Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MsDBgBfP-aNVotENvr-aQCjqLTA.roa
File: MsDBgBfP-aNVotENvr-aQCjqLTA.roa (raw, json)
Hash identifier: QdVKoJc+dBwzFRkeBh1ygoahHE888muXLQDvvE5Iy3A=
Subject key identifier: 32:C0:C1:80:17:CF:F9:A3:55:A2:D1:0D:BE:BF:9A:40:28:EA:2D:30
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018EEACD97B20AD42614CC2E6B67A9D6F5FB
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MsDBgBfP-aNVotENvr-aQCjqLTA.roa
Signing time: Wed 17 Apr 2024 06:45:25 +0000
ROA not before: Wed 17 Apr 2024 06:45:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 62.60.184.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 12:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ea:cd:97:b2:0a:d4:26:14:cc:2e:6b:67:a9:d6:f5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Apr 17 06:45:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32c0c18017cff9a355a2d10dbebf9a4028ea2d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:25:c2:4f:7d:ea:9d:15:72:32:f9:92:61:66:
67:57:18:fe:95:ad:d3:0d:2a:c8:1a:8e:df:a4:ae:
4b:25:6e:43:ad:0c:8d:82:fa:f3:8d:b8:f5:9f:cc:
77:60:35:32:a7:d2:c0:eb:77:25:07:55:bf:b6:c3:
80:c1:f1:63:aa:46:c2:2f:43:92:42:dd:d6:5d:ab:
52:62:e7:e3:3b:36:39:76:62:8f:d1:65:e5:b8:5b:
4f:e7:ca:d7:58:7e:20:6e:57:0b:ed:ff:72:71:f0:
67:58:17:7d:15:68:82:67:8b:f7:90:7a:79:45:a5:
12:43:08:56:5d:00:61:93:10:f1:62:21:5a:0c:69:
d3:08:51:09:13:ae:e9:53:3f:5e:ad:30:75:82:04:
88:93:88:b5:fd:d2:8c:b5:c7:68:fa:e1:81:2c:de:
17:48:d9:c7:46:f4:0a:d6:3f:c8:0b:0a:9e:97:a7:
f1:e1:d7:4c:61:c0:a2:d7:3d:3e:f8:16:71:1d:63:
74:f6:e5:71:0c:44:c8:3f:83:dd:19:98:8f:e4:33:
35:86:46:9f:69:a5:78:3c:bc:d8:d3:79:26:59:6d:
9f:c3:ad:7e:f0:fd:93:5f:d5:12:d2:7a:47:1c:f5:
0d:4e:56:4a:53:79:d9:49:7d:79:55:17:7d:1f:9c:
5c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C0:C1:80:17:CF:F9:A3:55:A2:D1:0D:BE:BF:9A:40:28:EA:2D:30
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MsDBgBfP-aNVotENvr-aQCjqLTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.184.0/22
62.60.192.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:4b:36:d5:d0:bb:68:d5:3f:28:54:e1:a7:f7:42:28:1f:23:
45:13:5e:71:c2:dc:41:93:88:f1:f8:bb:a5:47:6b:96:a7:bd:
68:1f:cc:24:4f:ff:c7:08:67:4e:9a:f9:c5:22:11:fc:38:f1:
38:be:51:18:ba:89:d0:22:b6:a7:3b:19:62:79:f5:d0:b5:b7:
91:3f:96:47:5d:ad:63:05:17:da:4b:66:3b:b9:11:26:ed:5f:
31:22:67:1b:12:a5:e3:f2:d1:67:2f:89:c2:e4:80:24:6b:9c:
8d:ec:e7:c8:89:4d:61:69:5e:42:5b:96:ba:2f:d3:fb:6e:75:
d6:20:af:fb:39:16:dc:c6:d6:48:47:b4:5e:22:c1:0f:6b:c2:
04:8e:f6:a5:e1:23:5e:c4:d7:9b:58:a7:bf:d5:9b:33:14:4b:
5d:d2:2b:f3:50:11:d7:11:bd:2a:c9:fb:25:ed:11:b2:8b:e3:
57:9a:e2:25:4f:cc:6f:1c:15:09:52:b0:6e:7c:be:b3:2d:eb:
5b:a2:6a:32:81:9f:9a:74:ad:a7:b0:5a:86:6c:59:2e:06:c0:
25:8f:c5:06:99:69:4f:b8:3f:47:0b:93:a1:2b:34:f3:46:ac:
8b:b4:8d:62:d7:6d:9d:87:34:49:e7:d4:bb:3c:b3:4b:ab:0e:
fa:ad:d1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org