Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/PPVJMM0Prq8C0ZeJW4J9ub6qWSU.roa
File: PPVJMM0Prq8C0ZeJW4J9ub6qWSU.roa (raw, json)
Hash identifier: 7EZ5a6nAzAIpA5G9WmhZ3yjh05d7SGcEnPP6jxDUR5Y=
Subject key identifier: 3C:F5:49:30:CD:0F:AE:AF:02:D1:97:89:5B:82:7D:B9:BE:AA:59:25
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018570B073E09848417194B5FF733859FA34
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/PPVJMM0Prq8C0ZeJW4J9ub6qWSU.roa
Signing time: Mon 02 Jan 2023 04:14:50 +0000
ROA not before: Mon 02 Jan 2023 04:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 62.60.216.0/22 maxlen: 24
213.176.64.0/22 maxlen: 24
62.60.128.0/22 maxlen: 24
213.176.88.0/22 maxlen: 24
62.60.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jan 2023 07:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:73:e0:98:48:41:71:94:b5:ff:73:38:59:fa:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 04:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cf54930cd0faeaf02d197895b827db9beaa5925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:56:3c:ec:6e:72:d8:91:94:08:20:05:75:7d:
d9:94:1c:e4:19:9a:24:2d:24:63:08:78:f8:a8:d3:
39:e5:7c:7b:b8:9c:9f:c0:65:85:0f:03:34:8e:91:
54:03:a0:8c:54:4b:da:e5:94:8c:dc:db:43:6c:ed:
1d:56:68:c8:e2:4f:c4:fb:31:02:26:ae:b5:13:5e:
2a:33:83:b0:1c:38:d7:c9:1e:93:eb:0c:c8:00:28:
a7:b4:e4:fd:7f:25:fc:74:bf:d3:46:9f:e0:db:8b:
4f:9d:77:a7:b1:2b:48:4d:8a:2f:b0:ab:ca:0b:2a:
72:01:f5:18:78:3a:8e:78:c3:ab:5e:16:e6:98:5e:
ef:21:c0:79:78:2c:b3:82:8b:0b:2f:eb:16:6c:12:
db:4d:e8:7a:b4:82:d8:ec:8d:27:89:cb:8f:63:4d:
fa:ca:36:ce:cf:db:c4:97:0d:9a:b6:d0:7c:05:37:
54:d0:2f:35:f0:06:da:ee:c8:f1:14:72:18:89:23:
3a:03:d8:c9:19:d2:92:b0:3e:93:19:82:e9:e4:24:
ba:7a:8d:da:cf:16:9f:11:ac:c2:fa:6d:f7:e1:b8:
c4:e0:66:d9:4d:61:49:68:5d:27:4c:42:3c:f3:26:
22:20:25:dc:d1:cd:66:83:fb:18:f4:6a:bf:d6:44:
d5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F5:49:30:CD:0F:AE:AF:02:D1:97:89:5B:82:7D:B9:BE:AA:59:25
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/PPVJMM0Prq8C0ZeJW4J9ub6qWSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0/22
62.60.152.0/22
62.60.216.0/22
213.176.64.0/22
213.176.88.0/22
Signature Algorithm: sha256WithRSAEncryption
56:a5:fe:76:e4:82:f9:63:6e:00:1e:c5:8d:53:46:0b:56:7e:
4e:02:f2:b9:b9:ae:70:cf:2c:3d:47:2d:97:9f:b6:52:cc:a1:
c8:03:de:b2:b3:5e:c8:6b:f2:22:81:b1:71:20:88:f5:85:22:
fb:dc:8d:e4:03:39:2a:57:33:3c:d9:a2:4f:f8:d0:0d:43:92:
4a:e1:6b:2a:49:e1:1f:69:e4:fe:27:1d:94:2b:63:f0:fa:82:
90:33:1d:0e:d8:16:96:b2:82:23:5f:9b:b3:1e:70:13:2c:47:
c9:9c:b6:76:56:08:62:48:d8:f5:6a:31:e1:3c:0c:fb:33:60:
a9:94:9a:7f:31:93:57:97:16:16:c6:f7:0a:ab:77:88:24:52:
84:a3:b6:b5:2e:76:67:62:b2:45:03:6b:1b:95:ec:70:e0:66:
20:f7:91:5f:51:88:ae:92:ba:d0:ce:a6:7f:dc:29:85:c2:ae:
68:95:6f:02:18:bd:7c:43:ac:ba:93:52:37:dc:3b:82:e9:11:
d0:97:0c:59:7f:ef:28:fa:1d:4f:cc:74:3f:67:ee:41:28:f4:
5c:9d:bc:bd:fd:70:9b:bd:a0:a5:33:94:07:97:12:36:ff:82:
7f:0e:a7:6e:af:aa:23:1d:78:bd:50:66:38:fb:dc:59:b2:0a:
d3:24:14:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org