Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_5p3M0BkUhT5cMXQ3G3iA0AHl9g.roa
File: _5p3M0BkUhT5cMXQ3G3iA0AHl9g.roa (raw, json)
Hash identifier: mtOouB9ifhTH6gqJTRxSFyrPTKp5apZ0kqu7U+Qo5K8=
Subject key identifier: FF:9A:77:33:40:64:52:14:F9:70:C5:D0:DC:6D:E2:03:40:07:97:D8
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018A5A0F2728BE2DC0E77FBA4427FF9EB05E
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_5p3M0BkUhT5cMXQ3G3iA0AHl9g.roa
Signing time: Sun 03 Sep 2023 08:00:56 +0000
ROA not before: Sun 03 Sep 2023 08:00:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.220.0/22 maxlen: 24
62.60.147.0/24 maxlen: 24
62.60.180.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5a:0f:27:28:be:2d:c0:e7:7f:ba:44:27:ff:9e:b0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 3 08:00:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff9a773340645214f970c5d0dc6de203400797d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:78:3b:bd:e1:1f:49:a1:de:0b:43:5a:cc:
0f:7b:6a:1f:e5:48:d2:f8:b1:3e:83:4d:d0:59:10:
c3:db:52:85:9c:cd:b1:ce:e3:b6:4b:d7:61:22:37:
21:02:f1:32:1c:9f:43:a9:d1:7b:f1:1b:dc:c4:0d:
47:c7:db:db:22:4b:d5:00:f1:b7:cd:ec:25:bf:ad:
83:e1:df:e3:06:02:e4:88:2b:7b:d3:00:9f:a4:f2:
52:0d:92:1e:0d:36:cd:0e:b1:8b:30:b2:07:2e:15:
0c:99:28:88:94:ab:9d:73:f8:f0:f8:aa:45:3f:ef:
b9:ee:64:aa:37:c2:17:a4:c9:1d:06:a0:a5:4b:ad:
fa:b0:92:60:e1:8a:66:88:58:9b:2a:9e:93:77:fa:
05:ce:6c:11:c5:53:c0:62:1b:a6:ed:22:fb:ec:ef:
b6:62:83:e2:60:59:14:00:e6:5b:a2:91:7a:dc:47:
af:b8:8e:8a:ac:0c:a0:54:fe:a3:7a:35:5a:3f:74:
c9:bb:41:e3:6b:cf:9b:df:55:f2:17:4b:6d:25:93:
64:28:83:3a:cd:0d:5c:b0:ac:57:76:97:f1:6c:0d:
24:aa:73:14:be:6c:2e:11:76:17:ea:2a:75:52:cc:
cf:1b:f9:8d:42:ff:f4:a5:cc:6e:1e:2e:ef:37:6a:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9A:77:33:40:64:52:14:F9:70:C5:D0:DC:6D:E2:03:40:07:97:D8
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_5p3M0BkUhT5cMXQ3G3iA0AHl9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.147.0/24
62.60.180.0/22
62.60.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:3c:6f:7c:8f:89:59:d9:68:46:fc:d9:c0:45:a1:19:df:b0:
3a:7c:0a:0a:4a:b7:3d:c5:35:c0:50:fa:92:4f:33:cf:aa:32:
aa:69:f4:5a:67:39:c9:5c:8f:25:56:ca:76:c3:bc:fb:01:07:
1f:7e:45:b8:4c:36:fc:98:73:77:5d:33:9d:c8:5d:bc:6c:6e:
54:52:c7:d8:0c:4d:c5:35:2d:2d:7e:c0:63:d5:ce:d7:e8:0c:
e4:b5:e8:52:65:ad:b0:e2:6a:71:09:1e:94:5e:18:7c:29:ff:
a6:ea:93:66:51:7d:b0:a9:a7:19:31:7b:b0:fe:2d:15:12:6c:
9c:91:f9:9e:ba:2e:e3:f8:23:0a:eb:f7:dd:97:83:34:b7:c0:
26:3f:ae:c2:dd:ef:e7:9b:8a:57:ee:51:44:c5:09:f6:ca:c0:
76:a6:ef:99:b4:ba:46:09:39:c9:96:ff:fd:4c:64:1b:dd:ba:
a3:ae:0e:1b:31:fa:3c:27:9f:d1:27:34:fd:47:01:03:bf:64:
74:d6:81:0f:52:77:a5:78:d3:f7:20:02:9d:ec:5e:fb:e7:be:
2d:e5:c3:39:37:a3:e2:19:2f:ab:43:39:6a:36:2b:6a:eb:b3:
c6:db:0a:c8:ef:7e:c2:d6:26:54:cb:41:e7:a3:c6:4d:8a:3c:
af:20:24:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 05:33:14 2023 by rpki-client on console-ams.rpki-client.org