Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/YoKpx7ggiHIcAjPYrHQ3goRJdrU.roa
File: YoKpx7ggiHIcAjPYrHQ3goRJdrU.roa (raw, json)
Hash identifier: TKpwtZdEZxW4zkjpCsbFC5RGKY3YG6b1eg1Ias2WRAo=
Subject key identifier: 62:82:A9:C7:B8:20:88:72:1C:02:33:D8:AC:74:37:82:84:49:76:B5
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0189F52AC5023DBEE3332F7F521D1CDE1D48
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/YoKpx7ggiHIcAjPYrHQ3goRJdrU.roa
Signing time: Mon 14 Aug 2023 17:49:28 +0000
ROA not before: Mon 14 Aug 2023 17:49:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.220.0/22 maxlen: 24
62.60.147.0/24 maxlen: 24
62.60.148.0/22 maxlen: 24
213.176.121.0/24 maxlen: 24
213.176.127.0/24 maxlen: 24
62.60.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Aug 2023 03:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f5:2a:c5:02:3d:be:e3:33:2f:7f:52:1d:1c:de:1d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 14 17:49:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6282a9c7b82088721c0233d8ac743782844976b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:83:26:41:3d:1a:58:4c:42:9d:0d:f5:c0:f4:
df:03:cf:99:d7:ea:b1:ff:b3:46:b7:d3:ff:5a:b4:
38:e4:d3:42:64:43:d3:42:f6:ce:33:f6:d0:95:50:
10:1a:69:c1:a8:79:ad:02:03:77:a2:45:28:75:84:
2b:e0:21:0f:a8:9d:21:30:14:de:56:d0:a2:f3:80:
bb:7f:f4:25:8d:b0:61:89:ea:d1:29:a4:c2:8f:70:
a3:d5:0a:af:c6:eb:eb:e3:5c:98:35:27:f0:ff:a8:
6b:1c:c5:bd:eb:3b:df:60:e9:93:94:a6:42:22:29:
eb:2e:9f:85:5b:ec:88:20:59:6b:55:90:b8:da:52:
53:ff:ec:97:49:cb:94:c3:35:2d:8f:6a:d1:55:cc:
a7:10:fc:98:ca:f9:2e:99:6c:7c:d0:40:ac:0a:77:
20:d9:69:dc:a0:9e:66:66:2b:73:bf:d7:57:b7:a2:
2c:1a:c8:25:c2:d2:f6:5d:6c:83:2d:71:76:5c:1c:
ec:3c:cf:3a:17:f5:6f:a7:7c:93:34:5b:55:03:20:
97:4b:3d:bf:2c:1a:c4:8a:45:85:a6:a8:5a:23:31:
73:d8:06:14:a9:28:ba:6f:82:01:ea:b6:30:20:e9:
3f:58:fa:ce:3a:c9:ca:2c:b3:97:05:74:57:d0:84:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:82:A9:C7:B8:20:88:72:1C:02:33:D8:AC:74:37:82:84:49:76:B5
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/YoKpx7ggiHIcAjPYrHQ3goRJdrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.147.0-62.60.151.255
62.60.180.0/22
62.60.220.0/22
213.176.121.0/24
213.176.127.0/24
Signature Algorithm: sha256WithRSAEncryption
14:8a:72:29:19:b0:79:33:6d:86:2e:f9:b4:da:27:2d:10:38:
2d:e5:53:b5:c0:60:42:15:70:d3:56:c3:2b:9e:5a:30:d0:73:
4e:29:f5:cd:ac:0b:3d:3c:cf:03:1e:da:ae:ea:38:16:da:4e:
f0:75:52:0e:b7:a0:92:ef:f8:79:2e:97:cf:88:e2:89:45:d3:
ee:1b:fe:4b:d6:ee:6c:6d:01:86:a0:9d:8e:2d:03:38:d4:9a:
ea:67:f3:83:3d:84:c0:91:7f:6a:76:03:fe:29:24:e4:e3:46:
4e:b6:67:c6:e9:bd:32:7f:52:ed:91:ee:65:2e:e2:1b:a3:a2:
44:8a:5e:2a:a4:31:f4:85:d0:0e:9a:75:8c:d2:0d:a9:db:3a:
d5:7d:5c:b2:a8:0f:1d:a9:83:df:35:8d:8e:ab:a2:15:9a:44:
69:5a:0c:c9:37:33:ab:61:89:30:20:85:b4:ce:ca:ec:4b:65:
68:09:cb:14:b2:f2:7e:68:b4:b4:10:89:6b:29:15:98:9d:b8:
ce:e3:f4:e5:10:67:8f:64:04:65:78:b6:8c:2f:46:2e:33:5e:
da:f5:d4:89:21:b3:56:3e:14:ee:9e:f4:9a:4d:fd:0b:0a:4b:
1e:5e:6a:22:18:86:8e:33:9b:b1:a2:8e:bc:f1:be:68:87:1a:
b5:76:b3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org