Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/W7U17HsMqjDvPqge-u8k9SvGjgU.roa
File: W7U17HsMqjDvPqge-u8k9SvGjgU.roa (raw, json)
Hash identifier: KrQe7zRVvJn7iJWUYWEQyo+FKsT3rJ5s8ct/15B3UP0=
Subject key identifier: 5B:B5:35:EC:7B:0C:AA:30:EF:3E:A8:1E:FA:EF:24:F5:2B:C6:8E:05
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0191922BB2CDA9948F3F38A225C5731B4639
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/W7U17HsMqjDvPqge-u8k9SvGjgU.roa
Signing time: Tue 27 Aug 2024 04:50:22 +0000
ROA not before: Tue 27 Aug 2024 04:50:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55933
IP address blocks: 62.60.216.0/23 maxlen: 24
213.176.72.0/23 maxlen: 24
213.176.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 07:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:92:2b:b2:cd:a9:94:8f:3f:38:a2:25:c5:73:1b:46:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 27 04:50:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bb535ec7b0caa30ef3ea81efaef24f52bc68e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f0:74:ac:60:15:a0:ee:45:b6:70:a6:57:87:
41:ec:2a:9a:6e:12:3d:93:19:e2:21:2d:b7:80:bc:
cd:e6:34:06:4f:1b:72:8f:b3:21:6f:42:52:9b:9d:
ee:ea:b3:a4:d9:d7:4c:e0:3b:f3:63:6e:ab:96:c3:
ed:d8:9e:35:63:d5:e3:97:94:7a:33:34:11:33:7b:
f8:69:7d:b4:53:ae:de:21:99:f2:3f:35:1c:a8:c6:
dd:4f:f2:04:28:99:f5:4e:3f:b6:79:c6:72:73:5c:
7d:82:67:49:7b:7c:49:79:b6:98:3e:d1:79:b4:dc:
ed:bf:04:6a:df:10:b8:07:35:5e:59:f1:0f:2a:ca:
1a:d5:d9:07:2e:cf:ca:0a:c7:52:ee:7e:3a:e4:13:
b9:33:18:de:02:ce:26:b6:a6:fb:f1:97:d5:4f:c1:
b5:f8:22:e3:88:d2:8d:33:fe:6a:1c:30:f5:32:74:
4f:80:3f:ae:67:f1:ae:b5:56:40:11:86:b2:9c:c9:
55:4d:e4:7a:29:01:6b:f7:d1:07:4e:26:87:68:5f:
7d:6d:ae:b8:b0:43:be:3a:4f:d8:33:f9:41:2d:09:
cf:26:51:fa:36:2c:6a:a4:68:1a:29:9e:79:20:4c:
67:b0:e1:18:f3:99:c6:54:58:b2:bd:7c:33:d5:dd:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B5:35:EC:7B:0C:AA:30:EF:3E:A8:1E:FA:EF:24:F5:2B:C6:8E:05
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/W7U17HsMqjDvPqge-u8k9SvGjgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.216.0/23
213.176.72.0/23
Signature Algorithm: sha256WithRSAEncryption
20:48:0a:8a:02:2f:e5:bf:d0:d9:2b:ae:bf:3f:ef:5f:d5:1e:
55:0a:6f:b2:c3:a1:ee:4d:69:a4:22:dd:23:21:92:3c:d9:fb:
4b:d7:fb:5c:38:36:ad:11:b2:e8:85:1f:7b:5a:9e:0f:67:3b:
ea:1b:72:b0:32:0d:14:3d:90:47:54:08:c6:96:2f:86:71:f0:
c7:20:4c:96:b9:92:d1:ee:7b:a1:6e:b0:6b:38:55:93:75:69:
42:4e:1a:a9:bb:be:a2:8e:c8:ac:0a:45:20:24:4f:3e:86:2f:
e2:d6:e7:a3:68:72:73:1a:2e:71:23:71:5f:a4:1c:e5:5e:ef:
58:6f:06:eb:24:97:6c:37:95:24:bf:fc:db:09:f2:d6:c1:5b:
2e:78:ec:ce:07:a1:b6:17:b0:a5:a3:7f:2b:63:87:c7:06:0f:
e1:45:61:e8:05:0f:81:c9:41:ec:98:bd:01:b8:57:a0:2a:e9:
22:2b:6a:c8:08:9d:f0:14:66:c9:ea:d2:aa:32:a6:c3:0a:c8:
74:fd:dc:87:1e:29:26:38:b0:74:48:5c:74:d2:73:85:a3:a2:
67:0f:36:0f:50:25:90:d8:42:e1:9b:5a:8d:0f:d3:62:b0:85:
0c:10:4e:51:bd:e6:86:57:47:81:30:f8:ed:f3:ab:c0:a8:78:
0c:0d:4e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 08:29:27 2024 by rpki-client on console-ams.rpki-client.org