Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/EasJxnJndE_2JDSqv1DpD2j1EsE.roa
File: EasJxnJndE_2JDSqv1DpD2j1EsE.roa (raw, json)
Hash identifier: Rj8fJvnckuGHVimodnDcElE59TY3yGXc9Z7pNocQVqM=
Subject key identifier: 11:AB:09:C6:72:67:74:4F:F6:24:34:AA:BF:50:E9:0F:68:F5:12:C1
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018AFE282403A116472E5B9BCAED44992BEB
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/EasJxnJndE_2JDSqv1DpD2j1EsE.roa
Signing time: Thu 05 Oct 2023 04:45:58 +0000
ROA not before: Thu 05 Oct 2023 04:45:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 62.60.152.0/21 maxlen: 24
62.60.146.0/23 maxlen: 24
213.176.2.0/23 maxlen: 24
213.176.6.0/24 maxlen: 24
213.176.120.0/23 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Oct 2023 12:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:28:24:03:a1:16:47:2e:5b:9b:ca:ed:44:99:2b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 5 04:45:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11ab09c67267744ff62434aabf50e90f68f512c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:9f:15:05:01:65:4f:21:e8:7c:c0:7d:4a:
97:5a:54:d9:25:bc:46:bf:31:41:70:fb:04:57:84:
b3:e0:f0:bd:74:a5:0e:56:5c:74:c7:c2:63:13:bb:
f1:54:de:80:22:16:6b:f9:b8:97:82:ce:1d:c0:5b:
50:e7:77:a8:43:57:14:35:e8:b8:16:99:33:e1:e5:
97:31:52:79:bc:f7:48:71:d5:87:5a:79:8b:b7:a6:
63:35:f4:27:ce:f7:f9:5e:27:f5:d6:01:75:0d:1f:
4c:a4:ae:93:b9:59:45:6f:9b:e4:30:cc:69:a4:d4:
0c:13:13:14:c8:20:14:bc:62:08:28:82:30:e7:74:
53:63:68:0b:9a:d9:9e:80:90:3a:12:58:5e:6f:d3:
09:9f:e8:7a:3e:77:f8:5b:77:fb:24:3b:53:d4:7c:
b9:99:4d:69:bb:1d:91:60:21:60:d0:52:66:2a:e6:
48:05:aa:af:7c:40:e4:33:17:ec:e4:e3:20:d5:3c:
23:9f:dd:3f:5e:5d:f0:42:2f:8f:63:10:09:7a:85:
12:4b:6a:c1:6f:c9:59:2c:3c:a7:54:b4:01:7c:ee:
23:2f:5e:f4:36:a8:b5:fa:3c:1b:08:13:02:9d:6c:
2f:23:94:e1:b1:79:36:00:e5:56:5e:a2:f5:f3:0e:
7a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AB:09:C6:72:67:74:4F:F6:24:34:AA:BF:50:E9:0F:68:F5:12:C1
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/EasJxnJndE_2JDSqv1DpD2j1EsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0/23
62.60.152.0/21
62.60.196.0/22
213.176.2.0/23
213.176.6.0/24
213.176.120.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:95:01:09:eb:b9:79:1b:c0:aa:f9:c3:6f:20:4c:5c:46:51:
a2:09:ba:29:72:8f:da:f4:be:52:a1:db:ba:ef:39:45:69:05:
6a:3d:dc:00:6c:d0:bf:01:d3:c1:a2:ac:77:2d:bd:a5:23:f2:
94:e8:b6:32:35:9c:5d:44:d2:f6:d8:10:ba:f2:1e:5b:47:0a:
4f:af:bd:2d:8a:c2:18:bc:cf:ce:05:09:6d:0c:14:d6:4e:25:
13:e5:cf:ac:ec:e1:22:74:df:c9:b0:29:c9:0d:ee:c9:15:5e:
45:60:52:15:3f:86:ea:1a:ba:9d:de:c0:a6:2a:82:a1:87:90:
32:fa:9d:6e:ce:58:fa:77:6c:5d:8f:cc:43:cd:b6:f4:e4:56:
aa:0e:0e:44:5b:c6:c4:8f:32:a2:82:c2:56:57:87:84:a5:75:
6c:87:02:86:0c:12:5a:9a:54:0c:da:10:52:67:56:bc:b0:b7:
76:4d:b3:e5:af:a3:2b:09:be:63:38:c2:d6:77:4b:c6:2a:22:
02:e3:64:92:0a:23:b9:61:19:6f:c1:fd:12:de:5c:79:28:16:
9a:e0:8c:ee:91:2c:f8:91:2b:6e:ca:4a:4c:2d:51:b7:d0:20:
91:6a:c6:40:26:75:22:73:78:11:50:54:87:56:01:bb:96:02:
33:f9:30:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org