Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/PNdfH0PuKsSv-3LGh7i396BThb4.roa
File: PNdfH0PuKsSv-3LGh7i396BThb4.roa (raw, json)
Hash identifier: Q6tBH7fsHjnyJZfKQ+V1ADluiDMnbsFBrx899q0TF5w=
Subject key identifier: 3C:D7:5F:1F:43:EE:2A:C4:AF:FB:72:C6:87:B8:B7:F7:A0:53:85:BE
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01913DE1A95D993A97DD9ABAA4E2FEE55B3B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/PNdfH0PuKsSv-3LGh7i396BThb4.roa
Signing time: Sat 10 Aug 2024 20:01:24 +0000
ROA not before: Sat 10 Aug 2024 20:01:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13213
IP address blocks: 62.60.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 15:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3d:e1:a9:5d:99:3a:97:dd:9a:ba:a4:e2:fe:e5:5b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 10 20:01:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cd75f1f43ee2ac4affb72c687b8b7f7a05385be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:35:b0:4b:f0:55:b0:84:c8:86:4f:7b:8d:a7:
b8:7c:bb:a7:5f:e4:4e:2f:dc:a9:2a:7e:42:c5:d6:
21:50:03:f4:ef:78:d0:4c:28:3d:66:66:8f:20:95:
16:1b:61:99:0a:7f:3d:e8:11:11:e9:e3:f0:d4:1a:
c8:db:7f:18:d3:22:ba:dc:9f:de:08:b0:31:a7:66:
4b:57:9b:7e:b9:00:9d:d7:8c:70:cc:11:a7:32:fb:
9d:90:3d:b7:e6:9b:98:05:a1:8a:41:d8:18:c2:46:
29:eb:da:47:14:5e:e3:23:44:c8:a0:02:3e:28:ca:
a0:de:48:1f:75:1e:8a:e3:3c:4f:f5:48:89:b6:83:
ed:05:16:90:ba:5c:c5:36:43:f3:a3:3a:f3:5c:b6:
67:f5:30:19:73:d2:f2:3a:f0:85:3b:0a:97:f7:55:
82:a5:e0:e6:2b:d0:9a:b4:a7:b4:2e:11:68:bb:e9:
c6:70:8e:ce:3d:a1:0a:d6:9f:e5:df:c9:ec:a3:7b:
06:82:43:12:88:4e:d5:03:53:26:15:e4:b2:a8:ea:
7b:68:b4:d9:92:60:6f:0d:81:e6:6c:a1:41:83:82:
96:a4:a5:da:a6:7e:78:16:c7:fa:1c:a2:a8:e8:58:
71:3b:36:5b:4e:40:b0:a8:fe:3d:2f:fd:2d:f8:fc:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D7:5F:1F:43:EE:2A:C4:AF:FB:72:C6:87:B8:B7:F7:A0:53:85:BE
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/PNdfH0PuKsSv-3LGh7i396BThb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0/22
Signature Algorithm: sha256WithRSAEncryption
03:ef:3c:f8:2e:80:18:b5:40:ba:35:16:e5:42:30:6e:bc:5c:
43:b3:5b:fd:98:df:b8:e7:15:88:32:46:67:3f:3d:aa:04:62:
d8:b6:b3:23:cb:d3:23:ab:b3:85:f5:27:b1:8a:f9:b2:53:c7:
99:2a:ff:d1:31:35:03:f9:e7:16:27:f9:04:b2:3f:82:93:10:
5f:3b:ad:e8:4e:0a:a2:4b:b4:81:12:80:95:a3:f9:1a:57:de:
ed:16:8d:4a:d8:9e:cb:02:1a:2b:3b:bf:91:06:67:a6:d8:e7:
eb:88:10:31:3b:fd:85:98:70:9f:b8:ea:f8:91:52:97:ae:48:
90:ab:55:45:88:01:9c:72:2c:70:32:a8:1f:3c:4f:7d:7d:c2:
5d:39:a1:dd:01:7b:80:72:ac:0c:0d:e1:f8:fa:07:6f:7c:02:
22:55:f1:10:c9:f2:e4:9c:d2:be:2e:77:78:25:71:aa:8d:1c:
d3:4a:e2:82:e8:46:66:6a:7e:4c:5d:05:75:73:fe:06:fc:11:
d8:63:6d:c5:21:a6:8e:ed:35:4f:97:f1:ca:7f:49:f7:88:e6:
20:25:4c:e8:93:d1:33:19:40:08:5b:6c:d1:72:6d:29:05:87:
8e:eb:35:35:a3:ad:5f:a6:06:e2:62:e5:ac:0b:4f:9a:95:c6:
b7:8a:6e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 17:04:46 2024 by rpki-client on console-fra.rpki-client.org