Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Mb7V_MM8f8XYi1OSItfRA_L7pmo.roa
File: Mb7V_MM8f8XYi1OSItfRA_L7pmo.roa (raw, json)
Hash identifier: Xaef0zNKJbWqBwxMP9A+dkb9NBnTulupScZzrSh31/4=
Subject key identifier: 31:BE:D5:FC:C3:3C:7F:C5:D8:8B:53:92:22:D7:D1:03:F2:FB:A6:6A
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01915B6BE33721A04DA8DC3B64071C8BCE08
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Mb7V_MM8f8XYi1OSItfRA_L7pmo.roa
Signing time: Fri 16 Aug 2024 13:41:22 +0000
ROA not before: Fri 16 Aug 2024 13:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211056
IP address blocks: 62.60.193.0/24 maxlen: 24
62.60.194.0/23 maxlen: 24
62.60.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Sep 2024 07:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5b:6b:e3:37:21:a0:4d:a8:dc:3b:64:07:1c:8b:ce:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 16 13:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31bed5fcc33c7fc5d88b539222d7d103f2fba66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:86:f3:25:ca:f2:01:8d:b0:47:eb:79:ed:
77:fa:b8:d6:07:ea:21:75:ab:38:f4:a0:56:58:8a:
cf:69:dc:45:60:52:90:3c:3b:a6:51:b5:1b:50:06:
24:9a:4c:79:17:9d:a9:25:64:70:3f:66:f6:2a:ba:
ae:e2:47:03:c8:cd:e2:b1:95:10:ba:88:54:9d:fa:
8d:09:8f:c4:5b:fe:9f:c4:e4:be:c8:3a:97:1e:09:
94:eb:30:57:49:13:6e:cc:bb:5b:b8:f2:47:72:da:
01:05:1b:95:87:34:d5:9a:d4:28:7e:2c:f4:dd:89:
ab:05:8b:24:67:fc:83:9a:f7:5a:80:c2:45:23:7f:
65:e7:66:e0:6c:0f:e7:91:07:9d:1e:38:60:eb:6d:
00:07:19:80:51:e0:d9:e3:b2:8c:c3:9a:aa:68:62:
57:94:2e:89:a2:ed:ae:b8:6e:21:a7:f0:8e:91:d3:
57:ae:bf:9c:dd:94:53:ca:34:b1:8d:83:eb:29:e7:
04:e3:fc:83:28:5d:0a:4f:23:94:f5:fd:32:f9:96:
bf:36:29:33:3d:ab:da:44:fc:86:db:f0:37:42:ce:
b9:a2:7f:98:82:78:fa:8b:e1:9d:9d:f7:c4:31:be:
ea:79:94:27:42:3a:53:76:de:f7:85:3b:79:a8:2a:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BE:D5:FC:C3:3C:7F:C5:D8:8B:53:92:22:D7:D1:03:F2:FB:A6:6A
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Mb7V_MM8f8XYi1OSItfRA_L7pmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.193.0-62.60.195.255
Signature Algorithm: sha256WithRSAEncryption
3d:0f:f9:5f:50:05:6c:31:57:81:4b:bd:5e:79:8e:b1:dd:12:
3c:cb:44:9f:77:4d:8d:59:c0:90:6a:bc:54:7b:c9:09:2b:53:
82:60:0e:45:63:b6:1a:dd:80:9e:6e:2e:5a:48:1a:e2:97:24:
89:1c:a3:62:0a:05:ab:30:07:fe:22:36:c2:12:f9:a9:3d:0c:
65:5d:17:7f:a1:90:f1:9a:25:52:41:b2:e1:06:e7:29:1f:9c:
38:69:df:77:2e:ea:11:ec:c6:ac:6f:b0:ee:04:cc:81:19:6d:
a0:f6:45:3c:ba:de:0a:00:c2:1e:79:43:ca:9e:01:c0:38:fb:
a5:36:a6:01:2e:43:96:85:dd:bb:b2:f3:3b:a8:9f:96:32:9e:
7a:9b:2f:f4:63:33:dd:69:d4:5c:72:77:5b:1e:71:a0:a1:2c:
de:2c:d2:f2:3f:e4:f8:56:d0:dc:93:c8:58:a0:1a:5d:ed:e2:
9a:fb:0d:f5:11:52:18:a9:34:76:8e:43:b0:e6:eb:d2:8a:9f:
3b:39:3f:45:c1:9a:d6:2a:99:91:d5:de:5e:aa:99:f9:ab:82:
d2:43:72:bd:66:2e:6e:5a:b4:04:f2:a9:0e:9a:b4:f9:3b:2a:
f7:7e:b6:c3:97:5a:99:93:e6:6e:1a:07:ea:bd:40:61:c2:5d:
cb:5a:d7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 14 09:00:34 2024 by rpki-client on console-ams.rpki-client.org