Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/tTUgnbIffszOrm57joFfnjNp6Uc.roa
File: tTUgnbIffszOrm57joFfnjNp6Uc.roa (raw, json)
Hash identifier: FwmFy7ySJB11eEk2StsxWHdInY4lKODFEWXxj57dWow=
Subject key identifier: B5:35:20:9D:B2:1F:7E:CC:CE:AE:6E:7B:8E:81:5F:9E:33:69:E9:47
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01906327006B400CCFC6F579FF7E96014A09
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/tTUgnbIffszOrm57joFfnjNp6Uc.roa
Signing time: Sat 29 Jun 2024 08:40:18 +0000
ROA not before: Sat 29 Jun 2024 08:40:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 62.60.152.0/22 maxlen: 24
62.60.156.0/22 maxlen: 24
213.176.74.0/23 maxlen: 24
213.176.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Aug 2024 07:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:63:27:00:6b:40:0c:cf:c6:f5:79:ff:7e:96:01:4a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 29 08:40:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b535209db21f7eccceae6e7b8e815f9e3369e947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:0d:19:70:e0:d5:4a:eb:cc:d5:86:34:21:
61:71:33:3f:e1:65:01:c8:95:59:33:c0:41:46:40:
c7:de:f4:5a:2d:dd:e5:05:5d:e0:66:a7:7c:9a:a5:
36:bf:df:b8:1d:6a:bf:b6:3b:55:0d:eb:b5:4e:f2:
61:02:45:e0:04:1c:29:62:d9:6a:3d:f4:94:b7:f2:
e9:08:0d:ae:b5:17:59:f9:73:dd:02:28:8d:d2:d3:
b6:2a:42:ab:18:cf:5c:21:69:6b:33:b5:a1:d9:49:
78:c5:1a:ae:3d:04:42:5a:7d:79:6e:9a:39:43:0b:
2b:0a:56:1b:4c:41:74:c2:f7:0b:90:ee:38:ef:1a:
41:65:8a:f0:dd:43:4a:51:7d:4e:52:b9:92:40:3d:
39:d5:38:1e:a9:32:6f:f4:4c:b9:18:81:b9:52:ae:
fd:25:18:7a:34:6d:2a:35:1d:bf:e7:15:dd:08:e1:
1f:f1:a5:58:69:d1:ea:a9:84:0b:ea:89:a8:43:ec:
0d:87:18:96:40:71:81:80:4e:ec:bb:b5:83:93:2c:
e2:08:16:43:98:f8:63:7c:22:b2:2c:3e:ba:30:27:
ed:fe:8d:22:65:f1:3c:63:d3:fe:3f:b5:ff:81:77:
f1:8d:a8:41:ea:f7:1b:5b:ac:86:5a:4d:dd:ee:3d:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:35:20:9D:B2:1F:7E:CC:CE:AE:6E:7B:8E:81:5F:9E:33:69:E9:47
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/tTUgnbIffszOrm57joFfnjNp6Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.152.0/21
213.176.74.0/23
213.176.92.0/22
Signature Algorithm: sha256WithRSAEncryption
18:60:69:72:2d:8e:15:d9:4b:4d:37:fc:f6:1e:74:84:a7:91:
66:fe:a0:37:1b:4b:06:34:45:3e:55:62:1e:4e:74:bf:f6:49:
35:80:8d:af:da:77:e2:24:e4:3e:0a:40:d3:12:90:7a:a2:1d:
98:bf:4a:3f:5b:39:56:a4:c8:62:85:40:37:4d:05:d4:5c:b2:
a1:2b:e6:29:ed:68:b2:5b:92:67:94:bf:f4:a7:70:9c:2a:ae:
2d:7a:13:fd:88:ff:07:1a:81:7c:d4:df:f7:c4:8f:30:e5:3e:
ec:d5:ba:0a:59:7c:35:a9:dc:71:71:9a:2f:cc:0c:3d:61:99:
05:58:d0:f2:9f:ee:30:d0:b8:1a:a6:ae:a7:81:e5:fa:1c:32:
0e:2b:b8:30:3c:a0:b6:38:82:2d:84:2c:54:fb:b2:10:64:8a:
ba:03:ae:2b:84:ee:2b:31:d6:78:02:fe:0f:2f:4d:48:d5:48:
99:fe:f7:ce:61:1d:39:2a:7e:5f:44:b4:5a:b5:a0:d0:29:dc:
6d:f5:39:3b:ae:8f:e4:03:14:5b:aa:46:77:9e:fb:ea:09:be:
29:2e:79:d3:73:4d:5e:7c:d8:b4:05:90:f9:48:e5:ae:21:2f:
61:48:10:86:34:14:21:ca:ef:89:be:6e:b8:a6:73:1f:f1:c9:
2c:b4:ab:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 10:34:37 2024 by rpki-client on console-ams.rpki-client.org