Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/pOr_xZAh9JZV08xRRGDrvPZp-ag.roa
File: pOr_xZAh9JZV08xRRGDrvPZp-ag.roa (raw, json)
Hash identifier: n3DZL9izGlSM9y9gqAVFmp7kVPnF651u+3dZGdX6mIw=
Subject key identifier: A4:EA:FF:C5:90:21:F4:96:55:D3:CC:51:44:60:EB:BC:F6:69:F9:A8
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018FAE85EA2F8350A71B3C11B83FA6D67349
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/pOr_xZAh9JZV08xRRGDrvPZp-ag.roa
Signing time: Sat 25 May 2024 06:52:42 +0000
ROA not before: Sat 25 May 2024 06:52:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 62.60.152.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.216.0/22 maxlen: 24
62.60.224.0/19 maxlen: 24
213.176.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 May 2024 07:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ae:85:ea:2f:83:50:a7:1b:3c:11:b8:3f:a6:d6:73:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 25 06:52:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4eaffc59021f49655d3cc514460ebbcf669f9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:97:73:7a:8b:3b:4b:75:e2:be:6a:79:53:
2c:bf:78:68:19:75:e6:81:81:13:45:72:0b:bb:1a:
af:03:4a:cb:c1:06:43:fb:16:fd:87:e8:d4:0e:20:
7d:fb:83:13:ea:2d:dc:b0:d9:2c:90:c8:7a:c3:a1:
fd:f8:25:1f:aa:7f:ef:dc:bb:17:55:ef:7e:94:db:
85:7d:e6:5e:aa:c2:b1:10:ae:20:f9:8b:cf:a2:ac:
ed:6e:fe:43:d1:d0:38:07:3e:9d:1b:d5:f3:af:cb:
e9:27:2c:37:36:05:1c:81:7e:7d:65:37:38:54:f2:
62:a4:87:71:f1:0d:85:ca:66:a1:db:83:a1:77:f9:
e3:80:9a:7d:45:e9:22:f0:60:17:9f:54:3c:d6:0b:
dd:42:ea:3d:f3:60:0c:5e:84:d0:49:33:27:88:e1:
5e:7e:f2:2f:9e:46:14:91:10:a8:25:96:e2:88:bd:
4d:79:b7:97:6c:8e:7d:13:01:81:b3:75:a2:9b:42:
2d:33:52:d7:54:0e:a8:3f:e1:11:02:2d:39:19:aa:
08:1a:77:a2:6e:08:1a:62:cb:f9:b6:d3:f4:3a:4c:
95:00:d9:0e:b1:f4:ac:70:9c:2f:5f:aa:0a:ff:7b:
60:a8:71:76:65:2e:a8:88:4c:60:c4:62:00:cc:1b:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EA:FF:C5:90:21:F4:96:55:D3:CC:51:44:60:EB:BC:F6:69:F9:A8
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/pOr_xZAh9JZV08xRRGDrvPZp-ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.152.0/22
62.60.184.0/22
62.60.192.0/22
62.60.216.0/22
62.60.224.0/19
213.176.127.0/24
Signature Algorithm: sha256WithRSAEncryption
42:95:d9:28:38:8f:eb:c2:d6:23:a7:02:37:b7:ab:a1:0d:fc:
83:fe:0e:bb:fd:51:25:6a:6e:5a:71:02:20:e9:77:59:1b:37:
0f:9a:a2:8b:80:e2:f3:db:4e:94:2b:c5:54:d4:57:43:1c:1d:
53:e0:56:9b:69:98:d5:88:7e:19:32:63:27:f3:6c:13:16:0a:
a8:60:e8:27:13:31:1f:e6:b5:da:e5:ac:8c:a1:cc:00:fc:9b:
24:8f:19:e5:c2:a8:04:9f:ca:7c:5d:85:96:34:9c:27:92:aa:
d5:f5:8b:f9:81:66:79:a1:5e:42:a6:9d:f4:e0:07:48:05:cc:
4e:ed:8a:8f:35:58:08:2a:d6:9d:c0:85:fe:c9:40:26:51:62:
42:78:4e:e7:8d:a9:26:f6:0b:5f:85:55:55:8d:25:c8:22:c6:
80:25:2f:45:f0:c3:cd:05:c4:bd:a8:54:d1:4a:91:19:cc:55:
20:8d:c3:de:d2:9b:75:dc:ab:30:3a:29:45:a0:9b:7f:16:5d:
c4:8f:64:68:2a:ea:92:e6:1b:d2:0e:16:eb:6d:93:ef:f8:80:
14:f5:53:84:42:d7:6d:ab:6e:12:95:7f:55:b4:25:43:52:68:
be:0b:42:94:2c:a5:2e:78:41:ad:75:4f:0d:91:39:1f:5c:c4:
56:d5:53:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org