Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Gf_I7gW8jyiAf2zxS-v2571YKOU.roa
File: Gf_I7gW8jyiAf2zxS-v2571YKOU.roa (raw, json)
Hash identifier: oTIC+R3vo3pqM/xl0ZCsxbZAURBkM+PEe75EMON+t2w=
Subject key identifier: 19:FF:C8:EE:05:BC:8F:28:80:7F:6C:F1:4B:EB:F6:E7:BD:58:28:E5
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CD107563133F0841F523D87645C0FB65C
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Gf_I7gW8jyiAf2zxS-v2571YKOU.roa
Signing time: Wed 03 Jan 2024 20:32:48 +0000
ROA not before: Wed 03 Jan 2024 20:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397373
IP address blocks: 62.60.224.0/20 maxlen: 24
62.60.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 07:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d1:07:56:31:33:f0:84:1f:52:3d:87:64:5c:0f:b6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 3 20:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19ffc8ee05bc8f28807f6cf14bebf6e7bd5828e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3a:d3:2d:a7:f4:0c:c9:d1:3c:5f:f4:a9:db:
98:2e:ef:22:c1:31:08:f4:58:81:21:0c:db:8e:cd:
87:f0:6f:11:48:e0:2e:de:eb:e8:fc:16:45:8b:6a:
2a:a5:b1:2c:9e:16:e0:99:2b:41:fd:7c:90:3e:9b:
60:a6:2b:d2:1d:8b:9d:c4:55:37:c6:11:a2:01:18:
29:3d:81:7c:5f:62:96:5f:07:80:20:a9:89:60:16:
79:31:65:b1:ec:33:2d:7e:3c:fc:38:bb:00:10:d5:
db:7f:b0:15:ea:a2:be:b9:c2:96:3c:6b:2b:3c:a6:
bf:26:5d:53:6a:d7:ff:3a:15:ea:1f:9e:8a:ef:56:
96:e6:25:e9:38:a9:3c:2f:a3:1a:c4:96:d8:19:67:
b4:a4:33:5c:10:6a:57:9b:1b:6b:b8:b4:7c:40:88:
ce:8c:e5:f0:50:fd:eb:d6:77:40:7f:26:58:b7:b3:
60:1e:20:03:24:e0:37:07:44:aa:1a:6d:b6:87:e2:
1c:8a:bc:4a:81:fd:4d:a3:76:3e:2c:81:e3:b3:e3:
10:e3:f2:39:42:a9:f3:1b:ae:d8:fa:24:de:36:0c:
e7:1f:ee:c2:ad:cf:90:30:ad:76:00:2f:7d:bf:75:
8c:19:f5:96:b7:23:df:9d:e6:48:16:fe:2a:26:4c:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FF:C8:EE:05:BC:8F:28:80:7F:6C:F1:4B:EB:F6:E7:BD:58:28:E5
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Gf_I7gW8jyiAf2zxS-v2571YKOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.224.0/19
Signature Algorithm: sha256WithRSAEncryption
5e:aa:32:64:76:da:11:8d:58:01:b5:b1:37:43:43:70:9b:3f:
54:50:ce:bc:b6:d8:06:ea:fb:6f:fe:3c:29:aa:cb:f4:9a:d6:
b2:a0:8b:10:5c:53:47:a4:89:0f:6e:ce:11:c4:d5:5e:e6:36:
bc:34:4b:e7:23:18:46:1f:13:b6:68:ca:d8:80:d8:ba:13:3f:
92:58:0a:22:8e:be:66:4c:4f:e5:3e:8d:e0:e9:a3:b8:bf:ad:
22:40:ba:b6:87:94:8a:35:34:40:aa:7e:f2:08:63:95:b3:7b:
7f:43:5e:4a:49:a9:f4:6f:37:79:c5:f1:ca:d8:2b:96:fe:0b:
3f:99:51:71:54:f6:7c:3c:ec:b9:6f:51:39:d9:26:4c:4b:48:
6a:b0:8c:96:f7:3c:7a:84:12:ea:fd:a5:53:a8:46:63:5a:32:
5a:29:e6:7f:53:5d:ed:b9:4c:82:5e:e9:ea:ca:31:d2:6b:3e:
e7:c0:4d:48:cd:04:83:8b:bf:34:e2:9c:69:5e:3f:09:5c:10:
04:e3:3a:c5:7b:08:3f:dc:1a:73:a5:b4:96:1f:a0:70:04:c8:
da:29:1c:17:61:1c:96:72:a7:10:6b:60:2c:73:7a:9e:49:c9:
e1:19:40:26:c7:42:6f:c1:30:e1:11:fb:68:13:13:1b:50:b1:
43:d8:73:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 10:11:56 2024 by rpki-client on console-fra.rpki-client.org