Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Z0f3c4Xbcq3OfuYSSXZgJjbsU68.roa
File: Z0f3c4Xbcq3OfuYSSXZgJjbsU68.roa (raw, json)
Hash identifier: f1P1mxyKUXMm0vhkfyGzBlZ/MgrtCgoAaxmwoajhwsg=
Subject key identifier: 67:47:F7:73:85:DB:72:AD:CE:7E:E6:12:49:76:60:26:36:EC:53:AF
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018894C0A1C4CA00A219BAB20B3EDE5A73F2
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Z0f3c4Xbcq3OfuYSSXZgJjbsU68.roa
Signing time: Wed 07 Jun 2023 07:27:12 +0000
ROA not before: Wed 07 Jun 2023 07:27:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57391
IP address blocks: 62.60.172.0/22 maxlen: 24
62.60.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:c0:a1:c4:ca:00:a2:19:ba:b2:0b:3e:de:5a:73:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 7 07:27:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6747f77385db72adce7ee6124976602636ec53af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:f6:6a:54:a3:a0:73:a3:e5:22:56:e6:8d:
7d:fa:8d:fe:4b:c1:80:0b:c0:0c:6f:a6:8b:02:5f:
73:e1:2a:ed:93:74:ec:33:ad:ef:eb:17:b7:b9:69:
7a:e3:4a:00:62:27:b5:0e:37:38:d9:ce:41:ca:90:
f0:58:88:57:1a:2a:2c:b7:e1:d6:7d:d0:d0:e9:10:
d4:f6:06:ec:45:7f:13:62:86:d8:51:23:4d:ec:cf:
31:5a:8f:7c:35:8b:43:5c:e6:0d:78:ff:c1:41:3a:
2b:a5:53:ac:4b:63:8e:86:2a:6a:68:92:b6:db:e7:
5b:93:fd:f4:d3:21:89:e6:ec:37:99:9d:b3:37:cb:
cc:f5:5b:63:b0:47:10:ca:04:97:6b:70:00:af:75:
db:9a:76:bc:8e:ef:dd:bc:a5:93:22:60:15:54:37:
14:01:0d:9d:e5:27:41:61:69:b3:f0:64:16:2a:05:
9e:e1:1b:55:8a:87:14:36:24:ae:85:5f:b7:f9:7b:
26:1d:23:d1:d1:f9:15:c0:b5:01:1d:b2:5e:a8:f6:
16:55:65:12:13:b3:ff:fc:3a:1e:0b:54:f0:53:0f:
1c:dd:d3:74:52:84:dd:38:9c:8f:fd:49:1c:5c:f0:
d1:4d:15:7f:d0:9d:65:a9:1d:9b:c8:20:be:b8:2a:
87:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:47:F7:73:85:DB:72:AD:CE:7E:E6:12:49:76:60:26:36:EC:53:AF
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Z0f3c4Xbcq3OfuYSSXZgJjbsU68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.172.0-62.60.179.255
Signature Algorithm: sha256WithRSAEncryption
19:69:91:85:7c:22:b8:a4:c0:67:23:28:50:8a:59:f8:ba:c8:
e7:6d:c3:9c:35:cd:96:8b:c5:97:3b:ce:f8:44:13:d2:9d:24:
e9:45:63:eb:27:1e:82:73:98:d8:f3:1c:b6:0c:a5:ae:15:33:
11:bd:06:9e:aa:06:df:66:68:20:fb:4b:40:36:16:89:ff:b3:
13:dd:d1:c6:db:eb:69:cd:e5:f1:77:7f:12:b1:b5:52:d6:b6:
d4:ee:e6:2a:ec:11:ff:ae:8a:37:d1:38:ae:8b:df:0f:bb:01:
07:50:a6:b9:79:bd:57:34:13:1c:b5:f6:f1:8e:97:71:40:79:
01:51:c5:64:1d:aa:48:51:fb:be:ed:10:a5:e4:42:ba:51:44:
b4:73:dd:ec:c2:28:9f:3d:ab:bf:5f:73:de:3d:22:38:2e:67:
10:66:b5:f5:d4:c6:9b:1c:cf:ab:47:fa:a7:12:ad:3f:da:cc:
5a:0a:97:95:0f:74:8b:8c:82:97:5a:e3:5f:41:2b:18:ea:bd:
6e:b8:db:5b:90:83:9a:65:92:61:43:6a:69:cd:a7:6d:7c:5b:
de:7a:97:4c:2e:da:42:62:dc:59:4c:36:24:cf:c7:e9:a2:c9:
18:19:d9:e2:24:a3:d9:e5:76:1c:18:6a:3c:d9:3a:1d:79:fc:
03:64:a6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org