Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/iq-i-e9dKWU5s1UopVzKU_bUKfw.roa
File: iq-i-e9dKWU5s1UopVzKU_bUKfw.roa (raw, json)
Hash identifier: hwCzDbN0ukdQdyumZEfvz9De2o+OyIws9OdUe/xRuVU=
Subject key identifier: 8A:AF:A2:F9:EF:5D:29:65:39:B3:55:28:A5:5C:CA:53:F6:D4:29:FC
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01912698B4E85B0A54E18D2714ED954511F9
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/iq-i-e9dKWU5s1UopVzKU_bUKfw.roa
Signing time: Tue 06 Aug 2024 07:30:27 +0000
ROA not before: Tue 06 Aug 2024 07:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21056
IP address blocks: 62.60.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 13:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:26:98:b4:e8:5b:0a:54:e1:8d:27:14:ed:95:45:11:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 6 07:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8aafa2f9ef5d296539b35528a55cca53f6d429fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:e5:73:a5:85:d9:0c:0c:b0:36:5c:fd:85:
b8:67:39:09:f9:56:97:d4:d6:3a:2e:84:fc:ba:ba:
20:1c:4f:7e:5c:d8:92:ed:ca:95:45:5b:97:02:2a:
a1:c7:b0:e8:37:06:13:20:b6:ae:1e:e0:6a:9d:d7:
1c:c1:de:fd:05:bc:02:e8:9d:bf:21:5d:e0:46:8e:
b8:13:92:46:fe:52:c8:48:b1:79:b5:1f:3b:16:b3:
17:c1:90:7f:ca:80:2c:f3:39:8d:32:92:98:e5:ac:
81:af:0b:ad:0a:a5:74:c3:f5:ca:d2:8d:11:83:e9:
98:54:74:ca:71:43:c4:93:e9:22:72:57:8d:22:ba:
6f:31:cb:96:59:7a:a8:02:1a:51:31:1a:b8:dd:c6:
01:d0:c0:fb:ca:59:ec:fd:f6:44:13:f8:7f:11:8c:
b7:1b:3f:b9:ed:16:a7:cb:5a:7f:c7:cf:db:4e:0c:
4c:01:79:3e:9f:aa:15:69:c9:93:48:bd:11:ac:39:
e6:34:94:29:8a:cc:d1:d8:b1:3e:2e:33:25:1a:f0:
63:1a:c7:75:c4:2c:67:92:3f:59:2b:97:b6:d2:6d:
27:74:43:8c:f8:a1:c4:94:28:33:d9:cf:aa:38:6a:
ea:0a:19:95:0c:79:50:a8:19:e0:52:0f:dd:85:9e:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AF:A2:F9:EF:5D:29:65:39:B3:55:28:A5:5C:CA:53:F6:D4:29:FC
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/iq-i-e9dKWU5s1UopVzKU_bUKfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.195.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ad:d4:59:72:b8:40:d6:ee:c5:c8:bf:c7:26:37:4e:6b:de:
59:96:5e:16:c5:df:41:c1:e5:38:37:e3:71:c5:c9:83:8e:67:
7d:07:9e:7f:e0:4e:d6:71:50:6c:a4:93:87:e7:21:5a:3e:ed:
2f:10:77:58:63:49:a9:8d:5f:ee:0a:04:36:0d:52:4c:bb:98:
90:d1:ae:bc:6c:ec:45:6e:47:59:bb:98:b1:7f:f2:0e:b7:53:
05:0b:a4:d4:2e:d8:e7:e2:ef:00:a2:69:46:d2:4e:d3:4b:0c:
ae:5f:de:21:9a:61:31:22:b6:25:e3:e6:67:40:28:4c:dc:72:
68:a8:2b:61:88:a9:7a:4b:d9:28:23:c6:ac:28:ae:23:75:b8:
05:23:ad:e4:3e:13:83:f8:4d:88:28:49:5d:36:4b:44:aa:0e:
f9:e9:2c:ab:4f:0c:ec:2a:c6:c2:cc:df:e1:69:5a:c0:d4:cc:
d0:67:50:b3:78:65:ae:cf:05:20:af:f0:1f:88:d6:57:fd:7e:
48:74:49:91:9e:22:1d:16:08:48:32:18:48:28:8a:be:a6:f4:
ab:b2:08:5e:5d:c3:51:1e:8b:a6:b6:a7:50:e1:91:df:c6:ba:
8e:d2:9e:05:79:ac:05:7f:cf:84:7f:95:d4:c7:3b:a8:5f:ad:
ea:a7:79:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 15:30:37 2024 by rpki-client on console-ams.rpki-client.org