Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/N3ki83yxmcRSKfoImyBjZd9HeQ4.roa
File: N3ki83yxmcRSKfoImyBjZd9HeQ4.roa (raw, json)
Hash identifier: lzp6iPaBB1/oN+I5CltaSvuqNAaK3lOAqYafJuphUbQ=
Subject key identifier: 37:79:22:F3:7C:B1:99:C4:52:29:FA:08:9B:20:63:65:DF:47:79:0E
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018AFE27399AC18F91D19F90AF24EBE9E738
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/N3ki83yxmcRSKfoImyBjZd9HeQ4.roa
Signing time: Thu 05 Oct 2023 04:44:58 +0000
ROA not before: Thu 05 Oct 2023 04:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 62.60.180.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 09:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:27:39:9a:c1:8f:91:d1:9f:90:af:24:eb:e9:e7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 5 04:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=377922f37cb199c45229fa089b206365df47790e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ac:a4:6f:49:e4:0a:88:54:96:38:65:bb:75:
25:16:0e:9e:3c:76:01:f8:45:53:ec:cc:00:8e:89:
82:92:03:66:00:1e:c0:80:84:55:73:85:8d:31:7d:
fc:b8:f9:ce:21:72:68:75:9d:e0:5c:f6:f8:4d:7d:
ad:7c:a7:13:f5:2e:2a:79:fe:0d:6e:75:3d:e8:4a:
1c:71:b7:45:8d:3d:16:49:a8:e8:0e:aa:b1:15:24:
93:4c:88:cf:7e:ba:33:4d:fb:0c:a1:b8:71:a7:3f:
e3:68:62:cc:32:74:1d:90:a6:bb:46:0a:9f:f0:e0:
57:5c:21:15:02:77:fb:cf:06:ab:54:b8:b6:29:3b:
8e:35:1c:f7:50:9b:d8:14:ed:a6:1b:d7:31:5d:cb:
a5:55:88:0b:03:45:7f:d5:75:55:fd:e8:4b:71:bc:
ad:d2:3e:06:47:8b:a0:71:be:f2:ad:56:f4:f4:01:
d9:7c:86:5a:07:9f:29:2b:4b:11:46:82:ce:71:91:
68:8e:9e:ef:5e:ca:ce:40:af:42:ca:3c:5e:1d:54:
b8:41:e0:b5:16:19:3b:c4:90:de:b0:46:56:bc:d2:
30:a4:65:8e:eb:97:2b:12:7a:0f:10:ad:ad:c7:07:
36:95:ad:a8:81:59:71:19:80:9c:a5:ea:54:85:5c:
70:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:79:22:F3:7C:B1:99:C4:52:29:FA:08:9B:20:63:65:DF:47:79:0E
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/N3ki83yxmcRSKfoImyBjZd9HeQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.180.0-62.60.187.255
Signature Algorithm: sha256WithRSAEncryption
11:69:5e:f4:67:e5:c5:72:8c:01:73:e8:b6:8f:fd:9d:3c:30:
cf:52:97:d1:17:40:f6:ab:3c:e3:09:01:75:08:43:cc:1b:d6:
2f:b6:09:64:0c:12:70:46:bf:1c:92:0a:0e:61:30:f4:1a:64:
a1:1c:4b:06:f9:9d:8f:6b:49:1a:b5:e7:ee:f9:9d:08:32:f2:
e5:e3:25:8a:ea:02:88:fe:f4:48:c1:32:63:ff:21:c2:76:8c:
2c:36:81:2e:c8:2b:a9:c6:2c:c4:da:d0:4a:fc:19:ff:9f:41:
1e:3c:c0:77:61:8b:06:6a:c2:8d:1a:0c:e2:15:ef:a6:a5:dc:
2f:2a:a2:e1:84:4a:9a:4f:c8:64:3e:ff:8e:62:a8:c2:92:a5:
29:f0:6b:8d:fb:4f:15:16:b7:76:1c:10:34:04:9c:c5:2f:37:
6e:a8:89:45:14:dc:a4:b7:7f:55:e8:91:fd:30:af:86:bb:89:
f5:2b:37:bc:a6:43:5f:f7:c9:5d:d9:da:20:79:68:d0:5c:74:
7c:4d:29:f8:bb:3e:e6:28:74:46:ef:f5:a7:ee:91:88:dd:ab:
72:7c:91:75:c0:7d:30:e7:c6:a3:34:76:35:fc:48:e7:75:c3:
e3:a7:c2:76:b6:ac:4c:8a:c2:03:ce:71:c5:f0:1c:93:a1:79:
a7:e3:78:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org