Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/BSHItOa64vTLSn8TM5BhCXZRmmQ.roa
File: BSHItOa64vTLSn8TM5BhCXZRmmQ.roa (raw, json)
Hash identifier: uF5u1nJGc40YnH6V7tBGuc3iHAbdZwjQIvePqqRjdl8=
Subject key identifier: 05:21:C8:B4:E6:BA:E2:F4:CB:4A:7F:13:33:90:61:09:76:51:9A:64
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01920390B8A6A319980D02C9F25ECBB657A9
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/BSHItOa64vTLSn8TM5BhCXZRmmQ.roa
Signing time: Wed 18 Sep 2024 05:17:48 +0000
ROA not before: Wed 18 Sep 2024 05:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50053
IP address blocks: 62.60.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 08:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:03:90:b8:a6:a3:19:98:0d:02:c9:f2:5e:cb:b6:57:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 18 05:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0521c8b4e6bae2f4cb4a7f133390610976519a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:2a:03:8b:a4:8e:03:08:a0:cb:30:0a:1e:cd:
7a:9c:cc:ee:d2:f4:7a:dc:62:f9:b9:94:de:be:d9:
4e:62:90:9b:01:38:bc:90:3d:3c:96:08:0c:02:f2:
d7:bd:5b:3c:8c:1f:bd:06:99:c2:3e:c7:2b:7a:ba:
79:01:95:8a:54:5a:b9:b8:9a:62:a2:90:8c:95:d5:
39:52:31:36:87:25:47:c8:35:fd:d1:e6:1a:8f:95:
3f:dd:e1:f0:f6:d7:44:9c:cf:93:ec:5f:33:ae:bb:
05:61:f5:16:1c:32:9f:c6:59:19:0e:38:87:9c:2b:
92:cc:b9:09:eb:eb:1b:c5:0b:2b:9b:06:98:ac:cb:
9f:6a:3a:48:d1:24:8d:1c:89:14:8e:77:ad:56:04:
71:15:77:49:9e:98:76:89:79:a4:42:b8:3e:8e:56:
91:c5:8c:d8:9e:a0:70:1c:a2:77:91:51:dd:32:54:
aa:54:a7:6d:23:e3:7a:cc:99:7e:ff:e3:de:e7:e9:
fb:24:9f:a9:15:a0:74:e9:01:f2:d8:a9:28:22:bd:
5c:95:32:51:5e:99:a5:32:c3:1c:f2:dd:28:6b:96:
97:24:14:8c:4d:ef:c1:11:5e:cd:c1:8c:91:26:ad:
cd:85:bc:66:21:77:9d:fd:ca:ee:53:07:b7:dd:37:
9c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:21:C8:B4:E6:BA:E2:F4:CB:4A:7F:13:33:90:61:09:76:51:9A:64
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/BSHItOa64vTLSn8TM5BhCXZRmmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.228.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:77:6d:e8:90:a3:0b:97:32:0b:e9:58:2e:66:54:f3:8a:9e:
60:d1:0d:19:16:fc:73:a5:53:55:3d:ae:d8:5e:d4:f1:e3:df:
cb:31:2a:cc:58:cc:4e:55:6d:7a:a4:e4:01:2d:14:d0:c2:2c:
f2:f1:3b:e5:5a:d5:e8:64:d1:61:7a:bf:3a:1f:64:d6:1b:7c:
93:9a:d5:e0:81:e6:40:9a:5c:12:1b:28:07:0e:ec:5c:da:17:
b9:82:be:d3:dc:ea:13:8a:f9:5d:fb:0c:47:a4:74:32:42:65:
ca:f1:f6:68:09:5b:5c:a4:54:9b:d5:61:70:f2:ff:41:16:79:
47:76:88:66:29:e0:fe:74:98:dc:8d:92:35:8f:5b:6f:3d:19:
fb:35:a5:f5:a5:7f:90:6b:b8:a1:c0:2e:0b:d8:b9:03:69:84:
77:71:45:d7:c3:e0:5f:5a:1f:a0:42:49:92:f1:ce:e5:ac:77:
5a:3a:39:b3:b8:6a:e3:c6:4e:33:80:a1:ff:a0:dd:aa:69:49:
72:fb:c1:3d:16:ea:0e:58:45:cf:92:a3:a1:22:ef:53:34:cc:
0a:79:95:33:86:81:0c:9b:88:59:87:05:74:d4:c0:b7:95:f5:
51:be:ae:b1:bc:be:f0:22:0c:5f:8a:aa:61:71:9b:4e:15:e9:
e4:e1:5d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 09:32:56 2024 by rpki-client on console-fra.rpki-client.org