Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jJKo5WaJW6lTN9r9rc05kfod2zU.roa
File: jJKo5WaJW6lTN9r9rc05kfod2zU.roa (raw, json)
Hash identifier: JaZxujwQW4+82RBnnfVwd0u6fw/ri7mP3rksdF9AtDc=
Subject key identifier: 8C:92:A8:E5:66:89:5B:A9:53:37:DA:FD:AD:CD:39:91:FA:1D:DB:35
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0188B39AC15CFE618BF744002EBCFF52E344
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jJKo5WaJW6lTN9r9rc05kfod2zU.roa
Signing time: Tue 13 Jun 2023 07:14:03 +0000
ROA not before: Tue 13 Jun 2023 07:14:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35372
IP address blocks: 62.60.144.0/24 maxlen: 24
62.60.160.0/22 maxlen: 24
213.176.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:9a:c1:5c:fe:61:8b:f7:44:00:2e:bc:ff:52:e3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 13 07:14:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c92a8e566895ba95337dafdadcd3991fa1ddb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:88:32:3a:e4:a4:e7:82:bd:0c:ae:55:01:
dc:ab:90:e9:b8:74:ec:1f:99:7a:19:ad:25:b4:c9:
ce:d6:b2:e0:14:9c:24:b0:9f:92:81:b1:2b:6f:26:
11:bd:04:07:8a:4b:41:e1:76:7b:32:fe:e1:36:44:
be:b2:ab:0d:bf:82:09:65:97:61:5b:20:a3:e5:72:
ff:67:14:a3:34:84:54:a5:88:34:61:a2:ad:7c:4e:
eb:bb:a2:1a:de:d7:78:fa:dc:30:ac:66:45:65:84:
e7:c2:d2:5c:eb:d1:fe:4a:2d:70:cb:c6:50:c5:59:
e5:8d:a5:ea:b8:ab:eb:68:28:d1:f0:40:08:13:32:
33:77:8e:03:56:b4:f2:84:6e:74:9f:d2:9a:39:08:
71:4f:d8:9e:87:c0:7c:65:40:55:9a:d9:a0:03:87:
83:d4:3f:47:ad:09:ca:15:cc:06:f6:05:5b:ca:79:
7d:b4:61:88:a1:ec:8c:c6:e4:1d:df:ca:52:a1:ce:
ff:21:06:f8:a6:6f:d1:ff:3a:12:49:d3:a6:27:c9:
26:e4:5a:27:8a:45:0e:ff:71:d9:db:3a:fa:48:52:
af:b2:23:bd:f0:6b:51:c7:06:59:81:eb:e4:a2:5d:
c8:8e:53:0d:8c:f2:51:80:07:a2:fb:28:c1:e3:ce:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:92:A8:E5:66:89:5B:A9:53:37:DA:FD:AD:CD:39:91:FA:1D:DB:35
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jJKo5WaJW6lTN9r9rc05kfod2zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.144.0/24
62.60.160.0/22
213.176.0.0/24
Signature Algorithm: sha256WithRSAEncryption
00:fc:62:53:bf:1c:43:d6:b7:63:a4:10:54:ac:e0:9c:04:46:
3e:43:5b:8f:b7:9b:2e:97:00:c5:e6:dc:2f:58:71:92:02:65:
f0:0b:1f:77:25:fc:34:de:3f:3f:fe:b8:05:c5:9a:83:93:3e:
21:ca:db:d1:1d:74:87:01:11:dd:26:cb:ec:3a:48:39:82:4b:
8b:a8:8e:8c:f0:21:ba:68:2e:92:6f:60:a4:7c:ed:ae:60:b0:
1e:64:9f:94:0a:88:75:c1:60:7d:18:b0:bd:21:f6:43:eb:5b:
57:1b:c4:ee:b1:66:3b:9e:20:43:bc:e0:d3:57:46:30:b6:ee:
2a:59:01:77:0b:00:2b:75:fd:a8:20:51:ec:82:6d:bd:37:83:
ad:3f:4b:94:4b:43:11:af:d3:f9:19:7e:86:1b:ba:06:5c:2b:
32:b9:1f:d2:8f:35:7a:33:0e:37:59:a4:f2:5b:e9:6f:2c:38:
6a:0a:fc:a7:72:be:b8:0e:41:32:ef:f5:36:13:3f:d4:71:ab:
1e:26:59:9b:46:66:0a:d3:2b:ec:98:23:00:d0:46:49:35:42:
4f:78:9c:c7:fe:7d:77:5a:77:41:53:32:8a:58:54:ce:0c:4b:
05:2a:19:5d:ab:9a:3d:57:74:02:be:ee:b1:c0:52:20:96:6c:
53:32:7f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 13:15:49 2023 by rpki-client on console-ams.rpki-client.org