Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eL6ZTat30v8Vz-Bzn_liddilaag.roa
File: eL6ZTat30v8Vz-Bzn_liddilaag.roa (raw, json)
Hash identifier: 7sMYL1bJG7KszEcclyMY4BeV0TlFvDbCiTw+gdq58p8=
Subject key identifier: 78:BE:99:4D:AB:77:D2:FF:15:CF:E0:73:9F:F9:62:75:D8:A5:69:A8
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018F804E4C110759D6FBD437978EC52E17C3
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eL6ZTat30v8Vz-Bzn_liddilaag.roa
Signing time: Thu 16 May 2024 07:29:25 +0000
ROA not before: Thu 16 May 2024 07:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 62.60.152.0/22 maxlen: 24
62.60.156.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.216.0/22 maxlen: 24
62.60.224.0/19 maxlen: 24
213.176.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 May 2024 06:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:4e:4c:11:07:59:d6:fb:d4:37:97:8e:c5:2e:17:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 16 07:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78be994dab77d2ff15cfe0739ff96275d8a569a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:42:d2:58:99:ae:ac:da:52:7d:ad:43:72:
62:0a:2c:9d:35:80:82:e8:2f:35:d5:21:14:79:76:
a2:07:d7:b0:6e:09:f8:ae:e0:8a:e0:ed:73:f5:ee:
58:da:25:6e:8a:e5:ad:d1:fe:f5:2e:62:e9:ed:24:
96:af:63:d8:ab:93:df:24:8d:e9:28:66:17:f1:26:
2a:86:ae:d7:15:3a:89:30:6d:84:06:6e:6a:bd:14:
3f:4a:f4:04:a0:02:9a:d1:a0:63:25:bb:4d:43:29:
d2:ee:3c:49:90:55:86:3f:cd:2e:d6:de:5b:10:28:
cf:7a:b2:31:92:99:e1:72:ec:11:e9:67:b9:80:96:
53:fe:e2:af:0d:cd:35:f2:38:d9:d7:e5:47:8e:73:
a1:b4:00:41:5c:ee:a2:8a:2b:a7:fa:c4:ad:f6:39:
2c:c6:f3:71:e2:85:58:8f:3d:b5:20:8a:17:44:7b:
90:29:f4:8d:eb:78:42:57:a2:3e:bf:d4:e9:70:62:
dd:58:64:1a:fa:9c:f6:15:7d:06:49:0d:cf:45:b8:
96:bf:a0:3d:5e:37:d8:5b:7d:02:3b:44:b9:33:84:
82:b1:47:a1:40:0a:07:15:12:4e:89:7b:4a:72:8d:
8b:47:1d:da:8a:a0:26:0e:08:73:3f:0e:65:da:d5:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BE:99:4D:AB:77:D2:FF:15:CF:E0:73:9F:F9:62:75:D8:A5:69:A8
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eL6ZTat30v8Vz-Bzn_liddilaag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.152.0/21
62.60.184.0/22
62.60.192.0/22
62.60.216.0/22
62.60.224.0/19
213.176.127.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:ae:68:a7:12:46:51:bf:0d:1d:1e:da:a1:18:80:44:36:6f:
42:b6:d8:32:38:d6:c7:38:be:a6:c9:03:86:aa:14:ba:b1:f6:
e3:43:6c:3d:65:c6:bb:03:b1:89:0d:d6:4c:b9:67:1b:30:ad:
76:2a:71:2d:29:53:4e:2b:67:8f:ee:07:2f:04:87:05:4d:e8:
07:eb:81:7b:3d:72:75:de:f3:bf:13:72:6b:2b:7d:4d:9b:0f:
b5:5f:ac:b6:fb:21:f4:e6:b7:55:a8:02:8a:2f:99:b0:10:18:
86:7b:82:2b:96:6c:75:d9:33:33:69:8c:3a:0a:fa:eb:f0:f7:
a3:de:df:6f:5a:6a:00:34:14:0a:63:ce:75:0f:d9:56:d6:be:
57:0f:94:77:76:ee:76:cc:a8:0b:42:75:47:68:97:3b:a5:52:
28:72:cc:b5:bd:af:00:c8:02:85:d3:96:5e:b3:d3:1c:0e:7e:
59:32:90:7c:7e:5c:e6:cc:83:2d:f9:74:3e:49:9e:ef:14:1c:
d1:96:ac:d7:f4:e9:02:9d:d5:4b:f4:1d:6e:de:47:a9:35:28:
fa:17:83:1d:37:03:9e:00:98:89:b0:0a:a4:d6:8d:82:c4:00:
05:05:13:18:fd:ef:d7:13:09:5d:28:ca:1b:5f:31:b1:e2:2c:
b4:64:df:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org