Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ickjgRjOBLXB5eAkIimXRK7zHXY.roa
File: ickjgRjOBLXB5eAkIimXRK7zHXY.roa (raw, json)
Hash identifier: PH/qvCn2o83qWcqiX2f4zZZrgRpmd6801tCSERUeWR4=
Subject key identifier: 89:C9:23:81:18:CE:04:B5:C1:E5:E0:24:22:29:97:44:AE:F3:1D:76
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018B993519AAFE8929A64387F7143BCB98E6
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ickjgRjOBLXB5eAkIimXRK7zHXY.roa
Signing time: Sat 04 Nov 2023 07:21:15 +0000
ROA not before: Sat 04 Nov 2023 07:21:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210474
IP address blocks: 62.60.138.0/24 maxlen: 24
62.60.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:99:35:19:aa:fe:89:29:a6:43:87:f7:14:3b:cb:98:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Nov 4 07:21:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89c9238118ce04b5c1e5e02422299744aef31d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5f:25:67:1b:c5:45:05:1e:fa:58:a9:50:b2:
1e:cc:39:6a:ee:48:3e:79:af:3e:77:d6:f3:cd:c8:
93:a5:75:73:ac:41:68:a5:11:b9:ce:89:c2:e0:b2:
d2:02:9b:6b:6f:e5:42:e3:b4:bf:bb:a8:cc:1d:4b:
e7:85:51:7e:62:b8:f0:66:ea:7c:9a:c0:50:77:96:
6d:19:47:57:07:2c:65:b7:e0:2c:58:64:a1:44:43:
95:b2:a2:55:7c:f2:cb:36:54:85:74:5c:fe:14:d2:
68:04:11:21:53:ab:03:5f:8f:6b:ac:f5:61:84:d7:
c0:51:80:e0:71:b6:04:84:ae:fa:f7:03:b9:6f:ae:
c9:d1:3f:c1:8e:ce:93:ba:26:06:2e:14:97:8a:d5:
83:a3:27:e0:8b:61:a6:d5:15:36:c2:a1:ee:b5:8a:
3c:0f:21:dd:01:0f:9f:29:e4:68:3f:e0:f5:cb:d6:
46:cd:0a:79:21:ba:55:8c:0f:0c:14:fd:e2:c9:62:
ff:37:e9:75:c8:7d:d7:88:5d:e5:1d:65:11:fd:0d:
7b:82:5d:1f:82:29:dc:de:1e:15:a0:de:d7:4a:7d:
de:91:c6:80:73:33:3a:3f:f8:13:b3:66:9f:af:ed:
7a:8d:f1:ae:5e:56:c5:91:db:5e:43:22:91:b8:07:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C9:23:81:18:CE:04:B5:C1:E5:E0:24:22:29:97:44:AE:F3:1D:76
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ickjgRjOBLXB5eAkIimXRK7zHXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.138.0/24
62.60.143.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:16:32:4a:6e:9c:98:39:3e:44:f8:2a:66:ae:c3:d8:13:dd:
35:e7:bc:d0:c9:61:0b:6d:f6:75:ad:41:6a:1c:6a:54:32:ae:
92:ee:74:2c:14:2a:ac:33:dc:59:98:ce:9d:74:d2:04:9c:e6:
55:58:ed:27:92:0f:15:8b:2b:24:b9:0b:6a:d1:cb:92:d4:ff:
45:c5:c6:95:69:be:82:72:68:15:33:0a:f9:12:7d:8a:1d:a1:
77:8a:e9:15:63:6c:53:b8:64:02:36:a6:cb:05:85:c9:f5:96:
f2:4b:e0:09:9e:aa:d7:10:27:15:1e:72:bd:12:32:12:aa:58:
33:06:9e:77:92:b0:05:22:da:d9:cf:c3:21:fa:cb:6e:a5:41:
a8:70:46:22:4c:e5:f0:91:5e:b4:31:fd:b9:a2:3f:cd:42:63:
e5:a6:e0:4c:83:5a:f2:c5:32:ba:05:85:6e:7e:1f:77:ae:83:
2d:d6:f1:41:72:1e:ac:4a:ad:48:f2:37:9f:a9:51:e0:1b:bd:
b9:ec:49:bc:f2:a8:a5:73:44:04:d5:41:66:b8:61:3f:25:63:
d9:b4:8d:7f:68:d5:3e:11:c8:9b:c8:72:5e:48:d4:60:90:8e:
1f:59:ba:0d:8f:97:e8:88:6e:30:2d:bb:21:10:ef:6a:a3:c1:
72:e7:77:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 25 07:55:56 2023 by rpki-client on console-fra.rpki-client.org