Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/nsUo0rOQn6Kq7kHUsL4_wk5asVM.roa
File: nsUo0rOQn6Kq7kHUsL4_wk5asVM.roa (raw, json)
Hash identifier: kMfb6FSE23t/6hkY47m5tJPsiEPr6NSzUsshB9kFZZU=
Subject key identifier: 9E:C5:28:D2:B3:90:9F:A2:AA:EE:41:D4:B0:BE:3F:C2:4E:5A:B1:53
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0186F07CA9ED2EE6528E7C23297B50DE040A
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/nsUo0rOQn6Kq7kHUsL4_wk5asVM.roa
Signing time: Fri 17 Mar 2023 16:52:27 +0000
ROA not before: Fri 17 Mar 2023 16:52:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53356
IP address blocks: 62.60.164.0/22 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.176.0/22 maxlen: 24
62.60.180.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.188.0/22 maxlen: 24
62.60.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f0:7c:a9:ed:2e:e6:52:8e:7c:23:29:7b:50:de:04:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Mar 17 16:52:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ec528d2b3909fa2aaee41d4b0be3fc24e5ab153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:18:f6:30:a5:2c:d4:eb:1f:9a:fa:bf:9d:35:
a4:ef:bc:34:43:84:d8:f6:9b:29:5e:b6:f8:18:db:
0b:13:37:9a:fd:42:c6:53:72:9d:7d:6b:75:f7:4c:
c9:86:45:56:26:e5:61:cb:15:90:47:1d:e6:38:d7:
46:77:d0:f2:57:d5:da:ba:b8:ae:35:9b:d1:2b:f7:
f0:89:be:a6:9c:ce:d4:e4:bd:0e:8a:ba:dd:0e:90:
e0:c2:72:0b:eb:27:b7:fc:43:43:df:30:ec:9d:78:
e0:69:b0:94:86:88:c3:ab:38:4d:83:32:8e:9a:fc:
e7:21:dd:7b:a4:fd:51:d8:7f:83:57:33:11:a5:02:
37:23:a3:2b:88:e1:ae:16:89:79:34:4f:1d:ec:72:
85:f3:0d:9f:fd:07:4d:b5:d5:18:75:20:82:2c:2c:
97:c0:37:5e:da:02:04:c5:6a:88:a6:0e:76:20:35:
4a:51:53:c0:b3:68:4d:ab:d8:50:6a:ed:f4:89:c7:
b6:54:08:11:b9:93:57:78:70:96:3f:08:ab:79:c6:
e5:14:0d:e1:0b:42:3a:ae:17:91:ef:d7:9d:52:65:
c6:01:a6:c4:2c:10:30:a8:b1:c5:99:03:e7:62:c2:
a3:76:68:87:45:52:ea:df:bf:44:0f:e0:1c:15:e2:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C5:28:D2:B3:90:9F:A2:AA:EE:41:D4:B0:BE:3F:C2:4E:5A:B1:53
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/nsUo0rOQn6Kq7kHUsL4_wk5asVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.164.0-62.60.196.255
Signature Algorithm: sha256WithRSAEncryption
c4:3d:0f:a4:bb:4e:ea:38:40:ba:ba:74:03:72:f3:f3:3b:27:
af:b5:82:42:80:e6:6c:8f:ac:d7:19:79:97:0d:10:4b:59:1f:
34:69:bd:d8:bf:12:5b:ab:3e:b9:c5:95:cc:8f:6f:dc:4f:3f:
e1:92:61:96:31:e7:69:2d:a5:f8:43:ab:7f:a5:04:01:c1:cd:
46:44:4b:5d:0a:ea:34:e7:56:61:5c:1a:22:e7:17:90:bb:4e:
fe:97:e9:20:09:e2:59:aa:4f:9a:66:72:ef:63:83:e5:cb:c7:
ca:c1:3c:2f:12:de:77:f4:e7:b5:d9:76:9f:d1:95:13:86:85:
09:b1:11:1d:71:2e:5a:1d:b5:59:ef:0d:56:40:05:fb:4a:99:
6f:7b:78:51:44:50:f4:0e:35:c6:87:75:65:03:1f:ff:1d:41:
16:5f:c3:42:55:ea:98:3c:97:24:af:36:d4:2e:aa:79:24:05:
09:4d:7d:bb:20:8d:2a:be:5b:b4:fb:3e:5c:cd:f7:49:30:61:
2e:ee:26:ea:33:95:9c:f9:48:a1:0b:79:05:9a:2b:14:cd:36:
5a:92:67:cd:44:3a:49:09:39:71:cd:6e:d3:c1:be:72:be:5a:
13:1c:95:fa:7d:14:db:3e:f0:8b:b1:69:fe:d5:f4:1f:7c:02:
5b:3d:20:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:35 2023 by rpki-client on console-fra.rpki-client.org