Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FVi5Sx4O5zx9DiJWA9lcBQid43s.roa
File: FVi5Sx4O5zx9DiJWA9lcBQid43s.roa (raw, json)
Hash identifier: oBYvrltwOfxf1gdvYGehMutP5bTge+oOhwbNsbFnK+o=
Subject key identifier: 15:58:B9:4B:1E:0E:E7:3C:7D:0E:22:56:03:D9:5C:05:08:9D:E3:7B
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018DCBC5B6E9B16D0FD476329E55422CF199
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FVi5Sx4O5zx9DiJWA9lcBQid43s.roa
Signing time: Wed 21 Feb 2024 13:05:48 +0000
ROA not before: Wed 21 Feb 2024 13:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.156.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.220.0/22 maxlen: 24
213.176.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 10:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cb:c5:b6:e9:b1:6d:0f:d4:76:32:9e:55:42:2c:f1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 21 13:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1558b94b1e0ee73c7d0e225603d95c05089de37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:84:6c:36:19:45:83:9f:b1:f0:13:4c:d7:
0f:90:c9:19:f9:76:64:93:9d:e9:53:1b:d4:66:c4:
47:83:15:7c:96:e3:d5:8e:7c:64:3d:ed:93:b0:89:
fd:5a:43:f5:89:5f:ff:a9:a6:2b:4c:49:b6:f4:c0:
2b:2f:86:5f:6b:64:d3:af:f8:1e:2f:80:49:46:ae:
15:f1:89:08:29:a9:77:11:fc:b7:73:b6:f9:3e:35:
92:00:ef:66:a2:76:20:ff:58:b3:e4:44:90:6b:8b:
35:48:72:97:48:e1:6e:3a:bc:6e:43:b6:cf:5e:48:
22:74:dc:34:fd:75:1a:61:8b:cf:32:6f:c6:bc:02:
f7:55:80:1f:db:8e:4d:50:7e:a9:61:4c:f6:ce:60:
05:53:79:b5:84:e0:cc:da:68:1f:e9:fa:b5:d1:d9:
97:51:d9:14:8b:d3:d9:ec:ca:76:74:49:de:11:24:
84:bc:c2:97:c9:a1:a8:f0:1a:d7:11:89:5d:8c:cf:
60:09:a7:9a:2e:f9:42:d0:be:b4:46:63:80:6e:3c:
64:28:7f:92:81:4c:69:4e:84:8e:6b:4b:7b:37:28:
ed:fc:69:4d:06:01:33:47:70:f9:d4:bb:46:3a:65:
5a:a0:01:53:b3:46:dd:f1:16:b2:b3:3b:f5:db:8a:
b0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:58:B9:4B:1E:0E:E7:3C:7D:0E:22:56:03:D9:5C:05:08:9D:E3:7B
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FVi5Sx4O5zx9DiJWA9lcBQid43s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.156.0/22
62.60.184.0/22
62.60.192.0/22
62.60.220.0/22
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:67:7e:29:e8:ea:f2:58:8f:0a:d7:88:a5:d0:67:90:9a:8b:
19:67:13:47:f0:29:e8:fd:4d:1d:3a:2c:b6:59:2f:da:78:32:
97:d2:e5:97:77:ab:e3:dd:c1:18:21:d6:36:c9:38:f9:39:9e:
a1:8e:44:ce:7e:81:cb:9d:6e:65:be:b0:4f:c9:a1:00:cf:a2:
7c:10:93:35:11:5a:5e:9c:f2:28:d7:5e:da:d6:7c:05:69:32:
d4:2c:1f:bb:6a:09:d6:ab:15:22:13:cc:55:df:c7:48:6b:4b:
97:b3:34:ea:d5:52:7e:33:c3:10:0e:5f:b9:13:16:71:fc:8f:
01:b5:fa:9c:9a:ae:31:fb:bf:4b:b1:b4:a4:ad:33:75:4e:1f:
20:e1:27:08:ee:68:0c:bc:ff:b4:8e:04:cc:2f:75:98:82:91:
35:35:98:89:16:04:e8:83:60:90:20:ab:70:03:61:65:ff:91:
f0:0f:30:f9:fd:29:37:23:14:ff:d9:0b:c0:93:44:eb:dc:27:
a2:8f:3a:58:12:27:a1:84:8f:82:a6:56:16:0e:f1:11:04:e2:
ca:07:7a:ad:bb:33:ee:9c:0b:4e:9a:08:e8:d8:f8:55:fd:9a:
df:1d:a4:e7:2a:d5:d5:6c:78:94:8a:14:f5:82:e2:74:43:f8:
d9:04:3e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org