Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/d9xoob8-IMDASiZ13TVnzIsVvF4.roa
File: d9xoob8-IMDASiZ13TVnzIsVvF4.roa (raw, json)
Hash identifier: KmDJJYlKvONk8Ddt/jJrNIOzh/d0GRaFVjzboDceB/o=
Subject key identifier: 77:DC:68:A1:BF:3E:20:C0:C0:4A:26:75:DD:35:67:CC:8B:15:BC:5E
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018AA75C2C0539EF2859AED16C86A23A59F7
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/d9xoob8-IMDASiZ13TVnzIsVvF4.roa
Signing time: Mon 18 Sep 2023 08:15:50 +0000
ROA not before: Mon 18 Sep 2023 08:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212036
IP address blocks: 62.60.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Dec 2023 06:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:5c:2c:05:39:ef:28:59:ae:d1:6c:86:a2:3a:59:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 18 08:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77dc68a1bf3e20c0c04a2675dd3567cc8b15bc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f3:64:14:42:a0:da:18:b0:80:3a:89:79:be:
af:f3:67:b4:ea:ed:02:92:ee:9f:4a:56:2d:72:d6:
88:df:fb:38:47:06:4c:e2:e8:db:2c:d3:72:2c:b8:
98:8c:3a:63:11:92:49:09:57:63:1b:eb:75:2e:bc:
e9:d8:d9:3b:9f:f4:97:93:3e:58:73:4a:77:43:ab:
44:5d:72:55:5f:80:1c:4c:12:3c:18:4b:42:0e:c7:
b9:fb:89:33:bf:51:7c:19:2b:8a:58:d2:d5:3a:90:
39:c9:57:c4:8b:11:95:3f:e4:83:71:b9:92:39:a6:
e7:4f:26:48:6a:c4:4e:59:31:94:b4:c5:61:bc:61:
b8:e7:a8:26:48:9c:7f:a5:8a:a0:58:7c:63:98:76:
b6:db:b5:6e:fe:77:06:2a:6c:6f:bd:a3:a9:1f:bb:
08:99:bd:d7:e1:fa:7d:58:2e:87:98:99:09:d5:bd:
54:2b:bb:ef:5d:f6:6e:38:11:72:cb:c4:4f:3e:31:
88:75:51:7e:f0:05:b2:fc:3d:25:c0:cb:48:9b:ff:
bc:74:c8:80:b0:05:a0:1d:08:d4:7d:0d:d6:f4:e5:
a6:83:cb:59:64:c1:09:ae:b7:e1:e0:2a:38:25:49:
82:52:39:c8:ef:b7:35:18:87:f7:b9:99:43:50:32:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DC:68:A1:BF:3E:20:C0:C0:4A:26:75:DD:35:67:CC:8B:15:BC:5E
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/d9xoob8-IMDASiZ13TVnzIsVvF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.138.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:50:92:e9:f2:2b:a9:14:38:6e:63:30:6b:39:c2:78:de:94:
d1:a4:e6:ef:3a:15:29:ee:b6:9f:02:3d:b4:b2:87:51:0b:1b:
e1:5c:52:22:03:a0:ae:e7:71:ed:2d:d8:77:97:cf:c3:9c:99:
ee:57:7d:00:13:21:b2:d1:f3:c6:b0:d0:75:1b:8d:23:cf:89:
59:cc:10:3c:c6:c4:ef:05:3f:33:fc:c0:b6:1f:b3:98:9c:a0:
f1:b8:79:80:b1:ff:86:bb:82:e6:85:44:6a:e5:b7:53:b3:14:
bf:5a:bb:55:91:84:1d:41:37:08:96:cf:da:c4:a4:a8:e8:94:
c5:0f:6c:38:5e:8a:83:b5:33:fd:e2:a8:0a:9e:77:c0:89:dc:
81:7d:73:50:cf:74:9d:fb:43:5f:0c:d6:4b:a7:23:d4:21:86:
a3:c7:86:e1:0a:0a:a0:4b:7f:94:de:44:ec:98:7a:d5:78:97:
2e:4e:79:65:de:b7:da:8f:47:ea:72:a5:df:54:2f:5c:cf:30:
97:35:01:ed:2c:73:38:1f:b5:20:93:8c:0f:0f:a8:3c:1d:5e:
a3:fb:d6:53:c5:94:bf:3f:28:85:08:e5:93:c2:f4:9e:72:64:
54:34:60:54:7a:16:a8:85:4b:4b:69:fc:a1:3a:d7:e1:41:bb:
06:e5:ed:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org