Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/WDs9vKC6-LF9Whj2BnX8A-BN-2s.roa
File: WDs9vKC6-LF9Whj2BnX8A-BN-2s.roa (raw, json)
Hash identifier: gMa7/4T/fPErNaglrWaTvpT2Ob6PapKoK6eCEcEok4Q=
Subject key identifier: 58:3B:3D:BC:A0:BA:F8:B1:7D:5A:18:F6:06:75:FC:03:E0:4D:FB:6B
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018FD2890AA95DBCDA81E94AEDA650F2FCB9
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/WDs9vKC6-LF9Whj2BnX8A-BN-2s.roa
Signing time: Sat 01 Jun 2024 06:42:27 +0000
ROA not before: Sat 01 Jun 2024 06:42:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35372
IP address blocks: 62.60.138.0/24 maxlen: 24
62.60.144.0/24 maxlen: 24
62.60.147.0/24 maxlen: 24
62.60.160.0/22 maxlen: 24
213.176.0.0/24 maxlen: 24
213.176.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jun 2024 10:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d2:89:0a:a9:5d:bc:da:81:e9:4a:ed:a6:50:f2:fc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 1 06:42:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=583b3dbca0baf8b17d5a18f60675fc03e04dfb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:30:45:a6:d7:d5:bd:ff:24:69:f2:7c:2b:
65:01:b8:af:ec:ee:5f:86:bf:d8:cf:19:84:6b:32:
8e:32:9f:57:00:e7:4b:ad:78:3f:76:d4:25:be:4f:
3d:61:28:a7:22:5c:d6:42:02:26:70:fb:83:6c:44:
93:9d:1a:1b:f8:0f:bd:c6:cb:94:17:d0:69:7c:8e:
b9:fa:20:24:9d:41:8d:c5:9d:17:b0:b0:d4:3b:90:
d5:24:19:6e:91:f3:c2:b5:b2:71:65:df:6f:cc:3c:
45:2a:e6:b3:ee:22:8b:44:3d:19:4d:72:e2:4b:76:
62:d7:6a:4f:bd:3b:c8:1b:02:78:22:11:2c:47:a7:
76:9e:05:6b:da:e0:ce:76:d5:58:49:a4:b8:f3:2a:
45:ba:44:cf:f8:8d:fc:57:62:06:52:c6:e3:8f:78:
89:ff:60:3f:a9:bf:fa:33:5e:bd:ff:6d:42:16:0a:
a3:2d:2e:db:0f:9a:5d:1d:6a:a8:8b:77:1a:f8:0c:
2c:1e:4c:b0:50:3a:eb:be:b8:54:c9:fc:96:03:95:
b7:72:fb:b7:e7:32:41:77:fe:fa:0a:36:72:eb:ee:
37:8e:b6:ee:e1:c3:eb:8f:9e:1f:b9:13:e0:b3:8f:
a5:33:a0:d7:04:20:c8:bf:5a:62:a1:83:9a:f3:56:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3B:3D:BC:A0:BA:F8:B1:7D:5A:18:F6:06:75:FC:03:E0:4D:FB:6B
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/WDs9vKC6-LF9Whj2BnX8A-BN-2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.138.0/24
62.60.144.0/24
62.60.147.0/24
62.60.160.0/22
213.176.0.0/24
213.176.126.0/24
Signature Algorithm: sha256WithRSAEncryption
22:12:5b:9d:d9:3f:76:df:ed:bd:58:ff:34:63:f1:b5:69:fa:
df:f6:73:92:9b:41:11:1a:8f:0d:33:26:18:5b:da:f2:61:90:
88:fd:22:a6:1e:fa:c5:6e:00:1a:b2:58:0a:32:17:07:d6:c2:
12:05:6a:7f:c6:b3:11:3d:00:66:74:78:2c:49:ee:95:59:d9:
22:1a:52:b9:44:a4:98:e4:67:b7:40:9d:8b:94:d0:92:e8:dd:
ae:8e:a4:04:90:52:12:e7:b7:5f:47:79:c2:49:5f:95:3b:24:
06:2b:61:b5:d0:05:bb:6e:c9:b0:6d:6a:3d:cc:61:31:32:06:
32:dd:0b:5c:20:d4:24:32:2a:49:6f:10:f0:64:87:62:f5:ce:
0d:2e:33:78:58:fc:80:bd:5d:61:05:95:f1:47:23:7b:7d:9a:
2d:d0:24:33:9f:9d:eb:1a:79:5d:f6:dd:8b:6b:07:55:d6:be:
ad:09:fb:9f:69:23:62:81:d9:b9:2f:1c:29:04:d7:10:43:41:
81:86:74:18:f5:0c:d6:be:08:7f:ae:9f:bd:77:ac:c3:61:7c:
7e:26:2d:73:ed:d3:6b:98:5e:c5:eb:2f:bb:b8:9d:4c:9c:39:
d3:32:2b:c0:c8:de:0e:a0:ee:00:0e:65:64:48:0d:b9:cc:84:
b1:f5:ab:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 14:50:07 2024 by rpki-client on console-ams.rpki-client.org