Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_qztOCzCpEfBZLs6uleZh3_jnsA.roa
File: _qztOCzCpEfBZLs6uleZh3_jnsA.roa (raw, json)
Hash identifier: l0dbL9voBxHCoXNmiSr7JLgCsAKc6e3KRHForh/6TR0=
Subject key identifier: FE:AC:ED:38:2C:C2:A4:47:C1:64:BB:3A:BA:57:99:87:7F:E3:9E:C0
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01919FB5E16BB69D65F1B406AD5D25859A7C
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_qztOCzCpEfBZLs6uleZh3_jnsA.roa
Signing time: Thu 29 Aug 2024 19:56:22 +0000
ROA not before: Thu 29 Aug 2024 19:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199760
IP address blocks: 62.60.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 08:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9f:b5:e1:6b:b6:9d:65:f1:b4:06:ad:5d:25:85:9a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 29 19:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=feaced382cc2a447c164bb3aba5799877fe39ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:54:e8:36:7e:3b:1e:1e:e0:f4:fb:90:02:
3a:fb:d2:17:67:22:8a:6d:b1:a8:ad:f3:68:a1:6a:
ca:23:ce:ff:9f:ba:6c:f6:b2:48:33:f2:d1:34:c9:
5b:51:57:84:20:3b:dd:1c:75:42:2d:75:ad:99:b9:
f5:80:ec:36:7b:98:ea:f6:8a:9e:b3:30:3a:5c:16:
bc:fb:8b:f2:58:f9:6a:4d:aa:9f:1f:e9:1c:30:83:
14:1a:00:e0:be:ae:39:5d:3d:ac:66:36:5a:08:bf:
05:d1:5f:28:51:ae:1a:04:96:e5:52:86:ac:e8:2b:
f3:0b:87:97:ce:59:6e:79:14:01:16:f0:2d:e0:9d:
53:04:5d:0a:f7:6b:55:7a:e6:1b:2b:16:75:7f:af:
6e:06:5f:54:ab:aa:42:db:14:db:fe:9b:3c:cf:cf:
f6:b2:90:83:3b:36:ed:b0:18:6b:59:a9:ad:df:3b:
82:a0:7d:44:78:f3:a5:f8:b3:61:97:ee:d4:0f:90:
3b:60:b5:d3:d2:b0:b1:c8:ba:ef:eb:87:a3:23:e9:
d9:84:88:e1:c5:a6:ae:30:1e:df:4c:28:ca:c5:00:
9f:66:16:00:25:fa:42:85:0f:62:59:27:2d:0f:96:
d7:00:ba:39:89:be:f8:f2:75:4d:71:de:de:34:a7:
b8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AC:ED:38:2C:C2:A4:47:C1:64:BB:3A:BA:57:99:87:7F:E3:9E:C0
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_qztOCzCpEfBZLs6uleZh3_jnsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0/22
Signature Algorithm: sha256WithRSAEncryption
22:56:fb:b2:51:d8:fd:6b:9a:dc:27:d8:bf:4b:0b:d5:bb:56:
0a:94:0a:6c:72:63:dc:64:8b:ad:a6:95:ed:f3:39:65:56:d9:
bc:b2:77:3a:25:fa:33:b3:36:99:e6:30:af:02:c2:7b:0e:35:
30:1f:70:f4:39:f7:f3:a0:cd:7d:32:12:34:df:90:86:24:0d:
e1:5f:5b:61:bf:db:2b:26:12:f2:1c:46:2c:28:a1:98:0c:6b:
23:df:98:33:1c:0f:c0:b9:f4:97:dd:cd:fb:ec:a2:7c:91:8e:
79:c6:a8:ee:91:0a:07:f1:af:0d:44:ed:19:23:10:b1:de:e0:
e2:6a:20:15:a7:5c:c8:8e:80:99:0d:e8:7e:5d:dc:b2:01:b3:
7d:2e:ff:b4:64:e3:c3:df:41:d3:50:a7:07:3f:0b:55:d4:42:
86:c5:1a:e3:52:14:fa:97:ff:63:5a:43:65:4d:86:fc:21:2f:
d7:40:65:e7:a4:b8:09:1e:37:3b:cc:af:b7:80:6f:01:6b:85:
18:2a:2b:35:db:39:2b:2c:38:a6:a7:26:4f:d9:24:62:75:3b:
cf:09:77:a9:44:23:5e:71:c2:7b:c0:dd:95:13:82:93:1a:41:
7b:7a:84:9c:a4:64:35:14:c8:e7:c7:2e:c2:6d:77:a8:51:d9:
96:3a:13:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 09:36:25 2024 by rpki-client on console-fra.rpki-client.org