Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/pVDwEno4GyNVRrI3GpWh5YhynjQ.roa
File: pVDwEno4GyNVRrI3GpWh5YhynjQ.roa (raw, json)
Hash identifier: FYRWLcUcdWH+qKV6QUBxfrFzXkoGclTUAccVZTbYxIk=
Subject key identifier: A5:50:F0:12:7A:38:1B:23:55:46:B2:37:1A:95:A1:E5:88:72:9E:34
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CCA29C4C2949AEAA4C3ADD0F495E40780
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/pVDwEno4GyNVRrI3GpWh5YhynjQ.roa
Signing time: Tue 02 Jan 2024 12:33:04 +0000
ROA not before: Tue 02 Jan 2024 12:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59441
IP address blocks: 62.60.128.0/21 maxlen: 24
62.60.164.0/22 maxlen: 24
213.176.28.0/22 maxlen: 24
62.60.200.0/22 maxlen: 24
62.60.204.0/22 maxlen: 24
62.60.208.0/22 maxlen: 24
62.60.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Feb 2024 06:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c4:c2:94:9a:ea:a4:c3:ad:d0:f4:95:e4:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 12:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a550f0127a381b235546b2371a95a1e588729e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:a7:26:8e:08:0f:ac:81:9c:7e:4e:a6:2e:
f5:c7:7e:5f:24:96:f3:3f:9e:1b:3d:c6:d8:48:d6:
a8:9a:8f:0a:09:2d:81:2b:d9:e1:9b:4b:60:8f:38:
15:73:1c:52:c4:82:36:5c:f4:58:3f:8d:3e:9c:0d:
e2:39:43:28:3b:56:53:64:68:b2:51:51:37:ea:ef:
5e:1a:43:22:1b:47:b3:43:e9:a7:08:98:97:43:91:
a3:21:3c:3b:db:b7:49:9b:a2:8f:59:81:f7:41:b3:
b8:9d:dc:9d:ca:9b:21:2e:ea:b6:8f:bd:6b:1a:bb:
ad:dd:a4:b8:00:b3:c6:d3:14:fc:1a:10:cb:60:1b:
54:6c:09:e3:76:69:01:aa:d5:ef:36:aa:a8:ef:a2:
d2:0b:b8:9e:07:ea:04:c8:a5:53:a3:27:20:9d:c6:
23:e3:af:31:18:4b:44:8d:06:8f:1b:3c:8d:31:62:
8b:ff:c5:35:a2:84:9d:22:bc:fe:49:6c:58:ea:ff:
ef:a9:31:1a:33:ca:67:fe:1a:4a:c7:d3:5a:53:f3:
91:b8:b7:29:bb:99:9e:ed:e4:65:81:9a:2b:03:75:
47:e0:62:06:c7:18:dc:8d:43:0f:5a:9b:d3:13:1b:
49:90:48:b4:56:3b:b7:82:e6:de:4b:b8:7c:ec:e8:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:50:F0:12:7A:38:1B:23:55:46:B2:37:1A:95:A1:E5:88:72:9E:34
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/pVDwEno4GyNVRrI3GpWh5YhynjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0/21
62.60.164.0/22
62.60.200.0-62.60.215.255
213.176.28.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:1d:46:8e:fa:33:7e:13:d0:a8:c0:41:3d:e9:d4:91:0d:9f:
60:ce:b0:37:85:cc:e2:52:9c:24:c7:33:98:db:bf:c7:73:58:
80:3d:79:e4:dd:ac:01:bf:c6:4a:7b:73:db:62:c0:2f:e6:24:
6e:41:99:69:48:43:fa:0e:51:e0:40:bc:8b:59:21:60:91:54:
bb:68:38:54:c4:5d:93:f3:4a:62:83:97:ee:a6:09:a6:9d:f8:
eb:b0:c6:e5:32:7c:0c:ff:f2:3d:a3:9d:70:14:3b:03:b3:33:
55:b0:ee:b5:ec:49:11:18:a4:b4:c6:04:99:73:5a:94:d7:6a:
22:d9:83:d6:0e:a6:bc:5e:56:39:9e:96:59:c4:20:3a:b8:08:
b4:31:cb:67:ef:58:c3:26:41:20:b3:7c:46:0d:74:ff:43:0e:
23:11:8c:6c:d1:a9:7d:a3:3f:bb:05:e1:78:83:0e:42:dd:31:
04:76:a7:7a:f7:c6:9a:50:6d:b6:c7:96:6b:65:d2:66:ba:ad:
0a:d3:22:f3:45:b0:1e:d5:6f:d9:9d:8f:a6:75:da:96:17:a6:
66:c0:6c:7f:63:12:4d:18:03:65:80:b3:bf:f0:c7:a6:60:3d:
cd:03:55:40:39:e9:44:c4:0b:17:2a:80:17:a0:1a:fa:09:5d:
00:8f:ea:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 09:16:21 2024 by rpki-client on console-fra.rpki-client.org