Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/D1L4NpWwU2xRT6lrXdlW7htwpHs.roa
File: D1L4NpWwU2xRT6lrXdlW7htwpHs.roa (raw, json)
Hash identifier: Z0c5vDbXLDyxR3w7fzbrQnhT3GNZG+ID3/3NTzu/Q24=
Subject key identifier: 0F:52:F8:36:95:B0:53:6C:51:4F:A9:6B:5D:D9:56:EE:1B:70:A4:7B
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01915B63A5A93B9955DED2FB2455F50A9CD1
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/D1L4NpWwU2xRT6lrXdlW7htwpHs.roa
Signing time: Fri 16 Aug 2024 13:32:22 +0000
ROA not before: Fri 16 Aug 2024 13:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214922
IP address blocks: 62.60.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Aug 2024 06:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5b:63:a5:a9:3b:99:55:de:d2:fb:24:55:f5:0a:9c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 16 13:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f52f83695b0536c514fa96b5dd956ee1b70a47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:ec:be:2e:2a:55:9c:a1:36:1b:64:52:86:
e6:42:c5:c0:dd:9e:72:de:ea:0f:3b:b8:2b:6b:87:
41:d3:28:1f:09:66:10:7a:35:83:a5:c0:9d:37:c3:
5e:b9:6d:a7:fb:1d:69:6c:d9:3e:c9:24:f1:5d:e8:
ef:e2:e7:b5:5e:96:46:b8:d7:49:03:1b:3b:55:11:
3a:7b:d2:a2:53:29:97:cf:58:dd:ec:f1:b6:af:71:
f2:af:25:c7:e8:14:bf:e6:5c:60:9c:3e:88:ae:86:
0e:04:84:dc:53:12:5c:9f:e2:40:7e:8c:e9:43:d9:
bc:f2:d0:73:a1:64:0d:c7:20:fb:42:27:35:db:5f:
7f:63:e8:7f:02:6d:0b:02:aa:43:ca:2e:f6:77:4e:
13:18:8a:af:cf:87:d5:7f:e7:c2:d0:2b:ab:b1:e9:
2a:ed:67:31:be:24:c7:ed:6e:39:54:ba:fd:81:70:
04:25:a0:03:1a:13:65:dc:6b:20:1f:29:52:72:a3:
cb:67:10:9c:3a:b6:24:37:4a:90:6e:67:ef:74:1b:
97:d3:18:09:aa:8c:9f:91:fc:ca:88:7e:62:ec:bf:
77:45:c6:c9:fb:c6:a7:54:cf:86:ef:3b:55:9e:a4:
02:4c:43:3b:81:a2:0f:9c:8d:a5:11:75:2d:dd:80:
e9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:52:F8:36:95:B0:53:6C:51:4F:A9:6B:5D:D9:56:EE:1B:70:A4:7B
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/D1L4NpWwU2xRT6lrXdlW7htwpHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.221.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:a5:d1:b6:6f:8f:57:19:9d:86:1c:22:3e:38:fc:d7:f4:07:
39:15:6f:51:f9:c6:75:64:27:5f:b7:c4:53:a2:58:1d:6e:b1:
27:80:81:3a:70:15:51:e6:f7:73:3f:cf:f3:b3:29:ba:c5:4d:
ae:cd:47:f4:e8:60:1a:78:90:69:70:e3:3f:66:3c:57:64:a7:
55:4a:16:56:7d:14:ab:1d:45:db:98:7d:4a:4f:9c:a1:7f:5b:
fb:80:9b:73:97:3c:fb:2a:ec:7b:3e:ba:32:98:83:9c:14:4f:
2e:02:75:08:ac:e2:92:9f:b8:c3:f3:a3:c2:8d:73:52:d2:30:
81:45:62:29:bd:87:81:0d:2d:ad:4b:9b:5c:9c:ce:d8:49:c5:
14:88:e8:c1:65:97:e5:9b:d7:a7:b4:7b:c4:43:c2:f9:f5:01:
f0:c8:d5:cf:f4:97:b0:24:b4:a8:16:4e:e5:e1:43:f2:aa:63:
7e:63:bb:be:25:cf:6e:ac:eb:b1:51:ce:37:8a:54:1e:59:17:
4b:95:39:b0:0b:3c:19:86:1a:36:66:0f:aa:c1:11:e5:83:e3:
41:49:59:48:14:32:41:e7:d9:d9:85:57:b3:16:e4:6d:61:f8:
95:e0:4f:59:17:bc:5b:a5:fc:74:0a:14:f4:f2:03:07:03:a2:
69:5f:23:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 18 08:41:31 2024 by rpki-client on console-fra.rpki-client.org