Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/L2bmeu5CDXmM8XOlr8gm-2sPU9w.roa
File: L2bmeu5CDXmM8XOlr8gm-2sPU9w.roa (raw, json)
Hash identifier: y6Qk2p3Az9DoM912BeRDEKIyF0fQPoQoVqp9K5cu874=
Subject key identifier: 2F:66:E6:7A:EE:42:0D:79:8C:F1:73:A5:AF:C8:26:FB:6B:0F:53:DC
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CCA29C2F4B17A309CB010F1FF5B7F2A38
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/L2bmeu5CDXmM8XOlr8gm-2sPU9w.roa
Signing time: Tue 02 Jan 2024 12:33:03 +0000
ROA not before: Tue 02 Jan 2024 12:33:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48597
IP address blocks: 62.60.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 10:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c2:f4:b1:7a:30:9c:b0:10:f1:ff:5b:7f:2a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 12:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f66e67aee420d798cf173a5afc826fb6b0f53dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:db:0e:b1:d5:2c:c9:d3:aa:cf:bb:3b:cd:
d5:42:9b:29:04:ec:69:25:63:60:83:ca:d9:86:1e:
b8:9e:24:e7:fa:ab:87:7d:25:d1:b1:f3:be:2e:47:
44:f9:09:8b:79:61:02:ff:30:e0:be:0f:73:a7:2b:
d9:54:3e:f5:0e:44:aa:ff:d1:a9:90:a6:02:de:8c:
7e:26:6b:93:2b:c7:58:de:96:fa:a1:36:98:ac:65:
23:74:bc:9e:a3:68:73:62:1b:62:98:b0:c4:14:85:
dd:a3:95:b9:ae:0b:3a:f2:a1:47:81:7c:10:73:39:
3e:29:58:4f:64:e6:33:4b:20:2d:da:46:1d:e0:d6:
c6:78:19:34:90:52:45:3a:2e:45:56:65:e5:6b:14:
43:73:8f:58:6c:1d:c7:40:56:6a:49:3d:ec:22:4e:
cb:0a:8e:1b:b6:6c:c9:e7:78:cd:80:11:3a:01:f5:
db:fd:14:a4:7f:b6:9a:1a:e3:0d:35:ca:6c:39:16:
0c:58:55:c0:bd:14:9a:19:49:18:ef:c6:19:fb:38:
1c:25:44:80:60:60:33:6b:73:8b:15:b8:a2:19:57:
dd:fb:7a:40:d7:25:bd:26:c5:8a:fa:d0:ee:5a:a3:
be:45:c6:24:3f:f1:e0:3a:5e:67:3d:d4:ed:2b:db:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:66:E6:7A:EE:42:0D:79:8C:F1:73:A5:AF:C8:26:FB:6B:0F:53:DC
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/L2bmeu5CDXmM8XOlr8gm-2sPU9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.141.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:0f:ff:c9:52:2b:7f:b7:84:a5:70:9e:64:ab:f2:74:0f:9c:
e8:97:1b:f1:11:e2:83:5c:42:e9:47:2d:2f:09:f2:39:79:4f:
27:25:95:0e:1e:4d:48:94:96:c1:7e:9a:38:45:d2:f7:f9:88:
a6:8d:78:99:ba:70:b4:65:ee:99:62:01:3b:b1:1a:99:fd:cb:
ec:af:d7:44:fa:58:8e:38:f9:ee:6d:4f:f6:bf:b7:dc:30:4d:
b9:44:d8:ce:b8:b2:7a:4d:06:16:41:6e:5c:0d:8e:71:5c:a7:
14:aa:b7:14:e5:40:d7:9c:70:69:cd:3f:d9:33:57:0f:e8:a2:
d6:56:f0:80:a7:81:7d:49:f2:bb:b0:42:53:ae:76:60:63:a2:
d9:eb:33:5d:17:fe:63:f2:31:ba:4d:c4:53:5f:1e:2d:5f:65:
fe:8c:c5:31:37:59:78:9a:51:fe:b4:7a:81:76:63:c2:ac:ca:
84:b1:68:02:46:8e:0d:f7:be:fd:d3:39:4f:32:b3:aa:ac:e9:
9c:75:fc:8c:70:b6:82:ab:14:21:d3:53:bc:06:53:10:38:e5:
25:61:22:06:df:d9:6e:65:f8:38:7e:bc:0d:d9:e8:36:96:f4:
c8:d0:07:35:b2:46:42:e0:d2:8f:7e:45:b6:78:c3:7c:e5:c3:
38:18:43:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org