Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jVwARYt4EDo4wooJcGJMRRb2Q4o.roa
File: jVwARYt4EDo4wooJcGJMRRb2Q4o.roa (raw, json)
Hash identifier: GUzg8mhtvUdlH4IA7UxR7Z2H75kDQulmsdXQ/11Ygfw=
Subject key identifier: 8D:5C:00:45:8B:78:10:3A:38:C2:8A:09:70:62:4C:45:16:F6:43:8A
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018894D031E1F52D54C7E55CE728B2231280
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jVwARYt4EDo4wooJcGJMRRb2Q4o.roa
Signing time: Wed 07 Jun 2023 07:44:12 +0000
ROA not before: Wed 07 Jun 2023 07:44:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35372
IP address blocks: 62.60.143.0/24 maxlen: 24
62.60.144.0/24 maxlen: 24
62.60.160.0/22 maxlen: 24
213.176.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 07:14:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:d0:31:e1:f5:2d:54:c7:e5:5c:e7:28:b2:23:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 7 07:44:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d5c00458b78103a38c28a0970624c4516f6438a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:6e:74:ba:e1:73:c9:54:3b:95:48:48:36:
2c:97:3a:20:05:20:a1:0b:5a:2f:30:43:1a:47:ca:
ab:3f:0a:48:5f:27:b8:d0:30:3f:fa:39:d3:f4:f0:
0b:ce:a4:10:4d:4e:0b:84:2e:32:e6:4d:6a:da:a7:
a2:89:a3:01:72:51:8d:2e:b1:f0:38:b8:84:b5:da:
96:c6:c3:0c:f1:a7:78:0b:7f:62:18:29:41:08:2f:
69:e2:60:e3:02:04:2d:be:8f:5a:03:f4:4c:af:ff:
01:81:e9:12:27:34:09:e1:23:81:a2:5c:fb:a2:bb:
2d:b5:80:28:b0:9e:9c:f8:08:eb:57:9a:e6:cf:b3:
35:e0:8a:4b:53:09:c5:ca:82:63:c5:30:a3:04:95:
4e:11:97:94:0f:20:9c:b9:5e:2f:dd:18:f1:9e:8e:
9e:35:60:56:28:5d:ce:47:3e:8a:62:2b:18:4f:e1:
5b:87:fa:4d:f5:91:58:c5:d6:59:43:36:b0:33:d7:
b8:2d:a5:e8:c0:ce:34:0f:97:6e:08:c9:dc:37:f0:
ab:ca:65:2b:03:0c:49:e4:aa:3c:da:af:79:47:6a:
f4:76:a3:e5:5b:59:7d:eb:48:18:06:56:fb:b4:34:
10:4e:a0:75:c7:b9:09:31:64:63:a2:51:21:02:52:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5C:00:45:8B:78:10:3A:38:C2:8A:09:70:62:4C:45:16:F6:43:8A
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jVwARYt4EDo4wooJcGJMRRb2Q4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.143.0-62.60.144.255
62.60.160.0/22
213.176.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e5:6f:65:58:d5:9f:c4:f4:43:eb:b1:5f:01:68:a0:99:e0:
4c:c2:a5:e0:62:ea:2d:4f:fb:81:ec:16:c4:79:96:24:29:27:
42:c7:64:46:e4:d2:df:fc:19:2c:2b:0e:f8:66:c4:37:8c:ce:
0d:be:9a:bd:34:78:bf:ab:a6:55:0d:e1:53:12:88:1a:f2:e2:
be:31:7e:3a:6e:5c:a8:86:27:b8:5a:35:b2:9d:68:0d:f7:e0:
01:0e:c9:24:74:2f:c1:1c:c4:9e:26:1e:10:4e:ba:69:3d:c9:
38:17:48:58:76:38:73:4a:80:cc:0b:50:82:99:57:b2:7f:f5:
24:34:8e:12:58:1f:a5:9b:2e:6b:57:cc:ec:23:a3:f8:ee:2d:
97:84:e8:df:85:bc:b8:b2:af:a9:f6:ec:95:e5:cc:1d:e4:8b:
3d:2a:01:d3:e5:8c:6e:db:3c:bd:c2:4f:d8:92:22:39:08:48:
45:56:cc:2c:0f:bc:cc:fd:90:e3:a8:d4:02:03:5d:a1:6d:ed:
fe:f0:1b:41:3d:49:87:52:f8:e9:f5:af:94:c3:cf:44:19:41:
f9:82:2a:05:80:dd:97:19:e3:1e:0d:49:cd:bd:e4:1d:3a:2d:
80:82:9a:f1:93:94:d5:08:40:66:fd:1b:f5:67:b8:fc:68:84:
d3:34:ce:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org