Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Q4xMFK1l_SvE0BjEADFMFXCeKjY.roa
File: Q4xMFK1l_SvE0BjEADFMFXCeKjY.roa (raw, json)
Hash identifier: kxQoOHSEI7Sd0ju/xFEeMhNrj5UwEDV8uNCfEoJwekk=
Subject key identifier: 43:8C:4C:14:AD:65:FD:2B:C4:D0:18:C4:00:31:4C:15:70:9E:2A:36
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01918342DD909B60CD59764851B60D0F1F2B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Q4xMFK1l_SvE0BjEADFMFXCeKjY.roa
Signing time: Sat 24 Aug 2024 07:21:22 +0000
ROA not before: Sat 24 Aug 2024 07:21:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.152.0/22 maxlen: 24
62.60.156.0/22 maxlen: 24
62.60.240.0/20 maxlen: 24
213.176.72.0/23 maxlen: 24
213.176.92.0/22 maxlen: 24
213.176.112.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Aug 2024 09:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:83:42:dd:90:9b:60:cd:59:76:48:51:b6:0d:0f:1f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 24 07:21:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=438c4c14ad65fd2bc4d018c400314c15709e2a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:ba:c1:f6:29:33:31:4d:3a:51:a3:38:ed:
11:a1:5e:2a:b6:01:d1:14:57:52:25:b8:ba:b2:eb:
89:7e:76:47:fe:fb:4b:e2:a6:c6:07:18:f8:2c:f5:
14:82:73:2a:a9:22:d8:87:b2:7e:27:a8:4f:1f:8a:
21:44:03:e0:1d:d9:90:45:30:ef:9b:0e:f3:f0:9a:
c5:03:2c:fc:8e:3e:23:02:24:4e:15:3e:9c:37:dd:
4e:e5:8b:94:4b:ed:e3:5f:c7:dd:fc:46:79:c1:c3:
46:19:60:71:16:01:2d:58:55:39:cb:dc:92:d8:d5:
3b:9d:22:0e:c5:1a:9d:c2:b2:1b:c2:2c:bd:6b:a6:
59:69:fd:57:fe:15:ee:bd:b8:4c:64:af:26:da:aa:
9a:2a:a3:6c:3d:c4:a0:a1:97:54:30:49:a6:e7:66:
68:72:40:c9:73:0d:52:bc:00:e3:71:76:f1:47:f7:
b0:52:b3:22:51:2f:9c:39:f8:89:5a:46:0f:08:d3:
ed:b7:52:d8:4c:4f:a6:1c:da:cc:52:73:22:c3:57:
4a:7b:e0:a7:00:a9:19:05:0b:1d:af:4e:e2:19:15:
e6:0c:84:10:52:b0:cd:80:6a:60:cf:fe:54:c5:6c:
7a:a1:f6:88:0b:ba:40:44:4e:04:49:8d:57:62:34:
9d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8C:4C:14:AD:65:FD:2B:C4:D0:18:C4:00:31:4C:15:70:9E:2A:36
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Q4xMFK1l_SvE0BjEADFMFXCeKjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.152.0/21
62.60.240.0/20
213.176.72.0/23
213.176.92.0/22
213.176.112.0/21
Signature Algorithm: sha256WithRSAEncryption
cb:0d:70:f0:1b:1e:27:7f:69:2a:b4:7e:26:8b:51:48:47:aa:
63:a9:1e:fb:c5:e2:28:bd:14:9d:83:5b:30:ef:ad:ee:52:26:
e3:63:44:d2:d8:49:35:0c:cf:03:84:21:d2:41:86:8c:1b:28:
18:86:05:9d:36:44:49:28:49:ae:84:30:28:85:b4:5a:45:ea:
96:68:5f:88:89:b9:39:90:ef:bb:90:74:ce:d7:48:1d:85:e5:
ca:19:84:15:77:3a:08:91:ff:69:13:21:d8:36:15:fa:a2:04:
3f:6f:aa:9b:39:28:2e:9e:5b:6f:57:04:ea:29:9e:40:76:25:
54:7e:65:bd:93:f6:7f:50:b2:3d:23:4a:2a:53:d6:6c:dd:e1:
3a:4b:c9:0f:9d:e9:80:7e:87:91:65:68:f4:4f:8c:54:63:56:
45:c5:a4:41:d5:6c:35:9c:86:a5:35:46:a2:98:69:25:a7:be:
97:0a:31:ee:51:26:d9:fb:02:87:0b:d5:10:24:bb:74:6e:30:
15:3e:20:b1:14:9b:cb:2b:ea:ef:d5:2f:20:86:db:6e:ea:6c:
b7:6f:28:1a:5d:46:15:86:58:35:cb:8d:ab:93:42:1f:07:29:
b2:84:3b:22:91:1d:42:e2:69:f2:54:8d:6b:f0:6e:18:64:c5:
b2:a1:aa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 13:04:10 2024 by rpki-client on console-ams.rpki-client.org