Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/VswcEB90-cv2itYWZtAQ-g41PQs.roa
File: VswcEB90-cv2itYWZtAQ-g41PQs.roa (raw, json)
Hash identifier: iUwyfMczB2VWgI81REdlBIVwq6VJZxxizYwZHcrJGL0=
Subject key identifier: 56:CC:1C:10:1F:74:F9:CB:F6:8A:D6:16:66:D0:10:FA:0E:35:3D:0B
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0190F3FCBAB43AE328DEDDEE127F81C60178
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/VswcEB90-cv2itYWZtAQ-g41PQs.roa
Signing time: Sat 27 Jul 2024 11:39:04 +0000
ROA not before: Sat 27 Jul 2024 11:39:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Aug 2024 07:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f3:fc:ba:b4:3a:e3:28:de:dd:ee:12:7f:81:c6:01:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 27 11:39:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56cc1c101f74f9cbf68ad61666d010fa0e353d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:57:13:4e:ae:11:55:d7:d8:d7:6e:78:9c:
36:68:e8:1d:87:7c:48:0e:a9:78:d2:63:5b:98:ee:
32:ab:1d:22:bc:9d:00:cf:84:8b:c3:f4:93:a2:88:
15:9f:20:b9:d3:59:02:cf:a3:45:1f:67:e7:29:d6:
6d:90:be:83:a3:06:9e:3f:1a:ea:8f:ef:1e:b3:b3:
e7:63:b6:31:02:be:41:f2:ea:44:a2:fa:60:b7:d8:
87:62:4a:71:4f:ea:27:57:70:11:7a:7b:59:fb:10:
34:64:b9:69:c2:41:be:21:a8:bd:2d:aa:de:57:0d:
06:fe:d0:6a:e0:ad:3d:1d:06:4f:71:98:ec:3c:24:
a0:d6:02:dd:f8:9a:32:96:4a:85:8f:3d:ca:ab:88:
fe:bf:ff:a5:12:97:fe:dc:f7:36:3d:f6:6e:4d:33:
82:68:d7:96:69:7e:59:17:7d:77:b2:2a:e9:91:61:
1c:da:06:14:f9:df:71:26:10:d1:24:29:c6:29:a8:
07:d8:7d:5c:ba:99:2e:d5:c6:0f:de:11:89:de:3c:
43:ff:d8:63:06:6d:ec:29:a9:2d:3a:05:4d:51:02:
89:2a:9d:a1:26:73:c7:19:64:d3:be:43:53:72:48:
fa:41:b7:d9:b8:3a:e5:15:d9:39:1c:69:ef:fa:09:
11:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CC:1C:10:1F:74:F9:CB:F6:8A:D6:16:66:D0:10:FA:0E:35:3D:0B
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/VswcEB90-cv2itYWZtAQ-g41PQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.240.0/20
Signature Algorithm: sha256WithRSAEncryption
03:98:bf:6f:c1:a5:fe:d6:83:f7:83:15:d4:ff:54:0e:bf:55:
62:41:f5:c9:0b:87:0f:4d:a6:41:63:43:2d:e7:08:e0:7c:21:
55:9f:f1:d8:4a:40:60:27:47:5f:aa:1d:b2:32:04:36:a4:da:
b0:91:fc:73:ef:e2:63:ad:a0:7b:20:e0:02:e9:b9:79:fa:26:
99:69:0f:bb:11:30:9e:8e:16:50:85:d5:90:18:b6:75:8d:64:
18:f9:b2:b7:fc:9c:38:47:02:1d:1b:ac:5f:71:b9:98:7d:27:
99:71:cd:c6:14:2a:e7:7e:a1:18:42:da:3b:6c:c2:98:ec:65:
b3:3c:1f:c9:99:f0:1d:7e:37:d3:52:93:c1:df:e4:f3:f1:95:
86:15:85:a2:4b:51:d7:dd:fb:ef:ab:91:69:03:ab:ca:8c:9b:
af:fc:bd:ed:3f:af:7b:d8:f8:70:81:ad:78:fa:f5:d9:67:03:
16:be:52:45:16:be:d9:97:77:23:d9:7d:c5:2a:18:24:d2:2e:
3a:1f:10:5a:26:51:99:95:38:b8:a8:2c:4e:bc:68:8e:7d:4f:
3f:32:24:a6:5f:15:17:a5:5d:82:be:66:c8:00:77:2d:06:23:
28:17:53:fa:c5:09:5d:13:67:45:e4:c0:14:66:73:6f:84:01:
c5:90:84:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 09:25:08 2024 by rpki-client on console-ams.rpki-client.org