Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/lFL_Nki_NJISC7MvtsjzoOSqTQw.roa
File: lFL_Nki_NJISC7MvtsjzoOSqTQw.roa (raw, json)
Hash identifier: K1cYh3Xa1JkrMIY6u1g4cFnLx+yAyY7lClFXJqXkiN8=
Subject key identifier: 94:52:FF:36:48:BF:34:92:12:0B:B3:2F:B6:C8:F3:A0:E4:AA:4D:0C
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0188B3C3094A66C377E21875236406D1E2DA
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/lFL_Nki_NJISC7MvtsjzoOSqTQw.roa
Signing time: Tue 13 Jun 2023 07:58:03 +0000
ROA not before: Tue 13 Jun 2023 07:58:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48147
IP address blocks: 62.60.162.0/24 maxlen: 24
213.176.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:c3:09:4a:66:c3:77:e2:18:75:23:64:06:d1:e2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 13 07:58:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9452ff3648bf3492120bb32fb6c8f3a0e4aa4d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:c7:cb:29:c3:e5:90:82:6e:5b:93:93:94:
13:e9:1e:5f:51:bb:e9:1d:1d:b0:87:3f:c9:67:2d:
be:7d:4c:24:e4:99:d1:96:48:93:4d:01:57:10:fd:
31:a2:42:ce:cc:72:ee:d2:23:92:d7:76:22:f5:2e:
5b:47:d1:2c:5a:94:59:d6:1c:f4:c3:7c:a9:4e:d4:
db:9b:eb:1f:6b:d2:51:10:43:f9:fb:c8:22:9b:13:
ff:0d:c4:57:bd:bd:b8:ee:5f:19:10:c1:b9:30:f0:
63:d4:7c:a8:8a:8c:c3:c0:45:6a:03:37:03:e0:e7:
1c:89:2d:bd:97:30:22:b1:8e:f4:cc:8c:dc:43:51:
9f:81:9b:0b:49:5a:0c:c8:8e:81:2e:84:25:e3:fc:
ab:8b:48:3f:45:d9:b6:71:07:d2:03:9c:70:52:8c:
e4:c0:23:6a:1a:80:07:50:99:82:8b:6e:62:42:12:
c5:94:ae:e8:16:bc:18:2e:62:23:40:d1:50:7b:05:
41:ea:1e:d9:27:63:62:ce:01:17:17:54:a6:8b:54:
cd:16:2d:cd:7e:b7:db:53:49:09:5c:9a:97:e1:e3:
67:46:a7:51:2f:ad:0f:03:11:13:b7:f9:b5:de:8b:
77:33:64:9f:51:cf:ef:fa:a3:f0:9e:28:d7:5e:ff:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:52:FF:36:48:BF:34:92:12:0B:B3:2F:B6:C8:F3:A0:E4:AA:4D:0C
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/lFL_Nki_NJISC7MvtsjzoOSqTQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.162.0/24
213.176.1.0/24
Signature Algorithm: sha256WithRSAEncryption
85:50:55:6f:8d:7c:91:b1:f7:ec:b0:95:d7:f3:8d:64:74:76:
6a:68:42:42:f5:28:f5:07:21:a3:eb:f9:cb:ad:6e:37:c3:13:
b4:4c:7c:b7:a8:83:69:6a:41:2d:3f:2e:97:f7:3d:7f:01:72:
1d:ec:55:fc:cc:04:3c:ff:b4:b0:f4:72:d8:59:18:87:2a:2b:
0e:91:8a:f5:40:b2:01:f9:99:71:05:6f:ac:ff:ae:16:27:ee:
99:c2:38:2b:d1:7a:ad:08:68:e9:09:3b:07:94:ce:02:e5:f1:
d5:80:7d:3a:a2:f8:60:03:3c:9a:b2:66:82:f7:90:00:0c:ee:
4d:47:90:f4:32:1c:ac:4a:22:a3:86:5e:82:09:75:51:d2:b0:
a5:a1:ed:c4:4c:5d:01:3c:58:02:fc:ca:64:16:65:0b:cf:5d:
16:81:b3:b8:40:14:06:42:41:22:fc:9f:e0:96:5a:8f:c0:07:
19:50:2e:e4:f7:7a:b6:78:f6:e1:ee:3b:af:d0:b9:b3:08:16:
f8:45:28:3e:ac:a4:19:43:ac:bf:99:7a:94:34:a8:80:54:04:
51:54:88:c1:e2:5c:98:03:9f:c4:6d:98:8e:d3:a2:08:32:dc:
7d:35:e8:c8:31:25:ad:7a:90:a6:4f:64:05:5d:ab:7d:a1:0d:
ed:da:72:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org