Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Vgfdfx_tdEYJ1Za9MavamCw7Yhg.roa
File: Vgfdfx_tdEYJ1Za9MavamCw7Yhg.roa (raw, json)
Hash identifier: FxhjAj2ZdyJ+Smn69hvrflg8d6fcNSsCuOQSxZ95j+o=
Subject key identifier: 56:07:DD:7F:1F:ED:74:46:09:D5:96:BD:31:AB:DA:98:2C:3B:62:18
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0186ACF2DB74EC483505BE0497E59604519D
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Vgfdfx_tdEYJ1Za9MavamCw7Yhg.roa
Signing time: Sat 04 Mar 2023 14:07:22 +0000
ROA not before: Sat 04 Mar 2023 14:07:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 62.60.216.0/22 maxlen: 24
62.60.220.0/22 maxlen: 24
62.60.164.0/22 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.172.0/22 maxlen: 24
62.60.176.0/22 maxlen: 24
62.60.180.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.188.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.196.0/24 maxlen: 24
62.60.204.0/22 maxlen: 24
62.60.200.0/21 maxlen: 24
62.60.208.0/22 maxlen: 24
62.60.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ac:f2:db:74:ec:48:35:05:be:04:97:e5:96:04:51:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Mar 4 14:07:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5607dd7f1fed744609d596bd31abda982c3b6218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:c6:43:fa:9b:6f:42:63:bb:46:8a:0e:44:
91:de:2f:28:8c:57:09:a4:88:91:fc:5e:aa:eb:d5:
54:d7:6b:f4:f6:83:a0:06:41:dd:fb:76:83:db:08:
8e:01:f8:b3:47:fa:b8:30:b4:cc:95:3a:af:ec:1c:
70:e7:cf:d2:24:da:fa:62:48:68:e2:40:57:fe:4c:
56:c6:4a:35:ce:9e:e9:0c:6b:e4:6e:73:f5:df:41:
79:f4:4b:46:67:dc:2e:0e:65:59:dd:68:a2:96:8e:
9f:36:21:b9:a0:8d:0a:73:d1:c4:d0:5d:7f:16:32:
a9:5a:1c:18:a3:e8:7f:6b:3c:6b:1a:4e:9a:15:c0:
69:f2:a4:8b:b5:e5:45:26:ce:dd:40:51:d4:eb:8e:
9b:69:cc:92:70:c2:f4:ee:16:ed:45:28:03:af:b6:
69:90:14:8c:06:95:ea:19:d7:73:70:a8:0e:f3:41:
fa:96:19:32:27:8d:80:49:f0:5e:a1:d2:49:f6:9e:
13:c7:7e:87:e9:82:3b:ce:e7:9a:32:d5:5d:f8:0f:
fb:e4:70:d1:7b:d5:ce:1f:45:e3:32:34:01:24:12:
3a:67:1d:4a:a5:3b:4a:1a:3f:f1:c8:6d:19:45:db:
60:0a:f0:03:f0:39:53:3c:22:d9:3e:18:18:11:1e:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:07:DD:7F:1F:ED:74:46:09:D5:96:BD:31:AB:DA:98:2C:3B:62:18
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Vgfdfx_tdEYJ1Za9MavamCw7Yhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.164.0-62.60.196.255
62.60.200.0-62.60.212.255
62.60.216.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:ef:50:d6:28:bd:0c:32:4a:17:b5:ad:a9:60:99:43:b5:4b:
5f:d0:f1:22:01:99:f5:46:5b:60:8a:33:fb:33:76:6f:b0:3c:
61:8c:5a:9c:c3:d4:d2:b6:ef:ae:3a:10:90:6f:8f:c2:3d:1e:
73:d4:ca:2c:3c:05:c7:db:35:ae:3a:06:05:95:01:fc:03:ac:
56:9f:43:88:09:46:e2:d6:e6:30:2f:1a:17:19:e8:c5:5b:72:
7d:74:61:19:cd:b3:89:b1:da:99:01:06:5c:e9:b1:71:f5:97:
7a:1e:53:8a:e4:03:c9:8a:7a:ad:8f:02:9c:79:49:4a:1a:96:
e9:ed:63:07:c8:ac:12:90:10:f1:33:bb:9f:55:83:5e:2b:0f:
78:ef:7f:3a:76:20:ad:be:af:be:21:61:a9:ab:7f:1f:90:de:
34:4d:bc:25:cf:03:c1:0e:f0:f5:44:d7:d5:b0:2d:ba:aa:1c:
8e:e7:6c:5d:5d:e0:1a:80:16:f9:e2:0f:8b:0b:ce:d4:b4:47:
84:cb:ec:f4:59:db:63:61:64:91:9a:f8:8a:1d:1e:c1:3e:8c:
9b:3d:db:09:d3:73:0b:c7:c9:d6:36:18:a7:f0:47:46:f5:34:
a8:e1:0f:3a:9c:ed:10:59:42:24:f6:9d:35:16:d7:94:28:23:
7b:f6:2b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:23 2023 by rpki-client on console-ams.rpki-client.org