Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/u5wu00WAbS1J9__wVnV8g8SfKLQ.roa
File: u5wu00WAbS1J9__wVnV8g8SfKLQ.roa (raw, json)
Hash identifier: axQ0aT0sN6LDfZQIF9E5RIvtzhb9RstqkKefvBDiS+E=
Subject key identifier: BB:9C:2E:D3:45:80:6D:2D:49:F7:FF:F0:56:75:7C:83:C4:9F:28:B4
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018899BB0B2F5B57135F2ECC2ECA07DCF376
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/u5wu00WAbS1J9__wVnV8g8SfKLQ.roa
Signing time: Thu 08 Jun 2023 06:39:12 +0000
ROA not before: Thu 08 Jun 2023 06:39:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211421
IP address blocks: 62.60.204.0/22 maxlen: 24
62.60.200.0/22 maxlen: 24
62.60.212.0/22 maxlen: 24
62.60.208.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:99:bb:0b:2f:5b:57:13:5f:2e:cc:2e:ca:07:dc:f3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 8 06:39:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb9c2ed345806d2d49f7fff056757c83c49f28b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:4c:23:ce:6c:51:5f:85:8c:f0:ad:13:31:
5e:ab:c7:30:77:36:0b:fe:7d:a0:4e:03:d7:27:c6:
93:5a:ec:2e:f4:7e:ee:20:13:e4:0e:cf:51:b3:e1:
c7:58:c8:5a:7f:2e:41:dc:bd:1c:28:3a:5e:b8:95:
31:74:12:d2:b2:fe:c9:0c:0f:d9:3f:9d:f2:0e:7e:
d5:d5:35:0f:bf:68:17:6d:3a:8b:24:49:ac:7b:94:
c7:cf:cf:f2:22:a1:ac:13:fb:7d:ad:ec:05:97:9c:
70:dc:35:33:0e:20:e4:f1:23:0f:6a:7d:7c:fc:17:
ec:5c:6e:cd:1b:99:2d:48:4f:0a:9d:71:70:67:f9:
6f:af:ae:0c:82:3f:89:4d:f4:53:5c:d9:03:fa:bc:
07:d1:b4:96:0f:cd:f2:f9:be:bd:15:31:52:f5:d9:
fa:b0:23:dc:88:6d:52:5f:8b:d6:29:9f:06:91:94:
ea:20:2b:62:dd:4b:00:6f:b3:47:09:63:66:1c:a3:
fa:5e:59:ee:9a:4d:e0:75:5e:50:73:df:82:2c:9b:
70:a7:f8:5c:b2:dc:22:37:32:ff:ea:06:8a:65:55:
c4:40:22:87:8b:78:02:bc:47:3e:a2:b3:8e:7e:fa:
81:b1:de:7f:09:00:cf:6e:59:71:19:6a:cf:0a:29:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9C:2E:D3:45:80:6D:2D:49:F7:FF:F0:56:75:7C:83:C4:9F:28:B4
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/u5wu00WAbS1J9__wVnV8g8SfKLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.200.0-62.60.215.255
Signature Algorithm: sha256WithRSAEncryption
70:ff:5d:6c:58:c7:f6:7a:ed:98:47:01:d1:55:a3:5c:f5:e9:
93:21:d2:4d:a5:bb:1c:94:ed:24:68:90:9a:af:00:ca:b0:44:
69:6c:77:77:04:b4:03:2b:34:42:09:cf:7b:c5:51:8c:19:a7:
b4:79:72:0d:b8:04:38:8a:b8:53:f8:31:9b:df:80:04:ef:15:
df:da:5b:77:68:1e:bb:74:ae:86:f4:bb:20:a4:95:20:8b:fe:
81:45:37:4e:1c:51:8e:86:43:03:31:fb:72:bc:a6:7f:40:f5:
72:22:ff:6e:52:a8:6b:07:34:22:7a:d5:c2:9c:cb:0e:1d:ce:
3d:5d:0e:a3:0d:98:35:0a:d2:78:a8:f1:74:6a:91:94:30:0d:
23:7c:43:ba:a5:d1:53:63:3d:bf:8d:93:80:4c:a7:68:90:1b:
ba:45:39:0d:98:8b:62:12:fc:0e:8d:24:a2:2e:d6:f1:75:3b:
3f:16:85:38:79:ec:1c:02:29:c6:9f:46:4e:b9:fa:44:ce:4b:
18:08:67:38:59:89:3f:da:03:7d:97:83:46:f2:54:34:39:8a:
ec:31:36:16:ad:fe:77:1a:e6:30:64:fa:f5:d4:87:b7:2e:3b:
46:76:98:19:13:79:82:09:7c:d3:48:4a:46:b5:85:44:48:91:
15:a3:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:35 2023 by rpki-client on console-fra.rpki-client.org