Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/A6-JbpGmmB6U9uU00e32mcshg-M.roa
File: A6-JbpGmmB6U9uU00e32mcshg-M.roa (raw, json)
Hash identifier: nlnYMvPTJPMN+VWGIsLghbFtpa2Dc4QPHiK1RCHfx80=
Subject key identifier: 03:AF:89:6E:91:A6:98:1E:94:F6:E5:34:D1:ED:F6:99:CB:21:83:E3
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0187699FA4418AE6A656D6F29FB5903D272E
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/A6-JbpGmmB6U9uU00e32mcshg-M.roa
Signing time: Mon 10 Apr 2023 05:24:42 +0000
ROA not before: Mon 10 Apr 2023 05:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53356
IP address blocks: 62.60.164.0/22 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.176.0/22 maxlen: 24
62.60.180.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.188.0/22 maxlen: 24
62.60.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:69:9f:a4:41:8a:e6:a6:56:d6:f2:9f:b5:90:3d:27:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Apr 10 05:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03af896e91a6981e94f6e534d1edf699cb2183e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3a:32:98:8e:3b:56:03:6d:b7:cf:ab:e3:a5:
86:57:14:c3:50:ba:7d:a4:79:c7:36:fc:1f:bb:09:
40:05:8b:4d:fc:69:8a:0c:d3:2f:9d:c4:81:ce:a0:
9d:dc:5c:46:20:3a:a0:a3:9d:02:5a:7a:24:1f:36:
68:7e:f7:60:d6:c7:e0:d8:5b:fd:11:2e:e7:45:2a:
ca:88:c1:de:8a:89:2e:06:ef:ca:db:cc:c5:bb:4a:
fd:ea:d4:c8:aa:b1:e2:9d:08:40:ab:e1:9f:53:07:
3f:3b:74:4b:a5:40:1c:97:9b:62:14:9d:8f:39:8f:
9c:9f:65:a3:b0:81:a5:6f:c1:af:38:db:c9:2f:3f:
88:72:3b:4f:47:e5:44:0c:f5:3d:12:73:b4:61:89:
89:f9:1f:88:e6:55:9d:21:9e:59:53:10:61:41:2f:
da:7e:81:f0:40:1c:32:0d:0f:99:dd:77:89:86:42:
40:6c:82:ad:a3:00:12:0f:af:69:13:78:f5:76:0f:
ff:3e:1e:1c:88:6c:2b:55:1b:6b:e0:a2:e9:38:ee:
2a:79:b8:88:83:8f:25:ac:5d:82:b6:11:96:be:7c:
7c:af:52:81:ca:95:33:8f:95:b8:61:e0:82:ed:33:
5a:d4:b9:fa:52:9b:3a:1a:98:b7:a6:82:7a:da:09:
01:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AF:89:6E:91:A6:98:1E:94:F6:E5:34:D1:ED:F6:99:CB:21:83:E3
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/A6-JbpGmmB6U9uU00e32mcshg-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.164.0-62.60.183.255
62.60.188.0-62.60.196.255
Signature Algorithm: sha256WithRSAEncryption
54:56:db:45:52:ed:58:2c:04:70:b9:8b:2a:60:1c:91:c1:a8:
92:7b:10:3b:b0:be:81:b5:92:b5:cc:72:a2:11:08:c6:7a:a0:
6e:f7:ca:79:8f:27:74:82:a9:3b:00:5a:f0:db:6c:66:b6:b5:
14:5c:12:bf:10:cd:40:1a:97:d2:fd:0f:c0:3a:31:91:ab:71:
8d:f6:84:14:31:6b:fd:38:69:7b:c6:cf:b7:37:77:98:8a:c9:
a8:7e:b8:97:4e:c6:ec:68:e2:2a:4b:53:3b:8b:a5:16:55:91:
98:69:3c:c7:7b:ae:fc:b3:50:d7:85:70:e8:75:a8:56:de:c7:
19:48:3b:03:c8:63:c3:a6:d8:f3:ab:18:8b:a7:d2:9f:70:a3:
88:07:9f:1d:80:ab:2d:74:db:0d:b3:b7:67:70:40:cc:bf:e7:
77:ee:9d:bd:d6:0b:be:ea:2c:e5:3c:fa:28:df:70:66:86:4a:
51:cf:55:fb:59:af:de:8b:ae:f4:cb:49:e8:ae:98:60:43:55:
97:b0:e1:a0:84:df:d3:cc:db:87:88:a7:eb:67:77:39:40:0f:
ee:ef:9a:15:19:97:38:66:66:0d:38:f8:26:20:c3:91:dc:ff:
b5:94:3a:76:e2:a8:ad:d2:ae:44:ea:81:c8:d5:c3:66:0a:58:
de:e4:31:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:23 2023 by rpki-client on console-ams.rpki-client.org