Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ll_2IX9wU3MEHNzzJXHlw3EQPGE.roa
File: ll_2IX9wU3MEHNzzJXHlw3EQPGE.roa (raw, json)
Hash identifier: TSUlAl2ttFlIm8b2fQ0Sqg48R1T04oT25ZkmkGfmFjI=
Subject key identifier: 96:5F:F6:21:7F:70:53:73:04:1C:DC:F3:25:71:E5:C3:71:10:3C:61
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01916ECD69AEDEB34CC36F7B2B471079D915
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ll_2IX9wU3MEHNzzJXHlw3EQPGE.roa
Signing time: Tue 20 Aug 2024 08:00:41 +0000
ROA not before: Tue 20 Aug 2024 08:00:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215633
IP address blocks: 62.60.141.0/24 maxlen: 24
62.60.146.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 20 Aug 2024 08:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6e:cd:69:ae:de:b3:4c:c3:6f:7b:2b:47:10:79:d9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 20 08:00:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=965ff6217f705373041cdcf32571e5c371103c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:db:d2:ac:4b:c5:25:9e:d3:6a:49:31:8a:
a7:cd:f2:e8:dc:0a:96:2f:94:5f:f9:ba:bd:44:39:
b8:3d:5a:9c:3d:48:d0:b3:38:74:0d:65:dd:72:88:
05:31:a1:b2:15:9c:30:44:63:c6:38:6c:29:45:86:
51:e7:51:0c:b2:bb:2e:81:82:f9:16:c6:44:b1:54:
96:33:24:32:94:8b:57:3c:60:43:c7:fb:38:8b:b6:
b9:dc:c8:05:ec:53:d7:5a:52:df:fa:82:61:7d:7a:
69:2d:e2:dc:50:24:88:34:24:cd:a4:f5:83:12:61:
75:ca:23:c3:e8:3b:25:aa:38:c7:3f:a6:d7:64:6b:
73:e3:9c:b8:be:e5:b8:2e:60:f3:6e:d9:6f:70:59:
22:20:ca:19:e5:b2:da:9f:02:61:1c:30:26:2c:e2:
76:8a:ee:56:5e:6c:19:c9:05:d0:e0:5b:08:90:da:
c1:9f:83:e4:66:52:39:a2:a6:ec:73:d7:4e:31:0f:
aa:9d:7c:a1:ea:ae:4f:ab:46:43:f4:33:e3:f7:41:
38:8b:a8:66:6b:9f:ec:89:a9:92:a6:5b:4d:44:64:
a4:82:7c:4f:d1:44:ae:9e:42:ff:58:e1:fd:1b:52:
02:68:6e:36:45:4c:1c:ea:21:00:dd:f6:4e:6f:45:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5F:F6:21:7F:70:53:73:04:1C:DC:F3:25:71:E5:C3:71:10:3C:61
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ll_2IX9wU3MEHNzzJXHlw3EQPGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.141.0/24
62.60.146.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:5e:3d:5f:ca:29:de:b5:53:c6:8a:32:22:3c:1b:68:4c:6f:
72:39:9f:1a:d8:50:0d:4c:d9:be:1e:d1:ea:86:93:4b:9e:87:
e4:a0:91:3a:a2:5d:e3:71:a6:6f:c8:f9:69:28:bf:e1:d3:0b:
0a:95:9b:a8:d8:ae:6b:46:da:3c:f7:02:d8:35:16:5b:48:22:
8e:b1:ba:67:b0:45:30:c8:20:50:37:09:64:d4:1a:93:29:c0:
da:18:b6:f3:4d:36:48:e3:b7:c2:ee:5b:33:51:ac:f9:60:1b:
b6:eb:fa:4c:d7:ae:c6:db:7f:06:7a:ae:50:e5:f8:93:62:42:
94:1e:9d:e0:b8:8b:5d:86:11:7b:2b:86:91:2c:11:30:6b:8f:
fc:52:04:6d:a0:58:42:58:db:62:d4:aa:1a:4a:a2:c0:5c:21:
89:cf:29:36:97:7a:ac:a6:c1:ac:dd:f9:54:ba:d8:7b:67:40:
58:5b:71:ab:48:62:b3:a8:1d:f5:89:95:a2:a8:ce:fb:26:c7:
15:ec:ac:42:8a:48:25:b7:63:d9:13:11:42:e3:ac:8e:a9:8e:
3b:a1:2f:e8:6b:92:a1:4c:ff:29:6e:75:70:05:07:b3:69:f9:
6b:93:f0:45:1f:61:af:43:de:19:8e:68:3f:4c:4b:a1:f4:48:
a3:5b:77:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:35:27 2025 by rpki-client