Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/K61-rqeKQHhiBWb0D3NAG_1kuJU.roa
File: K61-rqeKQHhiBWb0D3NAG_1kuJU.roa (raw, json)
Hash identifier: pPgvzo51FG2fV9jNP5QOijfvVPcxoMoLC7OIYbB6V5I=
Subject key identifier: 2B:AD:7E:AE:A7:8A:40:78:62:05:66:F4:0F:73:40:1B:FD:64:B8:95
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0192375C4D67701F1262B6ADC7DC0694B549
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/K61-rqeKQHhiBWb0D3NAG_1kuJU.roa
Signing time: Sat 28 Sep 2024 06:40:48 +0000
ROA not before: Sat 28 Sep 2024 06:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49418
IP address blocks: 62.60.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 08:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:37:5c:4d:67:70:1f:12:62:b6:ad:c7:dc:06:94:b5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 28 06:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bad7eaea78a4078620566f40f73401bfd64b895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:e3:72:6e:8a:92:cd:b4:22:72:33:14:38:
0e:8a:9c:9d:77:af:10:51:bd:fd:dd:be:8c:69:8a:
3f:e6:73:0f:0c:f0:3c:55:d4:0a:53:50:21:d8:76:
eb:db:79:72:cf:0d:1b:16:d7:1a:11:a5:61:f5:c2:
af:7e:4d:7f:62:e3:9d:86:cc:e1:16:56:ab:47:bf:
30:29:b7:48:ee:87:73:3b:95:09:5d:09:71:01:0f:
64:94:66:df:f2:a7:be:43:b6:d1:84:d3:a7:8a:ab:
ae:4b:26:55:ab:24:a5:7d:54:60:af:39:67:3e:c1:
15:a3:0f:9a:7b:6d:62:fa:8e:dd:cf:7f:be:fb:b3:
8f:72:17:b2:a4:dc:96:eb:9c:6d:2b:14:71:7a:1d:
ad:fe:ba:4a:16:84:d2:5e:96:86:54:7e:fc:ee:9f:
34:04:a7:8c:2f:09:db:e6:14:a7:ac:19:9b:75:c5:
6b:18:60:f6:af:2f:c8:a0:56:65:35:f0:f8:b4:1f:
ae:c1:08:80:eb:ed:89:24:cb:e9:f8:70:94:52:3a:
60:37:3f:9a:18:b9:6e:dc:32:e6:84:0b:8a:c3:7b:
99:1b:87:ce:47:01:4f:40:5a:90:4a:bb:57:e0:51:
02:a4:1d:f1:f5:54:a2:ae:01:58:3c:4f:7c:97:67:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AD:7E:AE:A7:8A:40:78:62:05:66:F4:0F:73:40:1B:FD:64:B8:95
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/K61-rqeKQHhiBWb0D3NAG_1kuJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.235.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e3:a0:56:bb:6d:61:d7:8a:4c:4e:38:2c:fd:be:3d:7f:ad:
e1:5c:15:49:5b:4d:d8:be:73:f6:61:39:2f:b9:ce:fa:66:1a:
61:26:88:20:85:a4:0f:cd:c4:ff:88:b2:4a:96:47:8a:90:bd:
b3:ae:84:ed:7d:67:05:14:6c:da:9d:4c:ee:2b:bb:90:1f:2a:
c0:18:74:ba:b5:ad:10:bc:35:30:37:10:c7:2d:c8:ca:e8:c8:
10:ec:b1:05:46:c1:53:0c:72:5a:e2:a4:01:15:e7:79:dd:73:
eb:12:07:04:3f:f5:45:5e:d7:63:f4:d1:f8:39:ad:6a:74:51:
35:a7:28:b1:f0:f3:db:9a:59:f0:c2:4b:92:62:94:ea:52:b7:
85:a6:d0:4d:5a:cd:4d:ad:f3:30:4a:b5:66:b7:3f:b4:ba:3e:
e8:25:76:68:c3:12:c2:d0:2a:6b:6b:e6:3f:e5:41:cd:08:90:
96:09:eb:f6:9d:70:65:be:16:53:1e:6f:16:6b:9d:1b:d4:b9:
c8:8a:f1:e3:e5:c5:79:f8:fa:68:09:eb:83:cf:76:ce:b7:85:
bb:28:8d:2b:e0:65:45:aa:ee:48:a6:ae:c5:8c:c5:d3:88:97:
17:49:af:0c:b1:68:58:7b:8e:b3:83:14:3a:73:6f:cb:be:3e:
e1:d0:92:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 09:56:09 2024 by rpki-client on console-ams.rpki-client.org