Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/sjTRpdfjS9ePfSOaY3MeTZEfUBU.roa
File: sjTRpdfjS9ePfSOaY3MeTZEfUBU.roa (raw, json)
Hash identifier: arJRLyAUVlWIbiZYb0ThzHiTISpFzEXqOeOxpgobb0A=
Subject key identifier: B2:34:D1:A5:D7:E3:4B:D7:8F:7D:23:9A:63:73:1E:4D:91:1F:50:15
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0191643AD3FEC012AA740A9A09D59CD841D9
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/sjTRpdfjS9ePfSOaY3MeTZEfUBU.roa
Signing time: Sun 18 Aug 2024 06:44:22 +0000
ROA not before: Sun 18 Aug 2024 06:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 62.60.162.0/24 maxlen: 24
62.60.221.0/24 maxlen: 24
62.60.222.0/23 maxlen: 24
213.176.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Aug 2024 07:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:64:3a:d3:fe:c0:12:aa:74:0a:9a:09:d5:9c:d8:41:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 18 06:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b234d1a5d7e34bd78f7d239a63731e4d911f5015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:c8:28:20:15:34:7b:16:cb:19:4a:d9:ad:
03:91:42:81:ac:5a:37:45:64:85:78:0f:65:31:27:
6e:fc:52:3f:18:fb:df:0c:ae:79:4c:4f:ad:90:c7:
22:93:7d:b3:9b:d5:ba:61:44:cb:85:f4:d0:9b:96:
f1:16:f9:00:18:a5:ee:03:df:32:40:c4:10:d6:d1:
80:7f:34:30:50:f8:3d:36:4a:ff:81:e2:d1:64:fd:
9c:6b:f3:f7:a5:24:4c:02:86:31:2a:19:35:f4:43:
e1:1e:c1:c2:40:98:2f:9a:9f:ca:85:78:07:36:16:
51:59:14:cd:b0:20:8c:f4:c2:28:8b:05:a8:27:5c:
28:db:41:65:78:54:ac:d7:26:e5:76:89:a8:f0:c4:
4a:c5:93:fb:f2:6e:cb:f1:54:fa:e2:98:6c:81:40:
c0:77:5e:03:39:3c:08:de:85:88:30:41:71:00:1b:
bf:32:b5:a9:a6:05:d2:57:7a:f3:c7:c9:87:c2:8f:
61:18:ba:f7:ee:03:72:5c:75:cb:85:67:b5:9f:77:
3b:0e:3b:3b:43:1a:43:ab:c9:e4:6b:90:f4:32:c0:
83:7c:b1:fc:64:58:66:78:be:46:23:ec:be:62:5c:
c0:24:02:4d:1b:65:fd:40:5f:b8:69:25:3d:8d:f2:
47:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:34:D1:A5:D7:E3:4B:D7:8F:7D:23:9A:63:73:1E:4D:91:1F:50:15
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/sjTRpdfjS9ePfSOaY3MeTZEfUBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.162.0/24
62.60.221.0-62.60.223.255
213.176.1.0/24
Signature Algorithm: sha256WithRSAEncryption
18:f2:e1:6e:8e:20:f5:24:7c:47:9c:05:bd:c1:46:14:59:23:
fb:e8:ca:b5:f8:b4:d0:0c:9c:af:54:fb:57:ab:21:b6:b2:0b:
89:c0:bb:39:97:4b:c1:3d:25:69:23:3a:08:ad:16:c0:70:5f:
e6:e2:5b:a8:e8:4f:b4:4f:01:a3:d8:ab:89:13:6d:d2:6e:a9:
99:84:1c:a9:45:60:22:f4:f2:00:7b:ee:7e:88:f4:59:52:bb:
ce:e5:20:8d:91:1e:e8:33:14:2a:5f:c5:a2:27:37:61:b2:aa:
f5:f8:8a:a1:93:43:6f:f3:24:85:ba:28:75:7a:b5:21:c0:df:
c4:89:d0:22:62:74:e3:75:e9:39:46:f4:65:7f:94:a5:7d:5d:
86:b9:15:7f:6f:fe:5f:3d:25:04:00:24:7b:9c:f9:f3:33:fa:
0f:13:8f:31:68:06:57:9a:e1:29:b4:94:1f:26:fd:26:74:65:
d1:6c:0a:22:43:e7:f3:7f:62:a2:01:95:b3:e5:af:11:da:f0:
c7:0c:d0:c7:92:64:88:61:8e:9f:d1:5b:97:a6:f4:71:87:e0:
9b:2f:50:c3:ae:87:15:6d:6d:be:ab:20:c2:7f:50:fa:d3:ae:
7f:60:70:0b:8f:8b:f6:2f:69:6d:91:06:28:cd:4b:d4:92:4a:
56:ce:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 18 09:58:22 2024 by rpki-client on console-fra.rpki-client.org