Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/J5vkXxandTsKnYfjYKqlkbtLSi8.roa
File: J5vkXxandTsKnYfjYKqlkbtLSi8.roa (raw, json)
Hash identifier: ARuZ6VuhR30YVdwSeq03ALl1M0MxeVDjxKkKTawnC8Q=
Subject key identifier: 27:9B:E4:5F:16:A7:75:3B:0A:9D:87:E3:60:AA:A5:91:BB:4B:4A:2F
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018FAE8992EC993D37DF6F1B508A4409A4C6
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/J5vkXxandTsKnYfjYKqlkbtLSi8.roa
Signing time: Sat 25 May 2024 06:56:42 +0000
ROA not before: Sat 25 May 2024 06:56:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15611
IP address blocks: 62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.147.0/24 maxlen: 24
62.60.168.0/21 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
213.176.64.0/23 maxlen: 24
213.176.96.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
2001:790::/32 maxlen: 48
Validation: Failed, certificate revoked on Sat 25 May 2024 11:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ae:89:92:ec:99:3d:37:df:6f:1b:50:8a:44:09:a4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 25 06:56:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=279be45f16a7753b0a9d87e360aaa591bb4b4a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c6:c2:8c:2f:f2:44:cd:ed:55:6f:73:dc:76:
e9:19:b0:3a:02:f3:b5:ff:e5:2c:47:6d:0e:90:e3:
ff:b2:b7:0b:3c:13:75:38:c6:f9:22:94:fc:88:29:
a7:1c:26:ad:ce:bf:49:d5:c7:7a:c7:3e:c7:70:5b:
34:d9:9b:01:ab:34:86:0c:c7:77:22:a4:a4:44:05:
33:6b:27:a7:b5:e4:50:3d:f8:34:fa:54:d5:d0:f0:
24:7d:b5:ab:0f:de:61:e3:18:cf:08:eb:b5:19:e1:
a2:06:1c:0d:82:77:4b:73:65:4c:25:c6:0b:52:01:
bf:03:80:80:f1:61:4d:b2:2e:e0:9f:bd:dc:cb:13:
ff:df:77:e4:10:b2:a7:b9:2a:c1:3b:50:9c:9e:c9:
13:07:9b:4a:71:de:f8:c3:c8:f3:96:50:c7:ec:6b:
78:13:e8:c3:02:f2:3f:11:ab:75:bf:55:0a:dd:9e:
e1:8f:06:46:ec:88:44:7b:8a:34:76:86:9b:b8:23:
21:4d:7f:f3:64:05:15:9b:27:44:fc:fa:8b:f9:75:
67:5a:f4:bf:a8:73:52:00:e7:5f:62:0f:45:0c:7d:
3a:bc:c8:b6:db:ee:16:d3:d1:0e:a7:d9:03:e4:b1:
5a:64:ee:6a:40:2a:39:ac:a0:3b:ea:ca:ad:84:52:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9B:E4:5F:16:A7:75:3B:0A:9D:87:E3:60:AA:A5:91:BB:4B:4A:2F
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/J5vkXxandTsKnYfjYKqlkbtLSi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.140.255
62.60.142.0/24
62.60.145.0/24
62.60.147.0/24
62.60.168.0/21
213.176.4.0/23
213.176.64.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
IPv6:
2001:790::/32
Signature Algorithm: sha256WithRSAEncryption
58:88:93:40:3f:a6:14:57:81:4d:f0:5c:da:61:c6:04:33:9c:
f2:55:64:f0:aa:38:a6:e9:6f:9e:44:4f:dd:f6:c9:a4:72:4d:
5a:a1:f6:19:39:a1:79:32:e6:95:12:52:d0:36:9b:54:da:8a:
aa:54:db:68:a2:e6:73:e5:92:71:93:ec:53:05:93:53:ce:53:
79:b1:5b:2c:de:74:46:63:cc:f3:d8:01:66:ea:17:57:14:57:
1a:77:35:d8:d5:91:1d:50:f9:2b:d8:6a:52:c6:cd:ae:af:37:
54:7e:96:66:e7:4b:b5:bd:94:f4:1b:45:f6:55:86:bc:19:7f:
33:11:05:dd:57:d1:1c:19:3f:68:8d:fd:ac:8a:dd:aa:21:81:
90:b1:f9:89:f2:4b:c7:96:11:3a:30:68:e5:9b:cf:8b:b1:20:
86:4a:2b:3a:8c:db:62:66:ac:e9:f8:d9:8d:1a:19:16:32:ff:
bb:32:5a:f6:25:c1:52:40:fb:d0:da:3a:c2:a0:2c:f1:22:38:
30:e7:ca:b4:58:da:ad:ee:d4:bd:8e:59:56:37:e9:65:fa:7e:
56:e3:29:d9:b5:3d:a9:4d:b8:97:96:b3:1e:fa:92:d6:ad:0d:
96:a5:25:b7:64:f9:79:14:0f:29:eb:49:0e:42:66:5a:1d:e0:
13:30:39:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org