Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FOwh2YnoMxvtu_Uug7JEeglcheQ.roa
File: FOwh2YnoMxvtu_Uug7JEeglcheQ.roa (raw, json)
Hash identifier: Jr6VkNsMNJI5cFz/vzY9Iv9AwZfkhPNF5aVbXEGWQGQ=
Subject key identifier: 14:EC:21:D9:89:E8:33:1B:ED:BB:F5:2E:83:B2:44:7A:09:5C:85:E4
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0189CA047945E24A47DDB5BC8AAD6AF6E567
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FOwh2YnoMxvtu_Uug7JEeglcheQ.roa
Signing time: Sun 06 Aug 2023 08:43:58 +0000
ROA not before: Sun 06 Aug 2023 08:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.220.0/22 maxlen: 24
62.60.147.0/24 maxlen: 24
62.60.148.0/22 maxlen: 24
213.176.121.0/24 maxlen: 24
213.176.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 17:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ca:04:79:45:e2:4a:47:dd:b5:bc:8a:ad:6a:f6:e5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 6 08:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14ec21d989e8331bedbbf52e83b2447a095c85e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:02:78:1a:e9:39:3a:a5:54:91:50:70:53:
e6:14:35:7a:cd:e6:26:53:86:83:3c:cc:18:d4:1f:
97:2e:2a:80:02:85:69:48:68:ae:88:4e:90:7a:77:
5f:c0:53:25:d9:c8:2d:ea:f1:8b:ef:97:0f:87:2e:
d2:2f:79:ac:a4:e9:0c:01:4a:94:eb:78:fa:f6:b9:
3c:25:54:54:17:e5:72:44:f8:38:26:39:88:f8:bc:
91:81:25:be:04:89:c1:41:25:2c:ce:26:8a:6c:73:
c3:3f:26:6d:fc:3c:87:c6:20:53:59:45:1b:6b:50:
88:39:93:1e:f1:7d:01:d6:d6:14:cd:df:9a:6f:c2:
e2:09:f9:c3:fb:22:4b:1a:e2:2e:53:f0:34:c2:cc:
27:9b:c3:60:4b:11:c2:4a:0c:3c:6f:74:d3:06:af:
19:b8:20:a7:6c:ba:fb:27:b9:50:0c:c0:4d:1d:b0:
fe:bf:dc:79:c7:45:45:3e:a5:9c:bf:40:da:8c:59:
dc:18:a4:11:04:91:e0:5a:9d:e8:c2:c6:b2:b4:f2:
8f:72:b9:cc:8b:3d:9d:89:cc:d8:0d:df:0b:c9:9d:
0f:13:ed:b3:e9:30:02:d8:79:9e:59:4f:89:b2:2b:
b5:d3:9e:bd:d4:60:59:37:9c:0d:d1:bb:1d:bb:89:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EC:21:D9:89:E8:33:1B:ED:BB:F5:2E:83:B2:44:7A:09:5C:85:E4
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FOwh2YnoMxvtu_Uug7JEeglcheQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.147.0-62.60.151.255
62.60.220.0/22
213.176.121.0/24
213.176.127.0/24
Signature Algorithm: sha256WithRSAEncryption
84:14:1b:42:f7:4b:69:d6:54:bb:47:27:a0:26:79:7e:51:b1:
bb:c6:d5:f9:af:3f:42:85:be:ba:1e:16:92:84:3f:06:12:87:
62:dc:bb:4c:a2:f2:1a:6c:46:e3:34:f6:ba:ac:d4:0e:78:66:
58:bc:3a:97:2f:6e:80:a3:fd:12:c9:1e:bc:b4:eb:5f:13:cf:
f3:5f:44:92:2f:1d:26:90:ab:48:bf:db:d0:b3:ea:e7:bf:d5:
86:ee:e5:ca:c4:ec:20:20:ef:43:bd:0e:81:c1:69:66:ca:c6:
8e:62:72:6b:7a:35:ba:76:94:85:3a:ed:6b:d6:d6:3d:58:a9:
48:ee:e9:9f:39:74:81:98:54:2d:e1:29:62:20:5b:f7:71:07:
69:db:e8:59:5a:c9:bd:b7:c4:b8:85:cc:77:4d:84:5d:dc:e8:
0c:73:3b:bc:97:c6:dd:a7:b7:66:be:20:f8:dd:75:96:e7:83:
93:60:3a:af:b0:2d:39:b7:d7:9d:13:b4:0c:01:b3:9e:8a:c8:
3a:1b:ed:88:af:22:40:d1:20:c9:c5:6f:29:60:e7:0c:3d:64:
9b:75:93:91:34:0d:a4:3d:d0:d6:57:cb:77:41:c8:92:b4:b3:
83:68:88:52:16:ee:b4:5d:cd:03:82:50:89:6b:f3:f2:24:bf:
59:33:38:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org