Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jqiGwobH_gYBTAfiIb5e6tpdtK0.roa
File: jqiGwobH_gYBTAfiIb5e6tpdtK0.roa (raw, json)
Hash identifier: BxzZYeMH4++xpoXz3nzx9dTTXtOnIYv76s3/I5rBVtU=
Subject key identifier: 8E:A8:86:C2:86:C7:FE:06:01:4C:07:E2:21:BE:5E:EA:DA:5D:B4:AD
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018A8D1FDC4775B7AAA793FE927E6BA48652
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jqiGwobH_gYBTAfiIb5e6tpdtK0.roa
Signing time: Wed 13 Sep 2023 05:59:50 +0000
ROA not before: Wed 13 Sep 2023 05:59:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 62.60.216.0/22 maxlen: 24
62.60.152.0/21 maxlen: 24
62.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Oct 2023 04:41:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:1f:dc:47:75:b7:aa:a7:93:fe:92:7e:6b:a4:86:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 13 05:59:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ea886c286c7fe06014c07e221be5eeada5db4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:f7:d0:44:a5:f1:f5:9e:b4:ec:93:ca:20:
87:58:45:fa:46:bd:4c:96:44:c4:71:23:a5:6b:cb:
0a:80:12:8f:5b:da:ab:74:58:7b:8c:4b:dd:4f:06:
c9:0d:f3:3a:b3:26:50:ca:c8:43:b4:4d:05:04:77:
48:ba:96:f3:b5:b4:09:e4:c7:29:39:81:4e:4c:9c:
fe:6e:0f:32:e8:10:45:b7:7e:4f:40:6c:9e:28:da:
73:19:79:54:b2:4c:e4:1a:74:b9:2b:87:ed:af:ca:
40:58:7d:89:6a:01:e2:96:52:a9:ac:06:5f:b7:0d:
40:cd:a3:a1:5d:00:f8:cc:95:d9:8a:ee:de:38:49:
db:03:ad:ce:e5:62:21:1a:0d:c6:37:96:4d:a8:bd:
ef:f1:08:ac:35:e8:88:11:bc:ee:b5:a4:8e:c1:4d:
25:d5:f7:c8:06:66:47:ac:54:cf:ba:4a:48:3c:47:
d1:c0:12:76:7c:ee:3a:77:21:c6:e6:fb:12:43:7e:
90:8d:c4:2e:78:71:02:de:c3:b6:07:42:1a:e5:3d:
f6:d9:40:be:d2:52:18:3d:3a:9d:b6:7c:c5:55:4c:
31:3c:5f:f2:59:ce:db:93:21:e4:8e:5c:e9:3e:f3:
08:30:cc:6f:e4:7b:25:1b:13:39:99:27:29:d3:25:
fe:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A8:86:C2:86:C7:FE:06:01:4C:07:E2:21:BE:5E:EA:DA:5D:B4:AD
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jqiGwobH_gYBTAfiIb5e6tpdtK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.152.0/21
62.60.192.0/22
62.60.216.0/22
Signature Algorithm: sha256WithRSAEncryption
38:1e:1c:80:e9:c1:a5:ef:3e:a8:16:5b:b8:d9:3d:9e:da:f8:
e9:6d:d0:c5:d0:a5:a0:3f:70:29:b7:60:95:7d:08:d2:f6:91:
13:66:87:ae:20:bd:4c:64:44:e9:be:df:91:d0:b5:30:b1:68:
55:7f:78:21:72:6d:3b:02:6f:6a:ba:cd:1c:1d:15:54:a1:b3:
48:47:c3:85:70:80:6b:d6:42:a5:e6:64:3a:f4:30:b0:c5:39:
fa:ac:54:14:07:a7:e0:a9:d7:4c:88:73:0c:0f:d3:03:9a:6a:
7b:2e:38:58:24:0f:42:71:04:2c:dc:70:fe:d2:05:a1:bc:8a:
43:58:dc:2e:dc:a0:75:37:fc:22:97:c3:da:5a:63:4e:2b:2d:
84:0c:25:06:a4:a6:e4:e9:66:f3:c4:1d:c4:df:7c:4b:cd:c0:
db:73:02:09:05:17:37:05:06:1c:98:79:60:8a:ae:2f:b3:ee:
7e:98:3d:7b:5e:50:82:34:bf:e3:ea:f4:4c:af:62:6a:c4:f7:
7f:11:22:7d:80:db:19:22:f9:a0:85:9b:10:30:f2:56:fe:43:
df:e9:9c:af:45:7c:22:50:fe:c3:99:f9:e7:b2:3a:da:48:92:
08:36:1f:84:68:00:90:74:3d:db:a8:75:93:c0:13:ab:77:22:
3a:4a:c9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org