Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/oWz___I6wFkfi3qRbOtv1Mm6hQQ.roa
File: oWz___I6wFkfi3qRbOtv1Mm6hQQ.roa (raw, json)
Hash identifier: G/F6wA3JrciHaLwpL5HDkRSWQ3nhxg2j6DA2coccPHg=
Subject key identifier: A1:6C:FF:FF:F2:3A:C0:59:1F:8B:7A:91:6C:EB:6F:D4:C9:BA:85:04
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018570B075A4153FBC20A35942098E0BFF50
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/oWz___I6wFkfi3qRbOtv1Mm6hQQ.roa
Signing time: Mon 02 Jan 2023 04:14:50 +0000
ROA not before: Mon 02 Jan 2023 04:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61391
IP address blocks: 62.60.197.0/24 maxlen: 24
62.60.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:75:a4:15:3f:bc:20:a3:59:42:09:8e:0b:ff:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 04:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a16cfffff23ac0591f8b7a916ceb6fd4c9ba8504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bd:e3:4e:25:bd:58:a8:21:51:6e:61:48:f5:
05:f3:73:c1:09:ce:8b:b8:b1:b8:81:c6:2a:1e:c1:
89:ca:44:cf:4d:93:53:69:1f:89:5d:4d:d2:e4:3a:
f0:f1:88:3c:2a:84:a9:80:aa:6d:61:5b:18:3d:d4:
66:da:08:91:83:80:a5:03:06:95:88:25:0e:93:2f:
01:be:5f:dd:19:93:fb:a7:90:6a:70:da:51:d4:45:
3c:3f:a6:22:c4:d7:be:ee:ae:45:e8:7a:64:72:b2:
e1:1f:cb:b4:a5:d9:4c:e6:6e:e7:48:12:bf:fd:8a:
3e:82:95:d8:51:c9:e6:49:cb:c5:51:d6:ed:05:7f:
fe:ac:2c:1f:3d:ca:d3:0e:5e:61:32:18:3f:ad:dd:
80:95:53:29:64:d9:27:d5:82:47:b9:65:f9:d8:b3:
e2:a6:ae:08:ec:22:f3:9c:0d:e8:92:ff:d1:17:19:
fd:b7:d8:ae:05:ca:14:cb:9c:cb:e4:6a:92:76:13:
e6:b4:b4:41:b5:0e:6c:dc:f7:ed:2f:2a:fb:36:b3:
25:28:70:9d:88:1e:83:c8:59:7a:1b:51:c7:ac:57:
40:8b:18:18:19:c1:57:e3:f1:f6:db:2d:19:d8:a6:
00:b3:32:58:34:2b:8f:1e:61:97:d8:b8:20:2b:81:
5e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6C:FF:FF:F2:3A:C0:59:1F:8B:7A:91:6C:EB:6F:D4:C9:BA:85:04
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/oWz___I6wFkfi3qRbOtv1Mm6hQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.196.0/23
Signature Algorithm: sha256WithRSAEncryption
53:2e:7f:25:58:f6:50:29:35:d4:a4:b5:d5:df:14:2d:79:6d:
45:27:19:4a:f9:ae:65:16:b2:8a:f7:a0:a4:4c:22:7a:4f:94:
d9:7a:e1:2b:04:00:15:bc:b4:ef:20:29:a5:c4:a9:d0:6e:60:
5a:46:25:8d:c4:ee:7e:67:1c:a9:b0:79:dc:4a:89:71:04:0b:
e3:bf:43:26:2a:75:16:15:de:79:99:3e:c7:5a:d1:cc:8a:75:
9a:3c:09:5a:5b:8d:e4:e5:bf:b3:0e:c0:e5:df:da:b9:a2:cd:
c1:e4:18:69:96:86:b1:ed:cc:31:8d:f0:0c:5b:dd:c4:5f:f4:
2c:b1:f5:e9:9c:12:74:bd:35:a7:17:ab:4b:b6:18:97:68:83:
f4:76:c6:ea:fb:ad:48:c0:72:11:c9:f8:26:fd:d4:b3:5e:4e:
c1:7b:ba:0a:a4:c2:53:2d:1c:39:e5:d4:3c:13:a2:c7:32:e0:
b4:7a:79:41:8b:b9:4e:8d:7f:27:e7:ea:77:e6:f7:a1:73:db:
e5:76:57:63:28:34:6a:30:8a:ae:30:ce:77:6d:37:d5:00:88:
67:88:cd:f4:92:1d:75:29:d5:37:d1:70:48:70:88:57:97:fb:
52:31:a5:00:ce:a8:12:f1:a4:46:42:19:d7:ef:fa:9e:10:56:
a4:02:f9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:35 2023 by rpki-client on console-fra.rpki-client.org