Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MlWqv64nYJj8NqHByw_3RwoAJlk.roa
File: MlWqv64nYJj8NqHByw_3RwoAJlk.roa (raw, json)
Hash identifier: cG8yHHLu7235HmjSQZu+jOmriwxPpOyITaywIh7lUDs=
Subject key identifier: 32:55:AA:BF:AE:27:60:98:FC:36:A1:C1:CB:0F:F7:47:0A:00:26:59
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0186DAEEF41E7528E553607F7B42364B3422
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MlWqv64nYJj8NqHByw_3RwoAJlk.roa
Signing time: Mon 13 Mar 2023 12:25:38 +0000
ROA not before: Mon 13 Mar 2023 12:25:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53356
IP address blocks: 62.60.164.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Mar 2023 16:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:ee:f4:1e:75:28:e5:53:60:7f:7b:42:36:4b:34:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Mar 13 12:25:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3255aabfae276098fc36a1c1cb0ff7470a002659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:76:d9:e7:55:17:1e:d9:bd:f4:f3:eb:20:dc:
9d:7e:e8:67:b8:4c:08:9c:2c:96:42:f9:40:8a:10:
e9:ea:61:20:c7:ec:5c:6e:7c:e2:da:c9:95:9c:79:
d1:85:51:ee:7d:a2:d0:92:2a:04:dc:17:b5:6c:73:
06:68:2b:6a:db:e6:fd:4a:b8:f2:58:7f:a6:f4:dd:
26:51:3d:25:78:18:eb:a9:90:91:26:59:7a:bd:37:
8c:9b:cd:19:48:a3:e8:8a:3c:30:a3:22:68:e5:20:
30:85:e4:8e:4c:c2:d8:2e:5a:68:c6:a7:f2:ea:b8:
c8:3a:98:00:e5:1a:bc:35:03:4c:7b:94:e7:16:f7:
ce:75:c0:61:c1:fe:c4:4d:bf:ae:4a:d4:9b:f0:68:
97:15:8c:6f:f3:9d:af:b4:db:49:f9:90:fb:39:f9:
80:42:84:27:cc:a0:06:79:bb:4c:78:70:88:42:c5:
35:d8:56:85:59:66:c3:64:19:dd:50:5e:5a:a9:b4:
af:65:64:a3:a3:8c:c4:fd:02:9d:ad:78:7c:d8:10:
17:f2:34:d2:93:e0:c2:8f:52:64:ce:18:d3:42:f6:
8c:70:6d:c2:c6:78:ed:0c:96:15:f9:b9:da:5a:0f:
8c:c8:c1:44:d9:ec:ab:8f:9b:d9:41:b7:66:08:eb:
b3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:55:AA:BF:AE:27:60:98:FC:36:A1:C1:CB:0F:F7:47:0A:00:26:59
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MlWqv64nYJj8NqHByw_3RwoAJlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.164.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:7d:26:c9:15:de:ae:1d:5a:fa:ca:71:08:98:90:8d:f2:06:
65:8c:ec:e9:b0:4e:3b:a8:0c:62:b6:56:43:f9:92:57:a5:a6:
00:e5:61:30:7f:f1:90:51:a2:e4:c7:bf:e5:e4:89:95:2e:cd:
b5:7f:1f:4c:a9:04:61:ee:69:60:de:da:c7:00:ce:12:77:3d:
ba:15:da:ed:dd:e6:fe:76:9e:de:ed:9a:2c:60:3d:25:6b:0d:
3f:52:4c:06:55:90:ff:83:7f:34:88:05:78:4a:6b:c5:df:80:
c6:41:af:3c:c5:95:aa:a4:64:81:12:c0:cd:0a:0d:04:32:ce:
1e:02:9f:86:53:3e:31:55:fe:20:9c:8e:85:11:c5:c9:00:dc:
99:60:b5:d3:6d:e1:16:d6:26:ee:15:67:2b:a4:04:14:a5:98:
76:ca:9a:d4:bd:2d:ad:54:ae:3c:ef:f4:d2:a6:4a:9f:f4:59:
1d:be:03:18:8f:b1:65:af:c2:0a:0e:e6:24:b0:b0:aa:34:23:
ef:d6:64:e9:7a:27:53:f2:ec:42:3c:76:95:d5:67:48:bd:40:
9b:41:ee:d5:5c:48:92:db:c9:de:46:f2:78:f0:8e:07:ea:cc:
13:79:36:d7:3f:79:d5:2d:12:f2:96:68:2f:22:2f:45:28:7d:
30:94:b3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org