Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/pYJFLMsgsxBKqrnJOgqTKvNC3eg.roa
File: pYJFLMsgsxBKqrnJOgqTKvNC3eg.roa (raw, json)
Hash identifier: CD3q9oEe0JTB7Lqu3lJq1gp8bTvUO+WVKSCf3HLSQOA=
Subject key identifier: A5:82:45:2C:CB:20:B3:10:4A:AA:B9:C9:3A:0A:93:2A:F3:42:DD:E8
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CE6ED1EB292B5F4277D65FF0BE15AE73D
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/pYJFLMsgsxBKqrnJOgqTKvNC3eg.roa
Signing time: Mon 08 Jan 2024 02:35:48 +0000
ROA not before: Mon 08 Jan 2024 02:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205220
IP address blocks: 62.60.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 May 2024 18:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e6:ed:1e:b2:92:b5:f4:27:7d:65:ff:0b:e1:5a:e7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 8 02:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a582452ccb20b3104aaab9c93a0a932af342dde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:c6:db:52:4d:80:e2:e1:0b:f9:6e:f6:05:
60:1e:77:09:57:b4:4c:9c:7c:b5:1e:36:db:75:c8:
ef:b1:50:49:74:2a:6e:59:0d:bb:2b:f9:9f:91:1b:
a1:e6:ad:b3:ed:df:71:13:74:22:41:38:e5:a0:42:
1a:c4:2d:9b:e8:44:5c:7c:7a:fb:12:7e:3f:4b:27:
33:af:0d:db:93:e1:3e:fc:8f:02:89:84:db:88:f6:
f1:aa:e5:9e:3a:7c:53:f0:83:7e:a5:90:42:fa:56:
39:87:60:b8:71:24:42:d5:7f:02:e6:b8:b0:b6:a3:
67:13:1b:aa:e6:b8:75:8f:12:6a:99:0e:ab:f0:15:
d2:79:0f:36:08:ce:38:b4:ad:7e:51:86:32:e9:00:
2a:1f:1d:62:ae:18:11:3d:8e:51:90:66:81:54:6f:
e6:48:ea:1e:1c:bc:38:ac:fc:f7:f1:db:a7:de:8e:
d6:07:63:93:6e:c2:7c:12:d1:e2:53:1f:7e:f5:f2:
b8:5b:c9:21:86:3e:22:a0:5a:92:2b:97:5a:24:6a:
e0:39:1a:cf:50:4e:5c:4f:1c:45:bd:f1:67:34:1d:
db:9d:78:a6:4f:ce:c6:21:c7:5e:e4:c1:e5:15:68:
2c:5e:b0:d2:dd:de:da:d4:74:5e:98:a7:34:08:31:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:82:45:2C:CB:20:B3:10:4A:AA:B9:C9:3A:0A:93:2A:F3:42:DD:E8
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/pYJFLMsgsxBKqrnJOgqTKvNC3eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.196.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:45:18:fa:cb:75:cb:03:dc:8e:04:4b:69:c1:ae:c8:14:44:
d1:2a:59:bc:6f:f6:f4:97:4a:f1:a8:41:5b:ee:52:4a:13:a6:
b8:ec:cb:df:77:33:4d:4e:11:c8:e9:e9:3f:67:28:a3:e6:60:
ba:06:1f:be:3a:25:6d:29:d8:41:a9:b5:35:6e:05:2e:70:2f:
e0:59:21:93:03:d8:4f:60:ff:89:fc:92:f8:69:5a:79:3f:1d:
8c:a2:5f:07:35:e1:8e:a1:fc:c6:b2:96:ac:24:6e:b9:b1:b2:
52:27:64:2b:94:af:ea:77:b1:2d:5a:e5:07:7a:28:ed:5f:01:
c1:44:fd:26:f8:eb:0b:1c:56:7b:e3:43:17:ab:79:ad:93:2e:
cb:1b:47:05:67:f1:e1:3e:0c:d7:05:8d:73:82:fe:0c:27:45:
9f:e5:29:2f:16:94:88:9a:55:7a:05:9f:0d:28:5b:5d:16:95:
20:89:b0:c7:69:e0:98:a5:f7:38:8a:00:00:24:a8:0c:66:7b:
3a:be:e2:18:e3:3e:bd:36:55:ae:9e:2a:74:51:39:fa:c2:24:
68:5e:17:7c:a5:91:64:78:82:48:5b:26:66:e1:27:ee:ca:46:
84:73:9e:ad:f1:bc:fb:60:86:71:cf:62:47:65:8e:e0:ef:de:
52:3a:e4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:10:08 2024 by rpki-client on console-ams.rpki-client.org