Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/j5HhtjREch5tnKrHmmtJ6KXU8so.roa
File: j5HhtjREch5tnKrHmmtJ6KXU8so.roa (raw, json)
Hash identifier: NzafkExN/2HmEEB5gWnPXWFCEbuYDFecT4VwOFykh+0=
Subject key identifier: 8F:91:E1:B6:34:44:72:1E:6D:9C:AA:C7:9A:6B:49:E8:A5:D4:F2:CA
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018C1A94D9B6B8C99BBF8790E30F4FD8BC00
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/j5HhtjREch5tnKrHmmtJ6KXU8so.roa
Signing time: Wed 29 Nov 2023 10:16:51 +0000
ROA not before: Wed 29 Nov 2023 10:16:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:94:d9:b6:b8:c9:9b:bf:87:90:e3:0f:4f:d8:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Nov 29 10:16:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f91e1b63444721e6d9caac79a6b49e8a5d4f2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:10:56:fe:9a:d6:bc:f7:43:0f:f1:0b:1c:
bb:13:3b:5e:64:15:23:70:3e:99:f0:c3:02:e1:42:
49:e0:e4:dd:bd:7b:de:15:74:b5:ea:85:c9:96:4d:
90:36:d3:c0:32:8a:b9:86:89:23:73:e7:27:22:51:
d9:b9:2a:43:f9:23:0e:6f:0b:33:d2:32:80:5a:25:
5e:f3:83:ee:87:4f:6a:1e:54:76:6d:d1:bf:4e:96:
60:1d:38:8c:53:f7:9b:7b:0c:69:d5:ca:84:5c:58:
7b:e7:53:fe:59:04:52:3f:26:d8:a7:70:44:de:89:
da:f6:34:d0:5a:01:41:18:98:08:f3:98:6a:ab:ed:
5e:ba:f7:ea:ce:30:55:c0:7f:01:93:d7:11:e9:0d:
ac:f3:f0:82:74:a5:c4:e6:5a:e3:71:39:62:df:92:
0f:bd:81:eb:26:ee:c7:7e:7a:b5:50:c3:14:d1:0a:
96:4d:7c:9f:8f:fa:e5:aa:8d:29:e0:95:74:96:ee:
ae:10:9a:c7:45:2c:db:ba:0f:72:f3:46:b4:92:36:
bc:96:e8:4a:53:98:cf:be:75:50:3c:16:5f:5b:89:
39:08:ae:ce:14:52:2e:02:3e:66:5c:7e:ae:f2:3c:
10:42:9b:a3:96:44:78:ba:97:b7:22:57:26:d3:9f:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:91:E1:B6:34:44:72:1E:6D:9C:AA:C7:9A:6B:49:E8:A5:D4:F2:CA
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/j5HhtjREch5tnKrHmmtJ6KXU8so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.220.0/22
Signature Algorithm: sha256WithRSAEncryption
91:31:d6:6d:a2:08:a5:80:7b:64:97:19:63:17:6f:35:56:f1:
dc:8a:39:af:9d:08:14:09:ac:ac:b8:11:12:ff:e7:cd:72:d9:
f1:ec:ed:de:9a:95:6c:97:1b:66:5e:d2:d9:f0:d4:8f:77:fe:
e4:75:21:1b:48:71:63:17:78:d8:54:28:44:cd:0c:3f:5f:79:
12:59:b1:99:f9:2c:fc:ce:03:c9:a5:eb:50:77:24:12:96:eb:
b0:de:f7:39:b4:b3:f1:c6:dd:4c:af:49:d6:b6:b1:71:9a:2e:
9c:9c:52:68:27:6a:ea:44:c8:0e:97:fa:23:da:90:8b:51:7a:
2a:63:8f:17:6f:0d:30:4f:57:b6:b6:54:b7:9a:62:b0:d6:d3:
a0:81:89:76:6c:d1:e3:3d:2e:a5:d5:38:c8:e8:23:f1:1a:9c:
98:f5:a2:9d:82:96:e2:c9:f0:94:69:b5:8f:06:1b:5b:c0:e0:
24:95:7b:c4:82:ba:b7:76:08:6c:ad:48:0e:7a:05:44:d3:78:
76:f2:8e:13:25:14:05:a6:b7:8b:89:6a:c7:89:1e:61:3b:11:
b2:5f:e2:b5:4c:bc:c8:d6:8e:94:ba:64:11:35:71:9b:c6:b0:
2e:4a:28:e8:8f:bc:3d:f6:be:bb:7e:68:7d:61:bd:78:0b:cb:
15:9f:94:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org