Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/lFenl1EAmLDL6hJeDrCtAkmw4ZE.roa
File: lFenl1EAmLDL6hJeDrCtAkmw4ZE.roa (raw, json)
Hash identifier: q8eETZhgqPG8Yd4WmegmPkk0MdWBNk+JnfsqZuH20aU=
Subject key identifier: 94:57:A7:97:51:00:98:B0:CB:EA:12:5E:0E:B0:AD:02:49:B0:E1:91
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0190BF741781A6FA9ED7729743C206FBFBB2
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/lFenl1EAmLDL6hJeDrCtAkmw4ZE.roa
Signing time: Wed 17 Jul 2024 06:49:34 +0000
ROA not before: Wed 17 Jul 2024 06:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 62.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 10:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bf:74:17:81:a6:fa:9e:d7:72:97:43:c2:06:fb:fb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 17 06:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9457a797510098b0cbea125e0eb0ad0249b0e191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:22:e6:81:e9:f9:02:20:98:89:a6:5c:e9:5e:
74:c7:07:01:fe:a7:44:e2:51:c6:33:48:1c:f8:55:
78:97:5a:75:c3:b6:08:52:09:85:a7:23:99:12:66:
c7:b4:23:38:1e:40:97:c7:56:03:f4:cf:5d:95:dd:
30:98:67:09:a4:42:49:6a:eb:d9:e0:32:f0:c6:82:
9f:d9:08:58:86:2e:56:fc:bd:a6:82:ed:34:09:14:
83:9c:07:3f:ec:17:b5:e9:99:92:45:f8:1a:69:07:
ee:00:62:9d:31:1f:0c:65:6c:a5:ae:04:14:89:90:
f3:ba:5e:98:0d:7f:01:46:1d:91:cf:81:ee:f9:78:
91:fa:91:8d:70:9f:6a:be:dc:6b:31:73:93:78:ba:
de:22:9e:58:15:7a:35:13:e1:16:1e:7a:cf:e7:08:
2e:c7:d9:85:fe:4b:53:72:99:06:55:3a:c1:c0:9e:
6b:07:38:db:b4:ed:b8:9d:99:c1:bb:39:81:53:0c:
48:04:51:9a:ed:c8:a5:82:c2:9d:17:73:ca:c2:88:
ba:9d:cb:9c:11:07:a5:0f:2a:9c:62:11:bc:b2:a8:
b3:4b:c9:5d:7a:68:e1:d2:d0:ce:da:37:6b:d9:22:
2c:be:2e:21:19:46:a3:37:62:cb:cb:b6:8b:00:eb:
f1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:57:A7:97:51:00:98:B0:CB:EA:12:5E:0E:B0:AD:02:49:B0:E1:91
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/lFenl1EAmLDL6hJeDrCtAkmw4ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.192.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:45:b1:e5:07:03:37:93:30:93:d4:53:0d:be:cf:c3:49:a6:
36:68:e4:be:17:6f:26:73:49:ff:18:8e:2d:be:45:70:90:f6:
04:82:a8:0e:48:da:96:35:0a:bf:c8:47:1b:05:0a:cf:6c:a6:
e8:41:42:2f:92:8d:a2:91:28:69:86:da:23:b1:9a:6f:7d:2d:
c4:e9:81:9c:2f:81:bc:9d:34:7e:5e:b7:b4:99:3d:f7:7c:57:
a2:70:c6:cc:1a:3a:0b:9f:eb:c6:39:e9:5b:9c:64:73:1d:b9:
4d:b7:ab:0e:ee:6e:a8:11:ae:c1:ba:4c:9c:33:1b:c0:11:aa:
a8:5e:f8:ef:75:10:77:e0:d0:de:9c:91:a7:01:04:64:e7:2d:
1b:52:0e:58:ac:05:3f:84:29:c5:c9:c9:51:af:ac:89:90:01:
14:02:12:2b:04:18:4c:a6:16:ca:10:4b:5c:57:67:2f:fb:8b:
46:df:14:bf:ab:67:d2:35:8f:03:63:42:87:41:56:39:cb:9e:
06:8a:6e:de:5e:f5:03:91:4b:b3:6c:e9:ca:60:6d:e2:4b:c3:
4c:4f:4e:a6:dd:10:68:40:1d:cf:d2:0b:0f:c7:fe:1a:98:88:
dc:83:c2:4a:d4:a4:9e:59:73:76:b0:06:11:63:d4:c8:6a:cb:
b4:f5:dc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 12:39:08 2024 by rpki-client on console-fra.rpki-client.org