Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/j0QCqyIQiwBQuDunsPsDWqMKm68.roa
File: j0QCqyIQiwBQuDunsPsDWqMKm68.roa (raw, json)
Hash identifier: cxsDMYpQQSQ7RFZqqqMGp4PcgljKj/NRTm39Ck755n4=
Subject key identifier: 8F:44:02:AB:22:10:8B:00:50:B8:3B:A7:B0:FB:03:5A:A3:0A:9B:AF
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018EEACD98382633663042EEA3A7A6E13377
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/j0QCqyIQiwBQuDunsPsDWqMKm68.roa
Signing time: Wed 17 Apr 2024 06:45:26 +0000
ROA not before: Wed 17 Apr 2024 06:45:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49100
IP address blocks: 62.60.152.0/22 maxlen: 24
62.60.156.0/22 maxlen: 24
213.176.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 12:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ea:cd:98:38:26:33:66:30:42:ee:a3:a7:a6:e1:33:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Apr 17 06:45:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f4402ab22108b0050b83ba7b0fb035aa30a9baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:80:da:0e:22:fd:a4:b8:10:52:78:35:64:1a:
72:98:48:4d:f6:44:49:1c:1f:79:b3:bb:04:9e:7e:
c0:18:27:4a:17:f2:cd:f9:52:1f:40:1a:96:6b:b7:
43:47:99:58:8f:38:c0:e5:a9:bc:86:77:56:bb:84:
fe:0d:92:9b:5a:77:87:a1:b1:3f:b3:55:36:02:45:
29:32:aa:38:53:7e:07:4d:93:53:33:74:88:65:10:
b1:dd:55:6d:0f:23:f1:2d:9e:ea:30:28:40:58:b3:
7f:a9:b6:c9:3f:34:e2:4c:b2:9b:7d:68:14:9a:3d:
c7:c4:7d:07:2b:3f:ae:69:57:c1:a8:eb:36:30:d1:
5d:d6:e3:19:f7:d6:6a:82:15:0d:cc:b4:48:5d:fc:
93:2c:df:e3:2e:7f:15:34:f3:f8:f3:bd:a0:5f:ed:
34:07:db:01:1f:ac:f2:57:45:25:6f:77:66:b5:56:
b3:93:29:eb:ef:f1:29:1c:4c:ff:b6:0f:76:eb:8d:
7b:09:f5:b8:55:26:7d:16:ad:98:f9:f8:c0:fc:74:
ab:f2:56:09:af:bf:93:f7:a7:ae:4d:de:62:a1:27:
66:5d:75:1e:13:60:39:9e:2d:c6:b5:a4:ab:59:f2:
38:45:1b:27:fd:55:2e:06:2b:0b:14:2b:75:f2:b6:
b5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:44:02:AB:22:10:8B:00:50:B8:3B:A7:B0:FB:03:5A:A3:0A:9B:AF
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/j0QCqyIQiwBQuDunsPsDWqMKm68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.152.0/21
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:bc:aa:3c:4f:b3:f0:bd:19:51:95:89:44:28:91:b9:d2:ca:
b3:a3:2f:9e:b2:07:8e:ba:db:b6:11:8a:65:ab:47:bb:64:71:
7a:f2:1f:96:ce:e1:af:47:62:ad:7d:11:cd:81:15:c1:12:4a:
6e:8b:2d:08:04:fd:9a:4f:18:a4:8e:17:da:75:4b:ad:8f:55:
75:50:26:5b:8d:24:c3:2a:aa:27:ab:36:89:d1:8d:4b:df:65:
09:a0:58:af:aa:9d:5f:84:0d:84:53:6a:1d:94:74:bf:e3:b8:
84:22:b3:38:77:ac:dc:11:db:f1:2b:7c:82:09:73:ca:f6:a7:
bb:e3:af:03:3c:fe:f4:ca:05:ed:f1:a3:92:24:af:6a:ce:c6:
d6:14:c0:cd:07:a0:bc:aa:d2:78:d4:96:bd:45:5d:b6:9e:13:
64:c1:bb:b4:a3:df:85:b4:91:e4:4d:1a:4c:34:7c:57:e1:d1:
db:ca:07:71:64:1c:f1:b3:3a:63:77:a6:85:e1:34:33:2d:35:
c1:48:35:f5:26:cd:1f:dc:3f:3a:bd:97:7b:95:19:31:a7:b6:
41:fc:34:21:c2:e0:85:d8:c3:48:68:9f:79:c4:b7:5d:c2:f2:
e1:ea:bd:83:b8:1e:f0:3b:77:b3:8f:06:a6:8d:62:c8:77:80:
ec:ab:81:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org