Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/LsEu0raWFRX30WaZ-h7CvWAaulg.roa
File: LsEu0raWFRX30WaZ-h7CvWAaulg.roa (raw, json)
Hash identifier: QH+OsRfFuFknYERLKLJSCJo3ndG7oHTdyjPSqo42IH4=
Subject key identifier: 2E:C1:2E:D2:B6:96:15:15:F7:D1:66:99:FA:1E:C2:BD:60:1A:BA:58
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01893A1D5DBF31FD136A7D49CC8B16412952
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/LsEu0raWFRX30WaZ-h7CvWAaulg.roa
Signing time: Sun 09 Jul 2023 10:05:50 +0000
ROA not before: Sun 09 Jul 2023 10:05:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211241
IP address blocks: 62.60.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jul 2023 10:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:1d:5d:bf:31:fd:13:6a:7d:49:cc:8b:16:41:29:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 9 10:05:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ec12ed2b6961515f7d16699fa1ec2bd601aba58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d2:39:27:1c:94:d2:b8:70:64:40:55:09:9a:
a1:1b:d7:28:8e:7a:42:66:7d:ff:79:cd:aa:ae:0b:
50:af:83:9c:7e:e7:0b:df:51:c7:e1:c3:2f:4a:cf:
8d:89:a6:96:63:10:ec:72:a4:cf:13:15:ab:0d:c0:
e2:8d:dd:f7:eb:96:34:27:83:30:5e:88:3b:e1:cb:
f0:a5:db:d2:12:8f:16:00:8e:be:aa:d9:2c:12:0b:
af:36:33:f1:42:c8:c6:b6:5e:2c:f4:1c:03:ac:dd:
76:1d:99:96:a8:4d:52:36:fa:2a:64:fa:96:de:4d:
44:64:03:ed:d7:23:77:51:5a:b8:59:46:8e:46:5b:
56:14:71:61:01:8e:81:97:37:3f:9d:b6:a4:b3:96:
17:59:04:88:54:55:03:3b:5d:a1:1a:7f:43:8c:21:
94:8c:b5:76:47:8b:7b:5a:55:99:f6:c4:bf:06:4d:
da:d3:3e:19:70:2e:8e:71:e9:ab:14:16:58:ad:01:
17:99:84:dc:65:b1:fe:c6:29:5a:92:5b:69:f4:9b:
1d:b8:04:86:77:12:31:c9:03:0a:d3:ed:b1:af:b7:
89:58:1a:25:61:cb:b2:d6:a5:9d:c6:1a:16:f7:b7:
9b:7a:ff:84:36:bd:09:ca:36:24:74:60:64:d4:69:
e1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C1:2E:D2:B6:96:15:15:F7:D1:66:99:FA:1E:C2:BD:60:1A:BA:58
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/LsEu0raWFRX30WaZ-h7CvWAaulg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.188.0/22
Signature Algorithm: sha256WithRSAEncryption
ce:62:24:b8:ba:ad:ee:3f:f6:3e:ed:fb:92:1e:ff:8c:03:f0:
12:ee:a8:d1:d1:7f:e3:c1:7f:85:06:79:5a:eb:e7:0b:37:2f:
ae:d3:2d:6e:aa:ac:62:ad:62:db:64:25:4d:3f:a7:ee:12:ac:
3a:2d:75:64:85:f6:fb:ec:82:e6:3e:bb:a9:e2:60:14:49:b2:
7b:89:d1:18:ed:c4:ce:f1:d4:62:8a:b2:66:70:bf:32:cc:4b:
df:36:67:7f:99:9d:89:7d:41:c3:71:ad:87:ea:50:f2:0f:52:
81:63:0c:6a:13:2f:ed:07:ee:ff:24:19:f1:1e:ac:ef:5c:8b:
d9:72:0e:29:aa:71:fd:f2:b6:70:d8:64:44:91:5f:e3:ee:45:
9d:c4:32:dc:12:55:94:c8:1c:36:cd:0e:76:fe:fc:58:25:d5:
06:2d:2e:d0:3e:72:18:e7:2f:a2:77:0a:be:8f:79:ea:9b:4b:
84:98:76:91:48:69:ad:ba:81:a3:c4:3a:c3:29:33:a5:8d:5d:
d1:b4:1b:8f:e1:33:99:fa:49:ba:02:48:b3:f2:c1:1b:2d:54:
dc:4f:ed:e3:2a:94:79:fa:bc:1f:e4:9c:4c:39:55:8b:95:02:
8c:58:bd:bc:e1:27:79:7b:7c:fa:55:95:d5:4b:9b:82:a0:3f:
5e:24:64:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org