Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eAwmf75RBwkUs1at0W38NHW9gHE.roa
File: eAwmf75RBwkUs1at0W38NHW9gHE.roa (raw, json)
Hash identifier: o+ngYtHqReH9euWEivuSaEVJqhfybhQj/rFnvTD3q90=
Subject key identifier: 78:0C:26:7F:BE:51:07:09:14:B3:56:AD:D1:6D:FC:34:75:BD:80:71
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01915F45E8555311599561896063D0636B4D
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eAwmf75RBwkUs1at0W38NHW9gHE.roa
Signing time: Sat 17 Aug 2024 07:38:22 +0000
ROA not before: Sat 17 Aug 2024 07:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.240.0/20 maxlen: 24
213.176.112.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Aug 2024 07:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5f:45:e8:55:53:11:59:95:61:89:60:63:d0:63:6b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 17 07:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=780c267fbe51070914b356add16dfc3475bd8071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:fe:81:c6:b4:96:c5:12:0b:df:c6:18:57:
28:7d:62:60:52:f7:05:5d:d7:04:34:78:9c:ed:01:
ba:05:d3:d8:dc:2e:a8:b9:44:7d:cc:2b:1c:d1:91:
65:cd:4d:18:9b:3a:96:39:3b:91:ce:f1:b2:9d:64:
0f:7d:90:a0:12:f6:dc:82:bc:bf:f4:5b:c7:43:14:
e4:01:66:91:8f:02:7d:17:6c:dc:47:f2:27:7d:20:
ed:da:27:92:19:b2:2b:4a:6e:ca:8d:d2:af:62:7b:
c7:4e:e6:41:5a:a9:6c:92:5e:10:1b:47:ba:3a:d1:
9c:43:39:08:f3:ea:a9:d9:83:88:b4:c3:06:a6:55:
0f:21:9d:7a:2e:d2:5d:95:5a:9d:34:fd:b9:c6:55:
b7:92:6d:f0:75:03:f3:f8:97:13:04:44:26:a4:6c:
ec:05:a4:ee:58:45:a3:8e:71:6d:b1:28:5b:0d:0d:
b3:18:97:eb:35:42:57:d6:7d:3b:82:99:3a:76:45:
c5:e6:e0:c4:a2:7d:f0:33:e9:e2:95:1b:9b:cf:f3:
07:17:09:dd:85:26:77:2c:c9:94:24:39:50:6a:9a:
0e:fd:36:cd:c1:7d:4e:bb:ea:2e:b5:77:32:ea:24:
dc:27:01:4a:13:cc:68:de:e8:ac:78:f6:ad:5c:79:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0C:26:7F:BE:51:07:09:14:B3:56:AD:D1:6D:FC:34:75:BD:80:71
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eAwmf75RBwkUs1at0W38NHW9gHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.240.0/20
213.176.112.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:6e:90:00:bb:30:a2:df:93:eb:98:e6:58:32:ac:13:ef:b7:
fe:69:08:75:55:a4:11:78:bb:c2:71:94:60:2c:be:b3:58:9c:
cd:e6:4b:e5:8f:b5:8e:b1:eb:8e:c8:6a:60:77:32:b2:08:b7:
97:97:71:fc:09:93:18:74:a5:35:0c:53:7f:1e:dc:09:ba:98:
6b:3e:ca:d3:0c:cc:c1:f3:02:77:aa:92:c3:ac:a0:04:73:2f:
ec:e5:7e:7a:33:92:28:6a:42:50:67:0f:94:78:42:b6:7e:4f:
56:b0:14:bc:fb:72:d8:97:60:9b:9b:bf:59:71:db:f9:cd:db:
c8:2c:98:de:8e:30:de:9d:08:6e:05:fb:f3:79:14:26:8b:75:
2f:c0:64:18:ae:3e:d3:95:5e:87:8a:bd:a0:bb:67:2a:cd:fc:
b7:c6:0b:63:72:49:d8:46:1c:17:fb:49:75:40:1a:3f:9d:09:
e0:15:a0:7c:fe:d3:d3:6c:3f:b5:3d:e6:da:35:f2:23:b3:be:
42:ee:01:5a:4c:ad:1c:0b:28:e2:d0:02:44:0b:0a:b5:f8:5f:
88:44:3b:81:1f:c1:9d:e8:81:a1:a5:e0:15:0f:dc:cc:ca:08:
9b:5d:85:2e:aa:b5:1e:12:fe:85:a4:9b:8c:d7:ea:7b:76:56:
36:e0:28:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 10:34:37 2024 by rpki-client on console-ams.rpki-client.org