Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/XjFB-bHCGZ5tVwA0Fo5EeSwzpg4.roa
File: XjFB-bHCGZ5tVwA0Fo5EeSwzpg4.roa (raw, json)
Hash identifier: jY14xARcmWO1vao5NdLJGQJ48hUyGcCgAEhqpgGAzc0=
Subject key identifier: 5E:31:41:F9:B1:C2:19:9E:6D:57:00:34:16:8E:44:79:2C:33:A6:0E
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018C5D1723717083977C2885E4D7CCD90330
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/XjFB-bHCGZ5tVwA0Fo5EeSwzpg4.roa
Signing time: Tue 12 Dec 2023 08:14:06 +0000
ROA not before: Tue 12 Dec 2023 08:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44947
IP address blocks: 62.60.216.0/22 maxlen: 24
213.176.64.0/22 maxlen: 24
62.60.146.0/23 maxlen: 24
62.60.156.0/22 maxlen: 24
213.176.6.0/23 maxlen: 23
213.176.120.0/23 maxlen: 24
213.176.126.0/23 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 11:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:17:23:71:70:83:97:7c:28:85:e4:d7:cc:d9:03:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Dec 12 08:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e3141f9b1c2199e6d570034168e44792c33a60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:51:b2:38:bf:ab:5f:05:48:fa:15:67:b2:
58:a1:d0:81:0a:a7:f5:4d:f6:fd:69:fd:e0:ce:be:
2a:f6:ad:0b:b3:08:04:35:6b:ac:3b:e3:0b:37:4a:
c1:5d:75:c7:a5:f2:0f:7f:81:3c:15:dd:bb:ef:5e:
6a:3e:38:1e:03:1d:a7:5f:b8:56:ec:1b:c2:49:4d:
d6:12:70:7e:69:73:49:8c:7a:32:7d:9a:df:14:27:
4e:93:de:9b:ea:5a:3f:ad:c3:34:89:3e:d6:e5:d2:
b3:a2:b9:7a:19:eb:8d:15:ef:11:ab:3f:ff:2b:75:
cd:ad:b7:ab:db:36:bb:1e:d4:66:72:d2:6d:22:de:
d7:03:0f:f6:ef:6e:1f:41:f3:36:9c:94:7e:83:e8:
d8:e4:a3:1b:fa:fa:c3:6f:d8:41:09:72:1b:1d:e6:
d4:4a:9d:ee:9d:66:19:55:97:7a:e5:a2:3b:68:30:
6b:e7:15:15:8a:cf:5a:a1:ed:ab:15:57:72:0a:82:
3e:c8:10:b8:41:04:28:6b:41:7b:24:47:d8:08:f6:
7a:47:f5:bf:1e:c4:4c:38:77:b9:dc:a9:23:0b:2c:
85:71:58:aa:17:1c:a3:48:53:e8:ff:97:24:50:78:
12:14:4e:89:97:99:7e:26:ca:c0:4b:02:de:aa:4b:
1a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:31:41:F9:B1:C2:19:9E:6D:57:00:34:16:8E:44:79:2C:33:A6:0E
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/XjFB-bHCGZ5tVwA0Fo5EeSwzpg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0/23
62.60.156.0/22
62.60.184.0-62.60.195.255
62.60.216.0/22
213.176.6.0/23
213.176.64.0/22
213.176.120.0/23
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:c5:1a:dd:10:30:c8:39:d1:d7:ac:60:a3:81:67:76:c0:49:
23:00:c0:97:a5:59:3e:2e:1d:70:82:f3:62:04:60:01:ae:3e:
d5:f0:c9:c7:96:c1:a3:cf:06:fe:56:21:6b:84:94:ae:78:23:
b5:ff:e0:89:b4:d5:bd:31:2f:af:61:1e:a6:d3:7e:7c:4e:52:
5e:fc:a4:db:7a:fb:f8:b8:4d:36:ab:25:fa:eb:b7:6d:0d:e6:
8b:10:15:f7:45:c9:d0:c2:88:90:e6:71:dc:b4:69:21:51:24:
d0:be:c1:52:43:82:96:19:c2:c5:9c:9e:1c:e1:01:79:18:be:
54:9c:78:7a:dd:1e:89:59:87:ae:aa:fb:bd:e4:1e:75:b2:10:
69:d2:32:57:c4:1d:91:2d:0e:45:08:dd:ab:30:fd:67:06:b4:
26:bd:d4:b9:70:36:9e:6e:17:b8:02:fd:b3:34:fb:a0:78:a4:
36:06:b1:1b:da:83:d5:8f:18:a1:84:c6:c3:1c:24:8c:c0:27:
18:6e:6d:ce:e1:d8:fb:c1:f0:43:21:f2:42:ee:aa:9d:88:eb:
a4:a3:4d:47:c6:47:4f:23:5a:c0:ed:ee:46:12:79:dc:75:6d:
f7:14:8a:da:d0:bf:23:6e:3c:7b:c9:2c:e5:c9:53:00:37:7d:
9e:84:b2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org