Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/cU-rhb8X2QO4F1wUH33y8W-dOoU.roa
File: cU-rhb8X2QO4F1wUH33y8W-dOoU.roa (raw, json)
Hash identifier: fbRsRDWCx4E1Zk5dGYOHMUa0orPiObRk5zRNASG6lQY=
Subject key identifier: 71:4F:AB:85:BF:17:D9:03:B8:17:5C:14:1F:7D:F2:F1:6F:9D:3A:85
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019087A5F5FF36275B8B081DB9CBA4657DA2
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/cU-rhb8X2QO4F1wUH33y8W-dOoU.roa
Signing time: Sat 06 Jul 2024 10:45:18 +0000
ROA not before: Sat 06 Jul 2024 10:45:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 62.60.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 10:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:87:a5:f5:ff:36:27:5b:8b:08:1d:b9:cb:a4:65:7d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 6 10:45:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=714fab85bf17d903b8175c141f7df2f16f9d3a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e7:3b:79:bd:81:dd:17:2c:fa:9e:f0:93:0b:
fa:48:8d:5a:4c:85:46:e4:d4:8e:4d:96:57:4f:0e:
5d:c6:ba:91:15:e3:60:60:20:d2:4a:93:fa:5b:c3:
69:47:02:23:f3:4a:c0:5e:bd:55:cf:25:2c:9a:54:
6a:ac:cd:fc:90:8e:76:9d:d6:82:69:04:a2:75:0e:
86:4d:24:ac:5b:0e:fc:73:b3:57:ce:7e:28:76:19:
a4:b6:71:f7:bc:65:b3:05:2b:8e:90:3f:b0:78:32:
c4:8b:1f:34:52:ae:72:d2:fb:eb:fb:bb:22:ef:12:
e7:85:6f:e0:7f:49:87:b1:80:79:76:a8:cf:d5:e5:
3f:01:a2:91:72:67:a4:74:9b:eb:76:9a:80:4e:17:
e7:12:50:8a:c5:46:72:48:84:c9:52:7a:42:d9:25:
6f:a2:da:dd:78:c2:9e:b4:72:a4:b0:3d:bf:6d:f0:
35:de:02:43:cf:79:13:23:71:61:80:14:8f:78:0f:
2a:b6:44:18:c1:60:7c:e3:be:8a:a5:d1:85:52:75:
9b:3b:d1:cc:36:a7:11:78:db:92:14:2c:c6:1e:fc:
57:62:c6:f9:5d:a7:7a:1b:89:a6:ab:c0:f7:f8:69:
fe:24:c0:ab:5c:a6:20:e5:60:72:fe:03:4a:da:2f:
07:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4F:AB:85:BF:17:D9:03:B8:17:5C:14:1F:7D:F2:F1:6F:9D:3A:85
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/cU-rhb8X2QO4F1wUH33y8W-dOoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.184.0/22
Signature Algorithm: sha256WithRSAEncryption
70:5d:95:34:d5:78:cf:70:70:6d:67:16:d3:32:a4:b2:4c:0c:
bc:c8:ea:b3:89:18:56:fb:c8:7b:a3:51:96:52:a5:a1:e4:d6:
f8:d6:33:69:5d:32:18:c3:0e:87:9d:97:88:c0:89:9b:cb:10:
68:6d:5b:7d:68:46:59:22:23:82:a6:a8:b8:43:61:1b:3e:f7:
65:3e:87:86:90:31:a3:92:15:80:4c:72:3d:29:a9:02:f3:d6:
66:3c:15:c7:b7:46:a6:63:6a:14:78:d2:32:30:83:bb:7f:da:
b2:48:d7:fb:f7:02:c1:6d:13:2b:72:b6:ef:f0:eb:06:93:64:
14:40:81:70:64:de:da:05:22:6d:ff:f2:81:3d:6d:13:26:21:
9b:a2:23:ba:52:05:e9:88:91:bb:a6:b4:dc:9f:d3:92:38:3c:
b9:14:ba:cd:83:5f:86:47:c0:f5:93:2b:db:ab:86:21:9d:3e:
65:3c:94:a8:ad:99:8a:ac:77:dd:7b:5d:6d:8b:7f:ef:04:05:
68:dd:59:12:ca:bb:63:29:fb:4a:05:7f:1c:b5:30:74:74:e2:
b1:5b:84:de:89:77:98:d7:b9:fd:ec:be:ca:95:30:92:02:7f:
fd:38:c3:d0:c9:35:84:eb:06:2f:21:9d:d5:23:a9:4a:9e:de:
b8:c1:56:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 12:53:40 2024 by rpki-client on console-fra.rpki-client.org