Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MgsE6gKCrFrR8YiFb4cQiNMLKTY.roa
File: MgsE6gKCrFrR8YiFb4cQiNMLKTY.roa (raw, json)
Hash identifier: Y0DcHk/F0vCTK9qlN81jJt5JODlqNpKilwwQH/o08No=
Subject key identifier: 32:0B:04:EA:02:82:AC:5A:D1:F1:88:85:6F:87:10:88:D3:0B:29:36
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019126959C069DE8CCFF68C499A1C90BCC9F
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MgsE6gKCrFrR8YiFb4cQiNMLKTY.roa
Signing time: Tue 06 Aug 2024 07:27:04 +0000
ROA not before: Tue 06 Aug 2024 07:27:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211056
IP address blocks: 62.60.193.0/24 maxlen: 24
62.60.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 13:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:26:95:9c:06:9d:e8:cc:ff:68:c4:99:a1:c9:0b:cc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 6 07:27:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=320b04ea0282ac5ad1f188856f871088d30b2936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:ed:60:82:21:ea:6f:42:6c:51:bc:22:bd:
34:d5:89:54:2d:c0:a7:51:e3:64:e6:8b:15:2c:ca:
89:2f:c4:ba:7d:41:c1:1a:b9:3d:18:6d:d8:b6:96:
b4:dc:82:5f:83:c7:45:29:86:07:87:5e:98:51:26:
3b:a3:06:cd:09:c6:a6:bd:3e:85:12:5e:34:59:d2:
5b:e8:4f:41:85:85:08:38:d6:aa:e8:3b:75:72:bd:
b1:38:71:90:ea:3b:03:04:ed:50:86:f0:a2:d6:38:
d1:bf:2d:b2:4f:df:05:46:f8:9d:f4:21:d1:0d:2b:
bb:aa:68:83:84:21:5b:41:2e:bb:b3:04:af:06:78:
90:6f:4b:a0:00:6f:86:a2:89:64:c9:ac:90:0e:0f:
61:6f:cc:fd:0c:3c:4f:35:bd:c8:25:f7:11:39:54:
12:18:50:8b:fa:c0:22:22:14:79:ec:ab:48:f5:c8:
c4:25:14:21:b5:ea:ca:c8:84:47:09:27:2d:9c:f4:
f4:9d:98:a7:56:da:24:0a:e3:fe:77:f1:f4:5a:f6:
1e:9b:bd:5d:30:cc:cc:c6:b1:ae:ca:66:ea:36:8c:
e3:8e:48:e6:6c:5e:ef:cd:93:90:be:3f:6b:cb:8d:
1a:e0:bb:1f:98:5b:8c:50:e9:ab:99:25:27:43:83:
4a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:04:EA:02:82:AC:5A:D1:F1:88:85:6F:87:10:88:D3:0B:29:36
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MgsE6gKCrFrR8YiFb4cQiNMLKTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.193.0-62.60.194.255
Signature Algorithm: sha256WithRSAEncryption
c4:42:5b:46:65:30:0a:28:3c:b7:2e:ce:0b:91:37:f1:d0:51:
25:d3:5e:36:2d:6a:98:58:11:58:88:02:e8:04:1d:f8:d8:1b:
1d:bc:2d:0e:fd:1c:a8:95:95:f6:11:86:7c:9b:3a:c8:6a:e3:
0f:28:4a:52:a0:f8:74:96:62:16:67:61:26:8e:a3:6e:a0:03:
55:7a:e7:a7:e3:d3:8b:8a:37:a3:7b:cc:3a:8b:f5:a1:e2:a8:
b5:50:eb:a0:d3:07:12:33:e3:a3:ce:58:27:67:6d:d2:35:18:
96:46:8e:ae:fe:39:65:53:5a:64:0e:9f:2c:d1:17:48:c9:6a:
fd:37:9d:2a:92:45:cb:65:0e:27:b7:51:80:54:cf:bd:dd:52:
f1:52:89:68:be:ca:11:dd:19:c2:90:61:16:fe:8a:99:73:d4:
83:86:1a:17:2a:43:ba:33:18:c6:c7:6a:e5:e2:0c:e9:76:24:
3d:cb:87:df:ae:84:c8:32:7b:99:5e:21:e8:6e:5d:dd:86:2b:
2b:fc:27:ad:0c:2b:8c:63:21:97:ac:25:b2:35:25:df:94:55:
9f:b0:3e:c8:ef:a6:8b:d5:fd:b9:13:cd:02:d2:62:ba:58:20:
e1:77:9a:2d:51:5c:05:a4:0a:3e:16:a1:c6:c9:89:45:7b:f5:
56:98:3b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 15:18:28 2024 by rpki-client on console-fra.rpki-client.org