Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/txmgLOh3uPPpj961HeTYghd2XyI.roa
File: txmgLOh3uPPpj961HeTYghd2XyI.roa (raw, json)
Hash identifier: W/G/iGkhhYxPoTwThOinV8NRSMytkkIAfYTXevr8aTM=
Subject key identifier: B7:19:A0:2C:E8:77:B8:F3:E9:8F:DE:B5:1D:E4:D8:82:17:76:5F:22
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CD10A15F0D4ABF311AF2ED595D989D993
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/txmgLOh3uPPpj961HeTYghd2XyI.roa
Signing time: Wed 03 Jan 2024 20:35:48 +0000
ROA not before: Wed 03 Jan 2024 20:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 62.60.216.0/22 maxlen: 24
213.176.64.0/22 maxlen: 24
62.60.146.0/23 maxlen: 24
62.60.156.0/22 maxlen: 24
213.176.120.0/23 maxlen: 24
213.176.126.0/23 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 02:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d1:0a:15:f0:d4:ab:f3:11:af:2e:d5:95:d9:89:d9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 3 20:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b719a02ce877b8f3e98fdeb51de4d88217765f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:d3:c6:2f:34:1f:a5:ae:7c:8e:e3:7f:7f:
01:43:8b:60:f7:31:18:35:0c:76:d5:a8:79:41:d8:
54:d8:52:5d:4d:a5:66:c0:ed:76:87:53:7f:ed:91:
d9:b7:ae:62:71:2c:ab:ac:75:03:2d:9f:81:48:a6:
e5:26:bb:85:da:76:0b:c0:f3:c4:0c:32:18:73:df:
f1:c3:ae:94:5c:54:d0:e1:9e:05:82:39:b1:45:31:
c6:2e:df:40:d8:22:c3:3a:e0:e4:89:47:bf:4c:d5:
b4:7c:c3:3a:f2:f0:50:82:d3:cf:5b:b6:e4:0e:68:
77:a9:65:b9:10:b0:88:36:83:9e:85:2f:57:89:61:
54:aa:0d:a1:d7:55:d2:38:7e:fc:a4:a5:5e:cc:b4:
bf:d0:05:da:58:71:bc:e1:fc:a4:28:b7:c4:e1:cc:
7b:9f:53:fe:ad:8e:03:48:5c:37:16:1f:3d:84:a0:
f8:98:44:50:f8:e9:eb:76:5c:9c:ac:ca:c6:78:c9:
61:cd:32:a5:54:2e:41:48:bb:50:d4:78:16:32:35:
c1:47:07:3f:32:4d:ee:63:e7:7f:f6:d6:b0:70:7c:
15:f9:81:0c:1a:81:38:b2:57:74:37:ab:49:01:b4:
7d:42:e6:87:65:d5:f0:39:a4:af:ef:40:4b:5e:e1:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:19:A0:2C:E8:77:B8:F3:E9:8F:DE:B5:1D:E4:D8:82:17:76:5F:22
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/txmgLOh3uPPpj961HeTYghd2XyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0/23
62.60.156.0/22
62.60.184.0-62.60.195.255
62.60.216.0/22
213.176.64.0/22
213.176.120.0/23
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
cf:35:43:91:e3:3f:76:69:5b:19:35:5d:df:df:06:09:8c:31:
1c:cf:6e:99:f9:a6:f3:83:e7:87:b8:b7:9f:57:d2:81:53:4c:
df:f1:1a:b8:cb:21:67:e2:44:ad:37:24:f8:9b:f0:d3:c3:f1:
36:16:ee:ac:af:7e:0a:e3:33:3e:70:2e:04:09:73:bb:ba:83:
ac:04:90:21:1a:42:83:4a:11:08:e2:1a:04:e0:a9:ba:f2:fc:
69:db:b1:f3:a4:70:77:0c:0c:0c:ef:8b:81:af:ec:b6:a0:55:
89:39:96:6f:97:bd:8b:d2:ac:9d:47:e2:86:b7:44:cf:2c:9e:
56:8d:c1:8b:11:89:c9:46:fa:31:bd:4b:63:b6:b9:19:ac:3f:
d1:1c:6a:72:9c:b6:e9:80:ae:a6:df:60:92:3c:cf:43:4e:9f:
6c:cb:fb:e5:bb:77:91:ac:0f:53:a1:1f:1b:57:ec:d9:16:1e:
ff:0d:86:27:16:10:d9:45:44:37:ee:a2:4b:9b:11:c4:f6:f2:
41:d0:86:ab:fd:71:ef:a1:1b:f2:93:52:3b:54:89:19:ef:eb:
be:cc:3e:b2:48:f6:7d:17:fb:dc:6e:75:4b:fb:34:6e:4d:f2:
00:8c:d0:10:3e:1e:ec:8d:84:d0:0c:85:94:17:1d:09:dd:94:
e8:23:52:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org