Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/NPCUMU8_tf4pQCH-nxMuHbEc8SM.roa
File: NPCUMU8_tf4pQCH-nxMuHbEc8SM.roa (raw, json)
Hash identifier: 6dGeEhfuq55YVSw+KfTWKDaAhZ5NTz0rrLKUMc9UOoQ=
Subject key identifier: 34:F0:94:31:4F:3F:B5:FE:29:40:21:FE:9F:13:2E:1D:B1:1C:F1:23
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018585F323D73706213D89259B22A8F769B5
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/NPCUMU8_tf4pQCH-nxMuHbEc8SM.roa
Signing time: Fri 06 Jan 2023 07:19:42 +0000
ROA not before: Fri 06 Jan 2023 07:19:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.132.0/22 maxlen: 24
62.60.148.0/22 maxlen: 24
213.176.24.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jan 2023 08:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:85:f3:23:d7:37:06:21:3d:89:25:9b:22:a8:f7:69:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 6 07:19:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34f094314f3fb5fe294021fe9f132e1db11cf123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:1e:14:d2:b2:c3:ec:42:37:93:46:d1:83:
4d:43:17:d7:7b:2e:07:51:bf:49:ce:54:5d:11:5a:
4b:9d:a0:fd:6b:48:8c:0f:e0:eb:01:6b:63:fc:63:
44:fe:44:cf:0f:17:c0:d3:d0:36:a7:01:8a:da:95:
20:3c:25:04:68:76:6c:23:7c:4c:ad:18:e0:76:cf:
c3:7c:a9:70:8d:6f:ce:29:dc:56:d8:de:9b:4d:23:
bb:df:e5:cc:35:67:e2:81:f5:bd:2e:13:af:c2:6f:
1f:e1:b5:ef:d1:96:9c:c6:e5:27:ae:19:ac:a3:e6:
4b:15:0f:81:5f:29:16:ee:ee:89:8c:65:cc:14:2a:
5f:c4:0f:b0:ff:48:31:e5:48:c7:8d:44:be:f8:b5:
43:43:5b:ca:24:c1:24:00:db:a8:db:1a:b2:34:f1:
c4:de:ff:03:23:86:51:c3:da:64:e1:91:8a:03:fd:
27:e0:d1:43:4f:eb:43:9c:67:54:94:1b:e2:4e:e5:
5e:2b:2d:83:32:97:30:b4:30:b1:7a:da:83:8c:6e:
4c:a6:ae:1f:8b:f7:92:54:73:86:9b:97:4b:a8:c2:
ee:02:14:77:6c:ab:c3:e1:9f:ff:57:a9:58:6a:11:
2f:cc:0e:c6:9d:d0:92:99:0a:a9:76:0a:13:40:dd:
d9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F0:94:31:4F:3F:B5:FE:29:40:21:FE:9F:13:2E:1D:B1:1C:F1:23
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/NPCUMU8_tf4pQCH-nxMuHbEc8SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0/22
62.60.148.0/22
213.176.24.0/22
Signature Algorithm: sha256WithRSAEncryption
18:45:5e:d3:2d:6a:be:85:b8:3e:c0:41:5e:8c:51:1a:a5:be:
d3:7c:a4:04:1d:8c:5e:ff:f9:08:d6:2b:dc:06:cc:5d:4f:ed:
9b:43:2d:ad:a7:9d:4e:ad:b1:9f:3b:49:ca:d7:bd:fc:ab:0f:
c2:96:53:01:6e:ab:fb:09:04:77:87:64:43:a7:53:be:02:0c:
c2:fb:c8:51:ee:88:55:3a:9b:78:3c:f8:ff:1d:b5:fb:6f:7a:
6a:fd:c7:b4:46:4f:89:08:13:ff:1d:3e:35:2e:a2:dc:48:5f:
47:6d:33:bf:b7:c3:dc:84:82:da:e7:50:eb:f5:d7:82:e7:8a:
11:33:cf:d1:b6:0d:5a:2d:79:f1:74:7a:dd:61:1b:14:cf:8e:
ee:44:4b:0c:87:10:25:d4:3e:b7:ed:a8:a8:fa:5d:00:0b:45:
e2:f1:da:14:a4:03:a9:dc:04:1b:73:f7:57:95:b4:e1:bf:a8:
33:c3:a4:90:fd:ac:68:bb:09:66:5e:cc:1b:c4:c0:14:c3:41:
02:86:13:70:ca:81:c3:f3:f5:16:c8:c7:a1:c9:eb:26:0a:95:
8c:9d:9f:e1:53:07:20:30:1b:83:b2:38:99:65:45:08:db:44:
40:ec:e1:04:7b:ef:12:93:d6:c3:22:41:e5:71:92:00:69:3e:
2e:db:5a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org