Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/dgfIgJEafJVxRGn9GHLblgubmJQ.roa
File: dgfIgJEafJVxRGn9GHLblgubmJQ.roa (raw, json)
Hash identifier: mxGAA51f0AE/p4DzHoio1y0qr71H/bOo5v22ryPVeTw=
Subject key identifier: 76:07:C8:80:91:1A:7C:95:71:44:69:FD:18:72:DB:96:0B:9B:98:94
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01919FB5E1BECF87F4CBEA4B8F262CA5A641
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/dgfIgJEafJVxRGn9GHLblgubmJQ.roa
Signing time: Thu 29 Aug 2024 19:56:22 +0000
ROA not before: Thu 29 Aug 2024 19:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 62.60.196.0/22 maxlen: 24
62.60.244.0/22 maxlen: 24
62.60.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Sep 2024 07:08:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9f:b5:e1:be:cf:87:f4:cb:ea:4b:8f:26:2c:a5:a6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 29 19:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7607c880911a7c95714469fd1872db960b9b9894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:e4:cf:fd:41:93:33:21:3d:80:2f:1e:47:
ea:fc:c1:e5:5f:23:a0:6a:86:dd:81:38:3b:ab:6c:
3a:ba:d2:97:52:35:5b:43:cb:dc:e4:91:8a:a7:e5:
a1:bd:47:48:7a:a5:2a:14:f8:ce:19:3d:e1:dc:0b:
48:b5:0d:9c:bf:74:de:bf:ea:ab:bf:a3:08:65:76:
f1:48:5a:86:5b:f4:21:0e:c9:31:d5:83:c7:c8:6c:
86:a1:f0:2f:8e:af:e6:77:57:56:aa:ff:10:58:75:
9f:c8:44:b0:60:dd:20:cd:3b:e8:91:df:96:d6:4f:
b9:8a:28:1c:51:9a:1d:e7:be:a7:60:11:4c:14:12:
08:15:c3:f9:e4:d7:69:9c:df:60:0b:79:65:94:37:
d4:46:59:a8:12:2c:d7:dc:1d:4d:80:21:86:38:28:
ed:fc:5e:02:7d:5b:de:b6:8a:7f:11:33:be:f7:ff:
ad:a8:07:94:79:a8:ed:45:82:75:1c:b6:8f:48:91:
9b:58:5a:f1:35:2c:61:63:14:44:3d:45:78:8f:21:
08:43:7e:15:c9:4e:b1:7a:a5:99:b6:3f:12:e6:31:
80:87:23:64:09:9c:a9:a7:5e:e7:fc:04:6f:9c:dc:
0e:99:ca:12:28:70:5a:0e:e9:df:ac:24:fb:80:0e:
1f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:07:C8:80:91:1A:7C:95:71:44:69:FD:18:72:DB:96:0B:9B:98:94
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/dgfIgJEafJVxRGn9GHLblgubmJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.196.0/22
62.60.244.0-62.60.251.255
Signature Algorithm: sha256WithRSAEncryption
b2:e6:68:b6:9f:a8:be:f7:30:0d:f4:5e:78:f0:d8:53:14:24:
cc:ff:6b:68:c6:61:fa:10:cb:fc:77:8f:b3:f1:77:58:0d:21:
10:de:56:f6:e5:fd:c3:03:2b:3d:56:3d:17:f7:69:1a:2b:b0:
e6:38:7b:20:f4:92:44:f4:d7:42:ba:fb:ab:aa:00:37:5e:6f:
85:68:06:9f:ef:b8:94:67:0b:ff:30:df:f9:25:05:90:5c:99:
ec:77:f3:32:26:3d:39:f7:7a:da:ee:e5:40:4e:d8:e9:74:da:
ee:0a:cf:21:ba:11:2c:31:62:8a:8c:38:7d:83:8b:20:f8:c0:
fa:a9:a5:3e:b4:f8:45:0a:e7:a0:f0:fb:f1:63:fe:1a:e3:fc:
fd:10:d1:f0:87:91:13:c2:0d:2b:7a:9a:8c:53:f9:3c:08:72:
5a:ff:39:fa:f7:bf:0e:c1:c2:f1:6b:8e:d9:90:47:6b:b7:88:
bd:18:a4:3b:be:22:13:15:18:5a:a2:3b:f5:ce:4b:0d:e9:fb:
df:e3:5b:29:b4:bb:20:89:11:32:3f:ef:cc:57:8b:df:e0:9f:
1f:35:9c:bf:53:ef:ba:cc:19:8a:c5:da:42:d7:9d:05:5b:29:
ee:7b:00:07:25:61:0d:27:af:bd:82:1e:05:15:00:3e:17:33:
09:a1:51:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 14 08:29:05 2024 by rpki-client on console-fra.rpki-client.org