Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/pY9J86PNlT805SvgjdEj_0yNSeM.roa
File: pY9J86PNlT805SvgjdEj_0yNSeM.roa (raw, json)
Hash identifier: gsCX6wiKHqDsVoSi5sKI9TVHMOoam0cQCcWuze4pWyA=
Subject key identifier: A5:8F:49:F3:A3:CD:95:3F:34:E5:2B:E0:8D:D1:23:FF:4C:8D:49:E3
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01916ECEF57A819DF7CF087AC11B13A80BB3
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/pY9J86PNlT805SvgjdEj_0yNSeM.roa
Signing time: Tue 20 Aug 2024 08:02:22 +0000
ROA not before: Tue 20 Aug 2024 08:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15611
IP address blocks: 62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.225.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
213.176.96.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
2001:790::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Sep 2024 20:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6e:ce:f5:7a:81:9d:f7:cf:08:7a:c1:1b:13:a8:0b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 20 08:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a58f49f3a3cd953f34e52be08dd123ff4c8d49e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ed:e1:fc:98:63:58:62:eb:74:df:57:6a:b6:
d3:24:f8:3d:97:f1:17:3e:bb:4b:ae:9b:2c:d9:2e:
90:7c:fb:d6:79:4a:f6:26:66:0a:b9:6e:0e:74:30:
27:0a:cf:b6:49:4c:c3:1d:ac:9c:b1:0f:86:a0:46:
81:25:26:69:fc:45:b0:8f:fb:fb:f7:c2:9a:ae:25:
b2:b1:7c:1c:f5:e1:33:fb:66:f6:db:61:cf:01:97:
b9:da:2a:e0:ed:60:31:30:cb:17:c6:ca:17:b1:66:
7a:97:3d:e6:c3:5a:58:c1:d2:fd:a1:f7:fb:fd:b3:
ba:bf:72:bc:ae:4a:33:c0:58:7f:4d:ff:88:93:ab:
bf:cd:c2:a4:5c:50:59:76:88:68:fb:30:c0:45:31:
57:6c:5e:eb:1f:6b:bb:6b:5a:3d:c5:f1:e3:8f:3a:
57:d1:f5:12:2e:8a:1e:a5:b7:d6:0d:fc:39:09:8b:
32:aa:54:5a:27:d7:6f:75:4d:67:01:1f:10:88:23:
52:22:f4:a2:ab:fe:99:6d:f6:db:b8:b4:b1:1a:71:
ab:a4:a2:53:ea:6f:44:92:25:8a:b1:72:07:7a:11:
9b:2a:2c:03:11:30:ad:ec:fc:72:e3:b6:c9:0d:ab:
6d:e8:e5:41:1d:c1:63:3d:43:91:0c:f6:03:74:c1:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8F:49:F3:A3:CD:95:3F:34:E5:2B:E0:8D:D1:23:FF:4C:8D:49:E3
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/pY9J86PNlT805SvgjdEj_0yNSeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.140.255
62.60.142.0/24
62.60.145.0/24
62.60.168.0/21
62.60.225.0/24
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
IPv6:
2001:790::/32
Signature Algorithm: sha256WithRSAEncryption
7c:d7:7f:6a:72:8f:cf:dc:f5:49:12:02:58:14:10:0e:19:5f:
ad:5d:74:eb:70:74:5a:b0:8c:46:27:6a:ae:f2:aa:e6:d7:7a:
f8:d8:a9:a0:9f:55:60:f6:e1:a1:65:ec:bf:c9:b2:5d:02:f2:
04:e5:bc:67:46:1e:ee:0f:6d:a2:55:33:27:4c:60:92:44:90:
46:cc:8e:ad:4d:74:25:d8:83:8c:7f:8a:cf:a7:63:14:21:84:
17:54:ac:9d:e3:b7:bd:cb:06:e7:6b:e5:67:93:55:77:a7:44:
69:1d:fc:b0:72:67:f6:58:bd:10:85:38:99:b4:6e:46:9c:81:
8b:24:05:d9:71:be:c6:b5:9c:f6:f0:02:39:4a:c0:b3:e5:b7:
50:b0:c1:65:2b:c5:7e:6a:06:3b:7f:de:ca:4b:6f:74:70:7b:
0d:9c:55:fd:af:96:95:70:70:fb:dc:62:3a:3a:e4:7c:d2:45:
39:81:13:3e:c0:55:60:68:26:a9:da:0f:e8:1d:7d:eb:37:94:
21:67:2c:91:0f:f3:41:4e:99:31:8e:a2:23:06:be:19:7c:1d:
2b:07:0b:2a:ae:99:0a:5b:94:6b:ba:43:d1:d2:af:60:3a:b4:
12:4b:e1:13:1e:bf:d5:44:ed:44:0d:82:de:1c:19:a6:f4:33:
c5:24:ef:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 22:11:24 2024 by rpki-client on console-fra.rpki-client.org