Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/KEH6mx7Eiq8jinliRk_ptSBUoyU.roa
File: KEH6mx7Eiq8jinliRk_ptSBUoyU.roa (raw, json)
Hash identifier: Jcz/wCVx3nGnWGwF/XXcEyjpD8AZweXlLGy5oK1Lu3I=
Subject key identifier: 28:41:FA:9B:1E:C4:8A:AF:23:8A:79:62:46:4F:E9:B5:20:54:A3:25
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01886B1B8233458158CC904C118DCBD798AC
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/KEH6mx7Eiq8jinliRk_ptSBUoyU.roa
Signing time: Tue 30 May 2023 05:22:24 +0000
ROA not before: Tue 30 May 2023 05:22:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53356
IP address blocks: 62.60.216.0/22 maxlen: 24
62.60.146.0/23 maxlen: 24
213.176.2.0/23 maxlen: 24
62.60.168.0/21 maxlen: 24
213.176.6.0/23 maxlen: 24
62.60.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Jun 2023 05:42:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:1b:82:33:45:81:58:cc:90:4c:11:8d:cb:d7:98:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 30 05:22:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2841fa9b1ec48aaf238a7962464fe9b52054a325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f6:64:35:09:f6:13:9e:c3:89:f5:d0:51:3a:
d1:d2:b1:02:59:a3:fa:fb:38:c1:d0:f2:26:d1:34:
13:f9:1c:e8:c8:77:61:90:e4:65:6e:a1:c6:97:c4:
04:96:04:d3:b7:42:b5:4a:1c:37:5f:53:e4:1d:60:
68:cd:0c:ac:6b:c3:e2:fc:c2:cf:e1:8e:80:15:dc:
ad:1c:fe:f9:3f:16:16:49:7e:88:67:d7:d8:11:17:
ec:d7:27:8d:1f:44:9a:34:be:4a:21:85:6a:e3:b5:
79:ae:9d:97:5c:dc:ab:2f:34:2d:37:cb:93:b9:33:
84:77:5d:c8:f5:99:fd:3e:63:ab:ab:80:26:1f:ff:
92:00:86:f8:6f:42:a0:eb:17:c7:d0:b5:5d:f6:10:
3b:85:40:58:52:b8:97:3c:6a:89:00:d0:e8:e9:61:
fe:52:c2:b1:60:0b:bb:9e:80:39:f2:ca:15:6a:33:
45:9b:d9:b3:bb:50:e4:ba:c9:ce:11:97:81:64:d2:
08:3e:1e:b5:e6:a5:b2:40:71:3a:73:b6:83:dd:b8:
0e:09:c6:c5:1e:72:02:66:51:3d:87:2d:ee:7c:5c:
3e:82:10:0f:32:fd:92:12:bd:4f:5a:87:39:e7:c7:
48:4d:bb:ef:b2:8a:51:4c:41:e4:e0:62:a5:ca:0c:
6f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:41:FA:9B:1E:C4:8A:AF:23:8A:79:62:46:4F:E9:B5:20:54:A3:25
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/KEH6mx7Eiq8jinliRk_ptSBUoyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0/23
62.60.168.0/21
62.60.180.0/22
62.60.216.0/22
213.176.2.0/23
213.176.6.0/23
Signature Algorithm: sha256WithRSAEncryption
48:32:5f:c7:b3:5c:fd:19:b8:28:32:44:6c:f8:25:41:29:0d:
ed:3b:37:32:9b:2c:c1:1f:f0:c5:98:fc:05:c1:3a:e7:a0:e8:
fc:46:df:c7:d3:2b:5a:2f:0e:0a:f6:54:0a:0a:66:3b:ef:e6:
34:24:60:8a:29:a1:ad:99:c6:96:aa:f6:0d:22:7a:91:9a:d5:
c2:02:0a:54:85:7e:60:6f:86:e1:fb:3f:fc:c3:be:cc:79:d2:
08:08:c3:c4:13:26:5d:86:c2:03:0b:2c:01:bd:60:83:eb:e5:
08:c1:90:97:f9:e7:c3:8f:ba:1a:23:77:e7:39:a4:d2:28:51:
d2:d8:16:ca:be:a7:97:ac:f5:ca:7a:6d:a4:f5:60:f7:6e:fb:
14:63:51:10:31:20:7d:58:85:14:7f:62:1c:da:7f:bf:d0:e6:
77:0c:ca:29:64:9d:5e:13:1a:91:9c:1b:f6:6a:eb:58:09:0d:
9e:30:c6:a2:06:7a:96:2f:75:37:1a:10:63:20:90:30:df:be:
b2:25:32:84:e1:b7:0d:0c:87:8a:a7:d7:7e:08:b3:14:6b:89:
a4:5d:4e:40:2c:04:31:fc:da:65:01:c9:ff:fb:4c:ba:2e:e1:
bb:64:bb:54:92:7b:fa:e7:1c:23:85:37:e7:c2:66:92:74:33:
3a:ca:4e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org