Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qDe4n4zHe9FhIE0xd2xJcfrhVio.roa
File: qDe4n4zHe9FhIE0xd2xJcfrhVio.roa (raw, json)
Hash identifier: XaRShOOyiryo+xxtARF+TTqL8j2KZ7CWshL1m28mM2o=
Subject key identifier: A8:37:B8:9F:8C:C7:7B:D1:61:20:4D:31:77:6C:49:71:FA:E1:56:2A
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01922AE11C3C74DA76335699A72F119603A9
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qDe4n4zHe9FhIE0xd2xJcfrhVio.roa
Signing time: Wed 25 Sep 2024 20:30:48 +0000
ROA not before: Wed 25 Sep 2024 20:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 62.60.224.0/24 maxlen: 24
62.60.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 11:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2a:e1:1c:3c:74:da:76:33:56:99:a7:2f:11:96:03:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 25 20:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a837b89f8cc77bd161204d31776c4971fae1562a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:73:4a:0b:0e:e2:cf:d7:2e:a8:27:bd:6c:03:
46:56:41:81:03:c4:c9:04:d8:52:45:a4:d6:6b:c1:
74:57:85:98:75:76:36:3b:d4:17:48:a8:96:c9:9b:
3b:f8:85:14:49:5e:32:c8:33:73:80:0d:1e:ac:57:
36:fe:2b:4c:23:a7:03:9b:0b:38:a7:39:bb:f4:3e:
4f:37:dd:0a:00:db:09:d7:18:a4:f0:0e:d3:d5:e3:
35:01:00:1c:99:38:a3:32:bf:b7:07:50:61:8f:9b:
bd:56:a0:78:2f:f6:0a:0c:b2:87:94:e4:8d:91:36:
50:f9:ef:5e:00:e0:08:d1:75:b8:7b:84:23:39:ac:
59:60:9e:db:65:03:24:ba:be:59:6d:96:2c:22:16:
11:cd:8c:70:6d:cb:42:c2:94:34:a0:9f:c8:23:c4:
2a:78:15:55:52:0e:0c:23:61:94:5b:40:fd:31:e7:
28:ef:d2:c6:76:98:b0:3f:48:a6:68:90:24:c0:b0:
e2:30:b9:6a:80:6e:ca:aa:4d:29:52:a3:1d:c9:fe:
1e:7c:ac:8d:0a:3d:b2:96:e0:2d:e4:de:a6:8d:2e:
df:cd:f9:b6:d5:e5:e5:af:e7:db:9b:7e:72:30:3b:
b5:b8:c3:9f:6e:5a:25:4a:a5:d0:c9:e3:aa:49:4f:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:37:B8:9F:8C:C7:7B:D1:61:20:4D:31:77:6C:49:71:FA:E1:56:2A
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qDe4n4zHe9FhIE0xd2xJcfrhVio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.224.0/23
Signature Algorithm: sha256WithRSAEncryption
80:df:dd:bb:23:c4:f7:69:bf:cb:03:27:95:a0:e2:36:f6:e8:
f0:f4:bf:9a:6a:d5:d2:f1:a5:b8:36:4f:30:8a:9e:56:b6:f8:
9b:0d:fe:09:c7:5a:a3:9f:9c:f3:d9:25:c2:79:a5:43:b6:67:
5c:e3:23:7a:47:76:33:6b:e7:80:a6:f9:6f:83:13:65:2f:73:
38:ca:7a:e0:ac:7e:62:cd:83:a6:48:0d:d5:bc:aa:b9:85:63:
36:6b:e1:99:4f:27:16:f9:fb:00:d6:ff:61:16:49:d1:09:52:
d9:1e:2a:53:77:e0:b4:80:65:a2:d8:88:f4:58:91:87:ef:ad:
40:99:06:79:50:a7:49:49:ec:9f:30:e9:a2:5e:2a:76:0c:5c:
61:64:64:f0:c1:6a:fd:37:c0:94:cc:31:4e:cb:71:3e:fd:ad:
90:4f:db:9a:ef:8c:63:af:ed:8d:a6:3b:47:a1:3b:f4:82:a1:
73:ea:e1:2e:6c:93:df:36:e8:5c:37:ea:37:c5:63:5a:45:dd:
c7:cc:df:bd:e3:2f:37:55:85:ae:6e:15:88:3e:27:f2:b9:53:
6e:f9:fd:1a:e3:e1:42:a5:c1:3c:40:18:ee:fd:3f:20:f9:0b:
ad:69:16:91:9a:10:22:a7:6e:36:af:a7:fc:1b:86:fa:39:77:
b1:56:41:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 12:34:48 2024 by rpki-client on console-ams.rpki-client.org