Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/CawSo_cmCrOPeSbme3TO8mbYIFA.roa
File: CawSo_cmCrOPeSbme3TO8mbYIFA.roa (raw, json)
Hash identifier: 03Runp4BRWk37+j4dUa9aXEFAOt9yE0GhTzVckVAjbg=
Subject key identifier: 09:AC:12:A3:F7:26:0A:B3:8F:79:26:E6:7B:74:CE:F2:66:D8:20:50
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0191EF5CE887977CDF00A780910EB8E32BCE
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/CawSo_cmCrOPeSbme3TO8mbYIFA.roa
Signing time: Sat 14 Sep 2024 07:08:48 +0000
ROA not before: Sat 14 Sep 2024 07:08:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211056
IP address blocks: 62.60.193.0/24 maxlen: 24
62.60.194.0/23 maxlen: 24
62.60.195.0/24 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 05:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ef:5c:e8:87:97:7c:df:00:a7:80:91:0e:b8:e3:2b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 14 07:08:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09ac12a3f7260ab38f7926e67b74cef266d82050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:e7:91:85:a8:cd:cc:5c:e6:aa:fe:44:d5:
a9:02:27:63:e6:01:a6:b6:8d:7a:c7:e9:42:00:ee:
80:c0:4f:1e:c5:45:37:c4:c7:0d:f7:ed:29:0a:74:
c2:4a:da:3c:3d:65:ae:5e:0b:d8:d5:9c:cc:84:1e:
68:f3:aa:a4:40:01:b5:49:57:2c:9c:e4:55:f2:8a:
05:99:80:2e:d7:ed:ff:f7:8b:71:7c:fa:6d:35:86:
25:68:d8:98:c1:90:05:85:05:89:fe:f0:85:68:dc:
32:9b:07:36:b5:bc:cc:8a:fa:7b:a4:54:24:ef:89:
eb:56:b3:66:e2:be:8d:98:fc:d4:82:29:f9:09:8f:
d2:4e:f5:03:7d:4a:c2:01:7b:2a:9e:39:9a:aa:a5:
3d:8f:e7:83:1d:3e:97:9f:11:74:24:3b:53:e2:c4:
7f:45:39:4a:4e:0f:cf:b3:01:7f:e1:b1:b7:c7:21:
8f:81:db:0e:73:c3:45:fb:87:82:1f:c7:b5:39:08:
02:ad:70:4d:81:20:49:78:6a:d5:23:6c:d6:df:7d:
13:0d:57:9f:aa:a6:9a:84:a5:24:d4:13:d6:b0:3f:
7f:eb:70:37:a4:2f:7b:03:45:16:5e:6f:1a:9d:31:
1c:c8:1f:a1:08:0a:ac:98:f7:a7:9b:83:08:60:fc:
56:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AC:12:A3:F7:26:0A:B3:8F:79:26:E6:7B:74:CE:F2:66:D8:20:50
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/CawSo_cmCrOPeSbme3TO8mbYIFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.193.0-62.60.199.255
Signature Algorithm: sha256WithRSAEncryption
6b:11:cf:70:c3:4f:07:22:4d:fd:55:6e:6a:df:66:57:5c:fd:
af:77:5a:fe:1c:5d:03:fa:9c:65:11:a1:e4:28:e7:cd:02:68:
95:fd:af:bf:0e:ef:6e:6a:9c:5d:c9:fa:ee:5b:5a:59:b5:92:
27:31:00:c6:9a:ea:98:58:c1:5e:d5:1f:21:ca:91:28:76:29:
28:ec:db:68:8d:12:72:01:24:e2:3c:55:86:5e:d6:6e:ff:fd:
80:99:7f:11:a3:0c:51:36:80:a9:e9:96:1e:18:5e:79:aa:39:
6a:9f:ef:8b:15:f9:32:4c:0d:2c:20:70:41:05:75:4c:5b:3b:
11:5e:62:04:a7:52:81:1b:1d:bf:07:15:c1:bb:c1:97:4e:50:
55:b0:20:8f:b5:7b:bf:f1:39:e6:c2:ab:c6:84:c8:2f:5d:64:
90:f1:05:73:b0:5d:5e:a1:a6:33:b0:9b:3a:dd:c7:9e:94:f7:
24:e4:b2:93:dd:7b:ba:4d:2e:11:64:6b:b0:96:a0:d7:21:c4:
a3:42:92:73:66:f6:b8:be:8c:fc:40:1f:c4:3e:85:05:71:57:
e8:4e:59:63:9c:6d:8e:cd:1b:83:6d:79:2f:24:8d:9e:8c:2a:
4e:b3:9d:ee:98:d7:6d:e7:34:57:86:08:91:48:43:93:14:5f:
dc:0e:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 08:56:54 2024 by rpki-client on console-ams.rpki-client.org