Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/DTDLna8vaI6I8kgclAfCaUqT8zM.roa
File: DTDLna8vaI6I8kgclAfCaUqT8zM.roa (raw, json)
Hash identifier: 4twx37Mr0QukJGYMAGlclcvvMzwuIPETWe4pAxD/YHQ=
Subject key identifier: 0D:30:CB:9D:AF:2F:68:8E:88:F2:48:1C:94:07:C2:69:4A:93:F3:33
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018570B076FCFEBC65F53F4B449E46F964D0
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/DTDLna8vaI6I8kgclAfCaUqT8zM.roa
Signing time: Mon 02 Jan 2023 04:14:51 +0000
ROA not before: Mon 02 Jan 2023 04:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197328
IP address blocks: 62.60.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Mar 2023 14:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:76:fc:fe:bc:65:f5:3f:4b:44:9e:46:f9:64:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 04:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d30cb9daf2f688e88f2481c9407c2694a93f333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:27:c4:f3:9f:7c:b4:95:4b:b4:7c:f7:d8:
e2:a9:02:40:2c:5e:2d:14:d3:01:8f:42:33:4f:20:
6b:b7:ec:77:61:93:2c:ab:e1:8d:7d:5b:d3:15:0d:
1b:8b:b2:39:dd:a1:7a:7a:d1:32:b9:5a:e2:be:0a:
82:e6:a1:92:49:41:7b:7f:f1:44:70:1d:37:60:76:
8f:ee:e5:75:21:88:09:db:4f:85:b4:a5:a3:4e:a9:
1d:c6:17:b3:43:b8:53:ad:bc:34:a2:44:eb:23:0b:
76:68:32:87:29:26:40:fa:3f:c8:69:db:b0:c0:25:
2a:2a:3a:4e:b7:1b:0d:59:e7:05:c3:33:fd:56:4c:
03:24:b5:38:c8:79:c5:b0:b2:72:90:2a:02:29:89:
81:3b:09:db:da:56:94:f7:e2:28:9e:e7:31:40:a4:
75:5a:55:ff:99:0d:09:1f:38:f2:ae:13:42:a3:fa:
b4:28:63:1c:83:41:a7:0b:d0:56:47:4c:75:95:f8:
19:ae:8f:9a:2d:5e:c6:64:81:71:d6:76:83:98:14:
2f:95:42:1d:cb:9b:32:9b:37:38:85:9d:b2:d0:85:
8d:03:8b:21:f9:60:80:33:8e:30:02:24:20:50:2e:
ba:8c:32:8c:1e:22:90:43:98:e4:bb:40:a3:b8:52:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:30:CB:9D:AF:2F:68:8E:88:F2:48:1C:94:07:C2:69:4A:93:F3:33
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/DTDLna8vaI6I8kgclAfCaUqT8zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.216.0/22
Signature Algorithm: sha256WithRSAEncryption
42:74:bc:3e:29:97:ad:10:3b:00:6e:8e:48:ca:54:f5:16:05:
c6:9c:45:d2:30:83:f7:43:06:d4:30:2a:da:7f:ba:56:59:6e:
28:44:08:8a:ba:82:25:55:cd:ec:ab:f6:8f:a5:8a:6d:5e:07:
e3:bc:c4:43:2d:df:d4:3d:2e:4c:f5:b6:42:ae:4f:68:c4:44:
33:64:af:59:ad:7a:d7:64:15:58:c0:f0:00:22:49:a2:7d:59:
04:63:5e:75:2f:0a:7f:7a:72:9a:4a:a1:43:5e:74:83:33:82:
bc:86:fe:67:f0:5b:ee:38:b0:e8:56:a1:18:f1:26:c2:34:ac:
2b:23:21:c6:1f:44:18:e5:61:91:59:15:2e:5a:96:d6:b8:df:
10:56:73:c7:eb:b4:3f:4f:ed:97:e4:29:28:2b:a4:80:bf:14:
49:e1:7b:2b:e8:14:ee:59:74:da:af:fd:dd:80:9f:ac:e0:6e:
d9:94:d3:97:4b:b4:49:aa:89:0e:3b:2e:52:c1:21:e0:f4:00:
71:68:ca:c6:a8:14:16:f2:c7:28:56:f4:8d:87:d3:8a:05:94:
ba:cc:19:42:a6:56:30:0d:1f:0c:59:df:f4:6f:c5:8c:19:1b:
3c:0d:49:1f:0e:7e:1c:b3:8a:7e:6b:f4:f1:50:29:9c:34:af:
ea:02:cc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org