Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eJ_-CaMwdtUf4qW4IZE4KwO4RsI.roa
File: eJ_-CaMwdtUf4qW4IZE4KwO4RsI.roa (raw, json)
Hash identifier: dJQLb1LFHxO5TZN0TZD8dkmHvXxbAPpAQPvUtosMKX8=
Subject key identifier: 78:9F:FE:09:A3:30:76:D5:1F:E2:A5:B8:21:91:38:2B:03:B8:46:C2
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01919FC48747F53CFF03AA5E767681A6E80B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eJ_-CaMwdtUf4qW4IZE4KwO4RsI.roa
Signing time: Thu 29 Aug 2024 20:12:22 +0000
ROA not before: Thu 29 Aug 2024 20:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 62.60.196.0/22 maxlen: 24
62.60.244.0/22 maxlen: 24
62.60.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Sep 2024 07:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9f:c4:87:47:f5:3c:ff:03:aa:5e:76:76:81:a6:e8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 29 20:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=789ffe09a33076d51fe2a5b82191382b03b846c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:27:44:cc:67:e7:27:72:a9:c4:be:7e:14:
af:42:1b:13:4d:ec:92:a3:a5:01:0a:9e:78:45:7b:
47:e5:22:d5:40:cb:ab:0d:66:bc:6f:72:04:2b:62:
b8:51:ef:3b:4d:c5:cd:35:c8:91:50:87:60:7c:fb:
df:1d:df:3d:31:ec:2c:a3:08:d3:3c:1f:9c:5f:60:
ce:6d:a3:28:f7:71:cf:e9:26:47:7f:45:e9:3d:66:
68:e3:f6:9c:b1:37:4e:df:19:8c:f4:e4:6c:2b:2f:
67:08:2d:a2:bb:83:4a:22:42:0a:85:a4:eb:40:1a:
ec:a6:3a:e7:69:69:b3:9f:71:bc:1c:5d:8c:4c:b8:
3b:37:5f:0e:e6:bf:dc:1e:80:a7:4d:79:0b:7c:37:
a4:dd:c0:c6:bb:ab:c2:a4:9d:34:de:e0:38:8c:63:
73:74:44:78:bb:4e:be:ff:13:cc:41:ba:72:92:64:
f9:e3:37:be:ed:37:00:27:52:22:41:86:c8:62:36:
8d:31:0a:14:68:07:ea:2c:92:79:72:f0:26:56:7d:
cd:c5:d8:22:b6:0c:c9:b1:27:2b:ac:a8:99:dc:db:
1a:05:56:34:84:61:d5:59:cf:58:b4:38:c8:f8:70:
95:4b:0b:58:54:4c:76:c4:95:e3:36:65:e1:8f:a0:
f1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9F:FE:09:A3:30:76:D5:1F:E2:A5:B8:21:91:38:2B:03:B8:46:C2
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eJ_-CaMwdtUf4qW4IZE4KwO4RsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.196.0/22
62.60.244.0-62.60.251.255
Signature Algorithm: sha256WithRSAEncryption
73:6c:19:32:75:06:e7:50:f5:e3:56:3b:80:a4:b8:a7:7b:62:
63:f5:ea:cb:26:77:65:1b:40:13:8a:1e:26:89:58:49:34:4a:
5b:92:ce:f4:a5:83:14:6d:c5:90:f0:27:09:b3:b6:f3:62:1e:
26:41:64:7d:4b:66:95:99:7f:b7:83:6d:a5:3c:64:87:20:ca:
0e:e6:14:38:a5:da:f6:18:be:37:08:7f:f3:64:ac:23:00:14:
52:a1:13:ea:6c:5d:e5:ad:1d:fe:96:aa:b7:bc:1d:ee:59:b8:
c7:88:b9:90:4b:2b:d0:e8:9d:5f:51:4b:1a:e4:35:6a:96:5d:
cf:fc:4d:fb:a5:94:89:3c:a9:d3:a0:38:6a:9e:a8:6a:f7:64:
44:7f:93:e6:45:9c:4c:8c:f3:cf:df:66:fc:e5:8c:67:97:6c:
6f:48:1e:c5:c8:26:49:8a:a6:b5:3a:ec:ae:a8:a6:f1:1a:92:
87:69:d9:e3:5f:0b:76:7b:a6:9d:72:e5:19:55:d5:81:55:a2:
74:f6:3b:a8:c6:5d:9d:e1:ad:71:33:92:c3:cf:ed:b1:f8:e9:
1a:fc:ee:65:f6:29:a4:2e:e0:0f:97:d6:0b:83:f0:f1:07:db:
93:73:e5:28:4e:31:a1:c2:04:11:7f:7b:dd:e6:c6:81:2b:73:
19:f0:b7:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 14 08:29:05 2024 by rpki-client on console-fra.rpki-client.org