Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/LXkjYSjfv5GiIlLuD9aAIG4VR80.roa
File: LXkjYSjfv5GiIlLuD9aAIG4VR80.roa (raw, json)
Hash identifier: Ly/QykQbk8jqlfXQ0wTj3BI3j7izPPv/+Lf5UDnDbB8=
Subject key identifier: 2D:79:23:61:28:DF:BF:91:A2:22:52:EE:0F:D6:80:20:6E:15:47:CD
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0188B39AC253CAEFECAF27FEF8112566C595
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/LXkjYSjfv5GiIlLuD9aAIG4VR80.roa
Signing time: Tue 13 Jun 2023 07:14:03 +0000
ROA not before: Tue 13 Jun 2023 07:14:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210474
IP address blocks: 62.60.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Aug 2023 07:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:9a:c2:53:ca:ef:ec:af:27:fe:f8:11:25:66:c5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 13 07:14:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d79236128dfbf91a22252ee0fd680206e1547cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:21:97:dc:60:12:7b:58:c7:0c:17:ab:a3:
c0:d9:d4:67:74:c0:92:1b:8c:49:ac:f2:23:41:3c:
05:6c:a0:d0:52:53:f8:da:18:1c:19:00:65:99:1b:
c5:c9:87:cb:8a:81:87:bf:8d:09:43:b6:43:11:46:
f9:84:55:f4:a9:7e:af:93:bf:a4:6b:10:25:e9:55:
18:35:57:e9:56:3f:16:24:3d:5a:d8:13:3d:a3:b4:
40:33:aa:f1:d7:a1:1d:3e:5d:b1:eb:5f:c7:56:eb:
0c:56:e3:f2:62:be:81:54:49:28:c4:fe:34:62:43:
d6:91:b6:4a:f8:4d:dd:85:1b:f8:55:1c:b0:2b:9a:
9a:50:5c:7a:85:c0:6d:5a:f3:d0:92:45:72:fd:59:
b2:b5:58:5b:15:1f:fe:9f:13:a7:9b:3b:91:9b:3c:
4c:7f:bb:b8:52:7c:6b:03:57:2c:71:94:cb:db:a8:
23:bc:52:e4:41:83:20:3b:7b:ff:cb:34:b4:ef:85:
9f:6a:d6:1b:76:3c:27:44:a5:c7:26:7b:63:fa:50:
13:af:80:53:98:5d:98:9d:35:06:05:18:17:9a:d5:
46:f7:2e:f0:0c:41:d7:0c:2d:2e:01:0a:5c:47:b0:
5c:33:17:61:6a:7b:97:6f:14:8e:0b:32:20:87:b5:
26:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:79:23:61:28:DF:BF:91:A2:22:52:EE:0F:D6:80:20:6E:15:47:CD
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/LXkjYSjfv5GiIlLuD9aAIG4VR80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.143.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e3:1a:50:bd:72:68:fa:42:98:8c:87:3b:70:e0:fc:21:4b:
dc:aa:52:ce:b5:ad:c7:dd:0d:3c:fc:55:19:28:5a:7d:82:bd:
c2:20:3a:e8:a4:e3:05:74:e5:41:4b:44:bc:41:b8:8f:6f:f9:
6b:ee:57:18:4d:aa:97:10:c1:83:4c:72:2e:7e:78:ae:fe:cb:
84:f7:e5:2c:50:a9:4f:fb:38:75:90:3a:1b:df:f1:56:0f:21:
49:f0:be:98:b2:80:81:6d:60:d9:e4:d6:3c:cf:ba:d3:b1:8f:
55:45:2c:63:51:83:a5:d9:13:4a:c3:a0:7c:3e:fd:f3:ec:6a:
2a:a7:f3:a0:bb:e2:c8:be:c4:24:92:db:d7:85:0f:65:29:3f:
70:02:09:42:c6:c0:e3:e0:d6:c1:71:0a:f3:b7:a0:73:c7:f9:
f5:43:81:5a:37:a8:7d:78:a4:a1:46:43:de:3d:94:05:7b:0c:
81:04:62:3f:95:7f:27:a0:84:b0:02:0b:1e:d1:e1:9f:3b:47:
ec:da:37:6b:da:5c:e2:72:bf:60:ac:a7:41:07:67:47:bc:36:
04:b3:ed:1e:4f:5c:04:92:1f:f2:7e:1f:e8:01:1f:69:0d:e6:
62:89:33:01:7e:07:49:24:b8:bb:f1:a2:21:6a:0f:5d:04:5b:
04:3a:ea:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org