Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/R8EBG8uJFv0r223y8WhEECIHiOk.roa
File: R8EBG8uJFv0r223y8WhEECIHiOk.roa (raw, json)
Hash identifier: asfl6BhpPuluNevKbVe/JP5m2YtqmpMM2KNW7HY+U4w=
Subject key identifier: 47:C1:01:1B:CB:89:16:FD:2B:DB:6D:F2:F1:68:44:10:22:07:88:E9
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01886B1B816781BA1732BCDDE31A5370F6E4
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/R8EBG8uJFv0r223y8WhEECIHiOk.roa
Signing time: Tue 30 May 2023 05:22:24 +0000
ROA not before: Tue 30 May 2023 05:22:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.220.0/22 maxlen: 24
62.60.148.0/22 maxlen: 24
62.60.152.0/22 maxlen: 24
62.60.172.0/22 maxlen: 24
62.60.176.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.196.0/24 maxlen: 24
62.60.208.0/22 maxlen: 24
62.60.212.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:1b:81:67:81:ba:17:32:bc:dd:e3:1a:53:70:f6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 30 05:22:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47c1011bcb8916fd2bdb6df2f1684410220788e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b2:df:dd:92:a5:c4:84:8e:db:f3:90:26:d4:
8b:0d:f4:0f:88:16:29:4d:fe:b4:c4:b8:ea:39:10:
4d:22:57:b9:40:1f:0f:0f:c2:0e:aa:ae:97:44:ef:
d8:6e:09:95:ec:cf:6c:97:ae:c9:4c:d0:1e:0c:ea:
9f:6c:e0:3c:5d:f0:a9:b7:8c:79:61:12:93:85:96:
c2:e7:7f:91:26:46:b8:94:85:cb:0f:c7:99:c2:48:
0b:b0:c0:57:97:a2:16:3a:b8:55:d4:ee:dc:04:cc:
e6:8b:10:8a:1b:76:35:af:4a:71:3f:aa:7d:e7:20:
51:21:a9:3f:3d:92:8f:b4:ad:52:8c:22:02:5b:95:
9b:fa:56:7d:16:6e:78:f2:98:a2:a6:b2:82:c0:90:
b0:9c:c0:b2:59:da:4d:b7:2d:31:18:3e:15:2b:09:
f0:42:c9:6c:81:67:fd:20:ea:44:14:8e:e9:9c:f3:
b0:52:f9:7a:ab:36:a2:2a:f4:91:a3:cf:52:f4:a7:
0a:ad:21:a0:eb:f5:fe:cd:ff:61:c6:f7:48:b7:73:
8a:ee:92:d5:cc:61:45:35:2f:7e:d4:01:6c:b8:36:
3c:fd:89:30:34:7b:2c:c3:11:2b:8b:3f:5e:1b:3c:
1c:6b:96:72:65:5b:f1:3e:d9:bc:de:15:8e:6b:22:
e1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C1:01:1B:CB:89:16:FD:2B:DB:6D:F2:F1:68:44:10:22:07:88:E9
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/R8EBG8uJFv0r223y8WhEECIHiOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0-62.60.155.255
62.60.172.0-62.60.179.255
62.60.184.0/22
62.60.192.0-62.60.196.255
62.60.208.0/21
62.60.220.0/22
Signature Algorithm: sha256WithRSAEncryption
75:b2:2f:45:59:cd:1f:b8:ed:a2:bb:7d:ad:49:9e:12:95:e2:
d8:f7:18:6a:8b:32:26:35:36:8f:6e:4b:2b:fd:42:08:53:cc:
f7:0a:a7:da:b5:81:2e:f1:74:86:a4:53:40:8b:ea:a7:45:46:
d5:23:96:26:59:d3:c3:ea:23:52:95:01:13:f0:4a:3c:c4:34:
f3:85:e7:89:27:bf:9e:0b:84:3e:d2:03:22:33:e9:02:dd:3b:
ca:0c:89:6e:ae:82:b8:65:3a:d5:05:ba:12:1d:db:7c:8f:9d:
8b:fa:a6:49:1f:af:bc:fb:8e:54:26:82:24:ea:a8:fc:f2:6e:
50:f6:f1:04:09:98:89:ff:f0:78:4a:60:dd:f3:3c:7d:48:90:
40:80:31:ac:c4:73:25:0b:59:42:98:ea:03:34:0f:fb:06:ed:
db:e2:64:fb:4c:98:47:c5:82:57:40:5b:be:f4:ea:d1:63:14:
66:25:d8:76:c2:94:b4:96:70:52:60:12:2f:0e:3d:0b:20:20:
4f:5f:97:20:7c:16:67:3f:42:27:9e:aa:8c:31:e0:1a:04:1d:
95:9b:79:14:1b:89:1f:ff:33:15:1a:e4:cd:08:ca:62:49:14:
81:dc:c2:55:4f:08:27:72:32:63:55:b0:e9:8c:47:e2:61:58:
7e:5d:fb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:23 2023 by rpki-client on console-ams.rpki-client.org