Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/AuFTBDEV1fL3oalvX5eqt2Vw9zo.roa
File: AuFTBDEV1fL3oalvX5eqt2Vw9zo.roa (raw, json)
Hash identifier: VGAeirE7f93GVfe+kkQ9dqyJNDGgGONZcZUje4DRtGE=
Subject key identifier: 02:E1:53:04:31:15:D5:F2:F7:A1:A9:6F:5F:97:AA:B7:65:70:F7:3A
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018FC36230182C3D05E0D3F2764A8B8E5892
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/AuFTBDEV1fL3oalvX5eqt2Vw9zo.roa
Signing time: Wed 29 May 2024 08:05:42 +0000
ROA not before: Wed 29 May 2024 08:05:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 62.60.152.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.216.0/22 maxlen: 24
62.60.224.0/19 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 May 2024 11:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c3:62:30:18:2c:3d:05:e0:d3:f2:76:4a:8b:8e:58:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 29 08:05:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02e153043115d5f2f7a1a96f5f97aab76570f73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:5a:f9:6f:f1:c0:e9:cd:04:01:09:09:30:
ee:0f:3b:c6:74:bd:ca:33:1f:bd:22:7b:3e:5a:ec:
f0:7e:48:85:0f:4d:60:f2:9f:9a:c1:3a:a3:5e:ab:
ca:ab:58:10:66:b9:a9:c0:10:ea:cb:fa:85:10:b9:
d7:53:e2:49:ac:67:48:cb:71:e2:a9:e3:01:5b:3e:
6e:49:2f:68:72:ce:bb:30:dd:d0:e8:35:fd:5b:75:
29:4d:28:69:35:6b:e2:91:99:c9:ba:c1:37:34:d1:
25:a0:6b:0e:be:83:a9:4c:53:2b:d1:ac:a4:b6:0e:
c6:56:75:97:44:e1:fb:83:8a:28:17:6b:b9:a4:f2:
12:06:ec:cb:fe:4f:85:e7:51:41:67:ad:93:fe:da:
9f:a4:d2:06:b8:67:95:b6:f4:59:6d:02:a3:07:e4:
a7:09:c5:9c:79:e9:9c:df:00:99:44:0b:3e:cb:90:
22:47:ea:18:4c:70:29:aa:e1:0f:e5:d0:0a:d8:d3:
c8:7e:04:8b:46:ae:7d:1b:a7:4f:15:ae:2b:97:fc:
ad:d5:9e:ba:f6:e7:50:01:86:60:04:d8:57:37:f5:
22:a2:dc:8c:75:d2:bf:fb:20:e0:da:66:74:02:7b:
f8:01:81:48:ca:df:aa:5b:aa:17:8d:f0:68:34:7f:
e4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E1:53:04:31:15:D5:F2:F7:A1:A9:6F:5F:97:AA:B7:65:70:F7:3A
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/AuFTBDEV1fL3oalvX5eqt2Vw9zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.152.0/22
62.60.192.0/22
62.60.216.0/22
62.60.224.0/19
Signature Algorithm: sha256WithRSAEncryption
73:f7:95:da:bc:db:81:41:94:df:02:95:21:67:40:f5:89:f2:
f5:d8:24:0c:c9:d7:a4:0c:ba:ae:25:31:76:73:26:96:ca:db:
0c:69:a5:f4:c8:a2:cd:1e:56:a9:8e:08:42:52:99:78:71:ea:
6b:b0:b1:e3:ee:f6:6c:21:1d:ea:8e:6a:be:4f:26:c2:4a:34:
42:96:b0:21:c7:35:cb:46:db:09:1a:a1:3c:55:db:c5:aa:a2:
83:43:4f:df:41:08:39:da:6e:04:31:f7:c6:86:49:79:87:fd:
06:63:2f:2a:66:90:7d:04:94:4d:27:c8:cf:ee:80:2f:a7:48:
93:66:c7:33:cc:25:bc:1b:0a:17:3a:2c:f6:97:f5:4f:2c:0c:
e0:dc:2f:b2:e5:59:8e:93:f6:b0:75:63:dd:9b:30:b3:7c:94:
bb:4c:c2:dc:0f:8b:24:31:cc:4a:fc:b3:41:fd:5c:02:a6:40:
61:32:f5:72:12:ab:5e:4a:33:ca:f2:01:9e:16:68:00:dc:64:
77:5c:8f:5c:08:1c:fe:a1:eb:62:c8:aa:c2:14:1a:5b:1b:b5:
bb:e0:cd:0b:27:66:9c:57:0e:8c:34:a9:61:66:61:85:7a:78:
37:73:a9:f2:c0:46:b7:33:68:5b:7b:d6:3a:3a:41:cd:8a:01:
ea:0b:4f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org