Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/PKXGD3TL7ma-goiDphno7OpK3jQ.roa
File: PKXGD3TL7ma-goiDphno7OpK3jQ.roa (raw, json)
Hash identifier: lqvrttd2HxHhEolSX0JNP20N7MS18etxQIFLXuxKQAk=
Subject key identifier: 3C:A5:C6:0F:74:CB:EE:66:BE:82:88:83:A6:19:E8:EC:EA:4A:DE:34
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0188FB605D813E7718782F6BC48E224A9F02
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/PKXGD3TL7ma-goiDphno7OpK3jQ.roa
Signing time: Tue 27 Jun 2023 05:42:56 +0000
ROA not before: Tue 27 Jun 2023 05:42:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53356
IP address blocks: 62.60.216.0/22 maxlen: 24
62.60.146.0/23 maxlen: 24
213.176.2.0/23 maxlen: 24
213.176.6.0/23 maxlen: 24
62.60.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jul 2023 05:43:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fb:60:5d:81:3e:77:18:78:2f:6b:c4:8e:22:4a:9f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 27 05:42:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ca5c60f74cbee66be828883a619e8ecea4ade34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4d:a6:00:1b:e0:d4:f4:78:ed:ce:58:86:ef:
79:a5:55:b7:26:46:86:5e:9c:ea:cc:ef:82:0c:0a:
4d:30:ca:f9:f7:86:6d:0c:8a:32:52:58:6a:08:00:
0b:45:bd:d0:26:db:5f:ac:2b:99:15:b4:0d:c5:a3:
2c:91:6b:00:6f:af:3e:92:62:31:27:9a:21:fe:d3:
ad:41:9a:0c:d8:fb:47:0e:cb:ef:b6:ef:8c:eb:b0:
00:0a:16:4e:4a:6b:78:13:20:87:51:02:27:72:57:
b2:cc:d6:5b:26:a8:74:4d:cf:ed:15:69:5d:1a:d5:
4d:5f:0b:bd:36:4b:f6:99:1f:d5:bd:25:5b:38:f9:
82:8a:5c:72:17:a5:f0:af:97:22:c1:a9:0f:52:46:
6c:92:14:56:30:ba:f1:cc:2a:4e:2a:96:ca:4b:52:
80:0d:a3:5d:e1:e2:15:9f:7f:c7:76:6f:94:98:d3:
d7:01:51:b0:48:cd:5d:fc:f9:8a:78:20:0e:0e:25:
07:8e:21:c2:fb:39:e3:2e:bb:e3:04:48:1a:65:fb:
66:fd:df:3a:c0:63:bc:f8:19:2a:3e:60:38:2f:ab:
e7:7a:79:1f:d2:68:6a:e3:09:94:83:b9:e4:e6:5d:
b6:5b:ef:85:ae:7b:41:5d:26:3d:32:c0:1e:a8:60:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A5:C6:0F:74:CB:EE:66:BE:82:88:83:A6:19:E8:EC:EA:4A:DE:34
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/PKXGD3TL7ma-goiDphno7OpK3jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0/23
62.60.180.0/22
62.60.216.0/22
213.176.2.0/23
213.176.6.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:a9:b1:3d:5f:8f:a6:84:1c:d6:20:69:16:f4:28:3c:12:9b:
21:f3:80:ce:1d:45:c1:4a:11:ce:fa:56:f0:10:c4:f2:d7:54:
78:52:01:30:95:30:cb:fb:0c:ff:23:0d:7a:8c:65:89:dd:23:
57:41:c5:7d:a8:4e:b9:cf:45:fc:33:d9:55:91:e7:b9:0e:9a:
aa:34:df:75:90:80:32:ac:30:45:db:74:82:2e:ac:91:bc:71:
2f:c7:7f:2f:e4:4b:eb:17:44:36:47:81:3b:dd:6f:07:a5:b0:
0e:91:e1:44:21:83:a3:b3:76:e8:d3:1a:80:40:49:18:05:14:
ca:aa:1f:a0:a1:05:33:a8:26:be:f0:e4:46:57:a3:01:44:21:
5f:6d:f3:28:d1:b9:ab:44:ff:5b:f9:9f:5b:c4:da:6e:a3:1c:
50:3c:36:80:35:7a:89:46:aa:f5:2d:ce:5a:0b:36:dc:ef:f2:
c0:89:1b:14:a3:94:89:2c:44:a5:e6:b4:88:31:ea:d9:c8:dd:
26:05:dc:9e:30:ad:b1:2c:de:d9:95:bb:0a:79:28:af:a8:85:
cf:41:20:82:16:68:c3:ea:dd:09:a4:73:59:88:9e:aa:49:be:
cf:b7:b7:c8:13:c5:7f:a1:03:c3:03:b3:ee:5f:1a:2e:8c:4e:
bc:01:7e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org