Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/sTqvrq6XQgF55XhUBt_yiMH8ljE.roa
File: sTqvrq6XQgF55XhUBt_yiMH8ljE.roa (raw, json)
Hash identifier: 3Ger7+cs/BXeW1pTtUleQ6K3PTq5HiXuEyJFCWQ7ZSQ=
Subject key identifier: B1:3A:AF:AE:AE:97:42:01:79:E5:78:54:06:DF:F2:88:C1:FC:96:31
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01859BDE62104A83E108137FC7B089041E77
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/sTqvrq6XQgF55XhUBt_yiMH8ljE.roa
Signing time: Tue 10 Jan 2023 13:28:40 +0000
ROA not before: Tue 10 Jan 2023 13:28:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 62.60.164.0/22 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.172.0/22 maxlen: 24
62.60.176.0/22 maxlen: 24
62.60.180.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.188.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jan 2023 08:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:de:62:10:4a:83:e1:08:13:7f:c7:b0:89:04:1e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 10 13:28:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b13aafaeae97420179e5785406dff288c1fc9631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:65:f7:1f:ab:26:f2:7d:bd:6f:1e:d1:1d:
85:ce:62:e5:09:cd:b5:9c:8e:b5:41:75:39:00:3e:
ab:8c:e1:8f:ac:cc:35:f2:70:a2:28:a7:61:f8:81:
3c:3e:82:60:b6:3b:bb:5a:eb:61:24:99:70:6f:16:
93:24:21:3d:8b:be:b2:f2:27:4e:bb:de:13:ef:de:
b0:2e:e9:e2:5a:67:34:57:28:05:47:47:35:09:14:
f6:d8:ac:4d:63:9e:44:29:8e:c4:11:8c:d9:ed:7d:
65:29:f7:9c:29:28:21:c9:87:83:2c:d2:7a:8b:50:
6b:bb:cd:77:6f:d9:36:ad:22:3c:7e:95:95:a3:bd:
d7:7a:31:d7:e6:d8:86:04:3b:0a:b8:a5:dd:67:22:
03:df:6c:a2:50:3e:fb:5f:03:04:b1:ef:40:bb:b8:
ca:4a:f8:d3:7d:6e:ff:92:34:93:7d:8e:c0:f7:61:
bd:8c:87:d0:7a:a7:68:92:de:a6:96:94:b4:21:36:
2d:35:61:b5:56:e8:38:2c:cf:98:42:0b:36:9a:eb:
f1:56:c7:5f:3e:26:09:1f:17:af:e2:b4:dd:8b:d8:
08:6f:4c:5b:69:07:f0:72:78:51:44:44:4c:67:8a:
ea:68:df:be:08:33:ee:53:97:59:17:70:af:a1:8c:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3A:AF:AE:AE:97:42:01:79:E5:78:54:06:DF:F2:88:C1:FC:96:31
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/sTqvrq6XQgF55XhUBt_yiMH8ljE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.164.0-62.60.195.255
62.60.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:27:59:a1:8c:13:60:89:ab:47:45:75:bc:7e:3e:35:2a:8a:
36:b5:ee:ad:8c:8b:10:de:28:57:0e:bd:91:5a:14:ad:3e:47:
36:77:5c:bd:e3:02:a6:03:59:71:14:33:1e:9d:83:05:90:4d:
df:7f:f4:a9:00:f3:f7:e5:27:2c:a6:6a:46:e9:c7:b3:d6:0a:
0e:ca:52:0e:27:19:5d:82:eb:87:94:30:94:68:6d:bb:73:5e:
06:e6:23:4c:e7:70:54:00:d1:22:a1:b4:6e:bc:6c:ad:a7:a7:
92:4e:36:f8:59:82:f5:52:b4:ee:ab:91:21:32:3b:91:64:fb:
2c:22:08:9b:ae:89:d1:c1:c6:a6:c1:87:e8:43:22:cd:48:41:
8b:a2:e8:1c:0c:13:36:5a:b2:ea:28:bb:d2:2d:98:ce:7d:d7:
86:95:8e:9b:5e:55:a9:0d:60:3d:f7:12:3a:b0:bd:4f:58:b3:
a0:09:af:fa:8f:4a:08:73:0e:af:3b:a4:fc:0f:a6:67:4d:dd:
41:da:4d:87:c2:8d:c4:d8:88:a0:3f:90:b3:73:16:72:b5:2a:
cb:78:86:20:2d:91:02:ec:7d:46:b3:9f:e9:51:85:56:99:6f:
9d:ed:02:a7:84:97:12:aa:40:fb:83:28:dc:4f:8c:1c:ab:f7:
68:19:40:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org