Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Wr4OF3c4QqJkZvK6hnL75AWkE04.roa
File: Wr4OF3c4QqJkZvK6hnL75AWkE04.roa (raw, json)
Hash identifier: Truqw93UlnXEp7DVpS7+fm70hgGD99ntJbo9SuN5Wbk=
Subject key identifier: 5A:BE:0E:17:77:38:42:A2:64:66:F2:BA:86:72:FB:E4:05:A4:13:4E
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0189CE6600433922A56D23F83523533F9CC9
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Wr4OF3c4QqJkZvK6hnL75AWkE04.roa
Signing time: Mon 07 Aug 2023 05:08:58 +0000
ROA not before: Mon 07 Aug 2023 05:08:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212036
IP address blocks: 62.60.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:66:00:43:39:22:a5:6d:23:f8:35:23:53:3f:9c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 7 05:08:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5abe0e17773842a26466f2ba8672fbe405a4134e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:26:ec:58:50:4c:aa:78:98:4d:d6:ef:88:83:
83:5e:8b:aa:d5:82:18:cb:c6:94:11:c4:b2:af:f4:
ed:2d:36:9e:8e:72:8d:9b:af:9f:2b:08:5e:7a:bd:
28:0e:98:9a:45:70:84:66:49:95:65:c6:74:46:59:
6d:a6:a5:3e:84:d8:64:7e:84:a6:e6:c0:17:43:27:
70:0c:cc:aa:b2:af:3e:4d:1c:b7:90:c3:12:f1:a0:
46:d6:bb:91:cc:03:61:f1:3d:a9:6c:3d:07:b7:be:
a3:f7:26:1b:17:a0:ee:08:5b:43:09:9d:fc:e6:51:
65:0d:b7:f6:86:57:9f:eb:ce:e6:01:a7:a1:ae:3f:
58:73:a8:c3:83:03:1b:f8:02:79:78:ac:86:ef:30:
9c:e1:a9:18:4b:09:00:01:bf:4c:a9:49:22:ed:93:
e2:ad:3f:39:91:bd:d2:32:66:79:d4:c7:26:c6:4b:
63:d3:2b:99:b5:ce:d5:41:68:16:62:72:16:e4:24:
be:d3:86:dd:1c:76:af:4b:76:d4:63:9c:4d:0f:f8:
4a:95:78:a1:7f:3b:cd:a2:c0:04:cf:4c:db:d8:0d:
65:a4:3a:19:a1:54:d9:07:06:3e:97:fa:73:ae:0d:
18:7f:30:0f:bb:1c:0f:fb:18:1b:36:81:c5:12:50:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BE:0E:17:77:38:42:A2:64:66:F2:BA:86:72:FB:E4:05:A4:13:4E
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Wr4OF3c4QqJkZvK6hnL75AWkE04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.138.0/24
Signature Algorithm: sha256WithRSAEncryption
66:2d:6a:88:64:a7:24:f7:1b:07:2c:2a:e3:9c:a1:99:88:b3:
fc:f7:cf:f2:8d:be:9b:d0:39:c4:e7:c6:31:c8:db:80:78:4a:
42:32:0b:8a:fd:70:27:6b:ad:a3:da:75:e3:d6:19:a0:8f:88:
19:ce:8a:86:1d:1c:2c:ec:8f:8c:7f:b1:10:2a:9d:91:20:85:
a8:05:9e:47:75:0e:63:9a:9c:8b:3f:4c:dc:1b:b5:40:8f:a9:
91:c5:23:20:74:a9:ea:65:4f:a4:ca:31:c9:36:4b:3c:fe:ab:
b7:25:69:14:09:eb:3c:8a:d4:13:b0:3f:7d:34:fa:f4:5e:f8:
2e:3e:26:07:f5:2e:30:ec:a8:fe:fb:ae:af:3b:fe:45:ff:c1:
d5:0f:5c:3e:cd:3c:fa:dc:32:00:e7:88:7e:26:ce:bf:16:5e:
41:f4:94:e7:d0:4f:67:d4:8b:6c:cb:fe:90:51:e2:86:34:4e:
23:10:6e:4f:56:f0:0f:18:f9:22:11:2c:51:ca:82:51:a4:12:
97:55:ff:01:f4:e3:68:7f:ab:25:df:a7:55:60:d5:30:0e:a6:
26:00:5e:88:de:fc:01:5b:7b:77:01:76:d8:26:73:57:88:94:
4b:4f:24:f7:a1:a4:e2:e9:68:81:3f:37:6a:85:09:e2:01:56:
ff:1c:94:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 06:25:07 2023 by rpki-client on console-fra.rpki-client.org