36:61:72:ab:f8:4a:ab:c4:30:fd:
b3:90:86:81:72:2d:30:c2:e7:5c:9a:72:4b:18:cc:
66:68:00:7a:99:3b:7b:d1:c0:4a:2a:5e:ed:e3:a3:
fc:3c:59:17:b1:f7:4a:94:8d:6c:5b:ec:59:b6:83:
49:2d:9d:a8:28:ba:6f:54:79:6f:e7:27:10:f1:30:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8F:0A:76:E4:92:7D:6F:03:2E:D6:E0:57:D4:F5:8E:0B:DE:4D:9A
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9o8KduSSfW8DLtbgV9T1jgveTZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.164.0/22
62.60.192.0/22
Signature Algorithm: sha256WithRSAEncryption
43:a1:52:77:8b:b0:67:ec:3d:6e:b3:2c:95:3d:dd:c6:df:ca:
cb:f0:7b:c1:31:6a:c3:f5:9b:4e:97:9c:8c:ad:8c:dd:d7:8a:
0b:ae:cc:3c:83:37:9b:0a:e3:74:df:9d:19:bf:ae:ab:d3:81:
97:cf:b6:68:c0:f3:bd:06:c8:db:55:92:ed:36:11:45:38:38:
fe:59:ec:ac:f3:13:3e:b1:aa:62:f9:6b:ce:9d:6d:a9:fc:e6:
c5:b0:2b:72:15:73:1f:70:29:49:05:66:5f:01:15:03:3b:aa:
b7:88:da:b0:e2:48:4b:20:be:5e:d5:7b:af:d1:ac:28:3c:65:
24:8c:32:b8:fb:a1:79:40:29:71:38:9f:7f:8f:f1:35:77:a3:
86:0d:2c:c4:9f:5f:d3:57:3c:9d:5b:1d:53:58:de:ea:a6:af:
06:7c:24:eb:8b:af:a5:41:e3:88:e0:8c:5f:44:30:36:e2:62:
8f:3b:cb:5d:d0:fe:6a:13:ec:e7:4c:72:fc:8e:15:1e:ca:bb:
b2:6a:8c:16:c3:81:4b:9f:bf:20:af:48:e9:15:b8:78:6f:0c:
16:53:fe:85:36:b0:a7:be:4d:b4:c6:e2:1f:79:d2:93:4c:43:
e4:61:12:37:25:92:1e:eb:ae:bb:e7:2f:ad:0f:1c:ba:0d:7e:
62:e8:8e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:23 2023 by rpki-client on console-ams.rpki-client.org