Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/TW2XvhoS3FS4bIH0PjfUvSgW9DY.roa
File: TW2XvhoS3FS4bIH0PjfUvSgW9DY.roa (raw, json)
Hash identifier: UuwiohEmkEh/ybo+LefKLFXuNu6Co6Yk7Av7cOFd4+E=
Subject key identifier: 4D:6D:97:BE:1A:12:DC:54:B8:6C:81:F4:3E:37:D4:BD:28:16:F4:36
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018EEA96A8CFAA832DCC92B5409BD8AAD73B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/TW2XvhoS3FS4bIH0PjfUvSgW9DY.roa
Signing time: Wed 17 Apr 2024 05:45:25 +0000
ROA not before: Wed 17 Apr 2024 05:45:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 62.60.156.0/22 maxlen: 24
62.60.216.0/22 maxlen: 24
62.60.224.0/19 maxlen: 24
213.176.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 06:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ea:96:a8:cf:aa:83:2d:cc:92:b5:40:9b:d8:aa:d7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Apr 17 05:45:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d6d97be1a12dc54b86c81f43e37d4bd2816f436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:87:46:90:c5:91:7f:11:11:1d:d9:15:e6:
62:de:68:8b:d2:47:de:4c:bd:56:5d:82:27:96:ea:
44:14:40:f7:02:4f:4b:70:4e:8b:0e:9a:2d:e4:bc:
ea:8f:40:c0:38:fa:1f:cd:6f:2c:e8:0b:e6:8d:ce:
b6:9d:ea:3c:f2:5c:7b:eb:2d:a6:16:61:c6:6a:e0:
02:22:b7:2a:40:bc:f8:81:bb:5e:fa:8c:45:36:a8:
42:e8:39:60:42:ca:93:42:7c:63:d4:13:e3:15:03:
e5:86:85:ec:2a:d6:a8:a3:1f:66:9e:47:50:82:8c:
df:8d:54:b3:9f:54:56:5c:22:5d:34:5e:0c:37:e5:
9c:f9:26:fe:29:fc:73:48:28:1b:47:08:5c:b8:fc:
5b:15:b4:75:b0:fe:53:ea:bb:d8:13:c9:89:b3:37:
66:68:a5:22:b8:09:1f:a6:16:c7:2e:3f:19:88:23:
8e:59:5b:b2:0f:c2:28:4e:f7:dc:a4:31:75:af:42:
73:4d:4c:6c:12:88:6d:c8:e0:f7:95:53:f2:46:36:
db:64:2d:82:c6:40:10:db:19:4f:af:3d:61:4c:64:
b4:02:7b:14:c0:b3:0a:78:79:91:08:60:de:d7:b8:
71:5c:43:be:c2:6f:96:f3:de:6e:41:e9:ca:a2:6b:
78:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6D:97:BE:1A:12:DC:54:B8:6C:81:F4:3E:37:D4:BD:28:16:F4:36
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/TW2XvhoS3FS4bIH0PjfUvSgW9DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.156.0/22
62.60.216.0/22
62.60.224.0/19
213.176.64.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:a6:7f:da:73:be:c7:e9:a3:44:32:8a:d7:ca:be:f4:03:d5:
6f:8b:62:89:d0:71:48:e3:b9:df:1d:b4:85:68:4a:ee:3c:68:
bb:f5:c3:f3:31:ae:7b:82:9c:5b:50:0a:a3:ea:5e:15:fa:8d:
0f:4a:8f:62:bc:69:ea:0d:ba:a5:08:3d:a8:ae:57:27:13:4b:
5b:b9:a7:62:c5:9f:63:3e:05:84:3f:3f:03:58:fc:3d:dc:3b:
b2:16:8e:e9:4c:82:09:f9:ce:9c:7a:09:28:c7:d5:d0:9e:30:
8a:81:9e:48:16:cb:60:c7:1c:75:3a:7f:43:b8:7a:dd:2c:12:
28:24:80:a9:a6:7b:7b:e0:3c:2e:6f:61:1c:2f:69:53:36:b2:
ee:82:b1:35:8f:ba:94:f9:0f:60:d8:2f:ca:72:1d:9c:13:ed:
a2:a0:bc:ba:77:79:76:a0:85:a0:42:9a:42:bd:0d:4d:ba:42:
18:36:02:5c:e6:34:ba:a7:8c:ed:08:ac:76:a8:56:df:f8:c8:
f2:79:9b:6a:75:5c:f7:01:42:52:3f:c5:4a:1f:fe:49:1f:ea:
27:62:bd:9e:2d:e1:be:3f:d9:6f:e1:a7:25:20:b3:79:3b:1c:
e4:2e:0c:eb:6f:74:a0:65:70:98:df:9d:f1:11:8d:13:13:f4:
c9:f3:b3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org