Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/CIoqC1Nz-kA3OuheXDEAkghJRRk.roa
File: CIoqC1Nz-kA3OuheXDEAkghJRRk.roa (raw, json)
Hash identifier: +5dJbnyWHxvbyrA3k2Ux6OfffF0wu36pTYLzELmiUWg=
Subject key identifier: 08:8A:2A:0B:53:73:FA:40:37:3A:E8:5E:5C:31:00:92:08:49:45:19
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01930FFAE6AA9D7A98D69E609785FB6783EE
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/CIoqC1Nz-kA3OuheXDEAkghJRRk.roa
Signing time: Sat 09 Nov 2024 08:12:01 +0000
ROA not before: Sat 09 Nov 2024 08:12:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214046
IP address blocks: 62.60.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0f:fa:e6:aa:9d:7a:98:d6:9e:60:97:85:fb:67:83:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Nov 9 08:12:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=088a2a0b5373fa40373ae85e5c31009208494519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:af:1a:8e:b9:6e:ac:86:5f:a7:73:d1:0f:
58:9d:03:35:26:4f:44:99:52:3f:ac:c2:f0:60:3b:
0b:19:af:ec:c2:d7:a5:2b:0f:02:18:5c:76:bc:fe:
55:b2:86:9e:3b:f6:57:1d:1c:96:05:66:0f:e3:53:
50:b8:f7:6e:a7:60:6c:4f:87:f4:db:90:87:d2:ed:
46:31:df:53:d4:05:d5:ed:fa:68:36:f6:5a:7b:2a:
f8:c2:af:30:e6:29:58:7d:33:6a:0e:6e:e3:59:02:
ff:ba:59:e4:5e:54:9c:f1:87:70:29:f3:46:ab:b8:
dd:58:41:95:30:75:4d:cd:9b:a1:92:4c:ef:65:15:
5b:ee:6c:28:ca:10:86:8d:23:d0:17:99:9c:6f:3d:
6d:60:57:de:90:b3:62:9b:4b:4d:96:d6:f9:23:e8:
de:12:ac:fc:a0:14:d4:57:ae:ce:ed:6e:cb:89:85:
81:1a:f7:6f:5e:5d:64:7a:5f:5b:7a:26:4f:71:6b:
52:83:e5:df:21:11:fb:3f:11:b3:c0:7b:d8:8c:5d:
e2:f7:cb:46:ca:06:bc:7f:bc:9d:4e:72:a7:02:cf:
2d:16:e4:d1:0b:b7:a3:9a:f7:00:59:fd:9d:d7:87:
a8:52:6b:a5:95:fc:d4:7b:d0:63:a6:4e:ea:9f:09:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8A:2A:0B:53:73:FA:40:37:3A:E8:5E:5C:31:00:92:08:49:45:19
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/CIoqC1Nz-kA3OuheXDEAkghJRRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.235.0/24
Signature Algorithm: sha256WithRSAEncryption
55:87:ce:c7:f5:f0:ac:39:55:d1:82:ee:5e:f6:dc:70:4e:dd:
c4:35:ee:be:57:90:c3:99:62:d2:5f:00:f8:4f:41:c4:18:d0:
a6:ba:f2:21:72:60:64:87:1b:3c:73:f6:c0:6f:d8:5c:ac:76:
dc:1c:21:c5:0a:53:03:7b:ce:3b:db:86:69:62:24:f5:4e:ef:
c3:d9:3c:f5:f5:a5:b2:80:f9:73:b4:0a:65:18:d7:ae:1d:a2:
be:8e:2f:3c:c5:6d:ff:fa:15:3e:4a:67:cd:36:6c:8b:01:29:
e0:f6:d2:a0:8a:65:27:81:9b:11:21:0e:4e:d0:bc:45:fc:36:
c3:55:9d:bb:dc:44:d8:c8:7a:b1:62:91:ad:db:fb:e1:81:b5:
9b:3a:61:ef:cb:37:61:df:4a:77:a9:cf:36:10:eb:e3:97:7a:
74:45:cf:e0:8e:5b:90:8f:81:7d:dc:f3:93:fd:8f:f9:56:15:
b5:eb:da:8c:0c:bd:6b:b1:d0:20:5b:28:c4:ac:30:83:07:5c:
56:2a:ba:a0:c9:00:b6:b9:70:c2:ca:c8:e6:8e:f1:57:9b:c4:
d5:0b:a9:d5:cf:a0:29:d3:4d:25:bb:d8:35:57:4f:98:7d:83:
7a:12:b7:38:07:38:39:f7:79:9f:35:3f:cf:81:59:50:9f:22:
28:40:50:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 09:39:30 2024 by rpki-client on console-ams.rpki-client.org