Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uhfTYwO6-R-2r4PLBinkBHyOaZw.roa
File: uhfTYwO6-R-2r4PLBinkBHyOaZw.roa (raw, json)
Hash identifier: Cda/PMXCRcdprYUdE3WQvrt5vddK4pocwwzlgpgLr+M=
Subject key identifier: BA:17:D3:63:03:BA:F9:1F:B6:AF:83:CB:06:29:E4:04:7C:8E:69:9C
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0192375C4DB82640F77054AF207B7C44AA04
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uhfTYwO6-R-2r4PLBinkBHyOaZw.roa
Signing time: Sat 28 Sep 2024 06:40:49 +0000
ROA not before: Sat 28 Sep 2024 06:40:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198981
IP address blocks: 62.60.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 08:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:37:5c:4d:b8:26:40:f7:70:54:af:20:7b:7c:44:aa:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 28 06:40:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba17d36303baf91fb6af83cb0629e4047c8e699c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b6:70:4f:af:ea:ed:ff:10:a7:55:d3:97:0b:
9f:76:f8:18:16:db:33:c8:e1:10:b8:80:62:a9:41:
bc:3c:19:cc:b3:21:85:2a:05:86:96:09:9b:8e:ff:
fb:99:2d:a8:8e:fc:ed:0d:c7:80:79:2b:65:55:b7:
dd:26:d0:17:fb:a3:62:47:26:c6:45:1f:1a:06:f4:
b4:a8:6b:bc:50:32:6b:5c:93:e0:d0:28:c5:9c:27:
e0:81:a5:cb:15:f8:a1:33:68:49:87:6d:41:01:e3:
35:80:36:44:26:a3:b3:75:f0:67:7c:ba:c2:b4:ba:
5c:50:df:33:1d:40:68:9b:c8:13:f9:b8:5b:41:23:
7a:30:7b:6d:5e:0c:5e:d0:df:34:b4:09:51:6d:fe:
ef:23:3e:4a:7d:47:e7:dd:dd:86:30:47:1f:b7:d5:
96:15:db:a8:56:92:7d:58:ee:9d:3c:cf:79:b9:4c:
eb:75:b9:1a:c8:2c:78:a9:ed:5a:2c:58:2c:9b:78:
75:a9:5d:52:c2:7a:f5:82:63:6e:42:5e:86:53:05:
a8:0a:7d:34:b4:d8:ef:80:41:74:f3:64:79:3a:0b:
ad:88:1a:7b:82:fb:a0:c0:32:b1:d8:15:db:bb:21:
1d:02:17:0c:8e:73:55:50:0b:a9:e7:06:4b:c5:bb:
10:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:17:D3:63:03:BA:F9:1F:B6:AF:83:CB:06:29:E4:04:7C:8E:69:9C
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uhfTYwO6-R-2r4PLBinkBHyOaZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.235.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b6:ca:0b:ad:eb:93:6f:b1:a5:f5:c4:74:c2:34:ac:18:cb:
77:8e:e5:31:14:55:80:83:3e:59:8d:18:bf:bd:32:f0:12:38:
8a:16:00:90:c6:39:0c:0f:20:3d:1a:ce:e7:dd:24:2c:e4:1d:
6f:60:2e:2a:10:40:36:f9:58:72:e4:47:d0:42:d3:91:c1:4d:
5e:84:38:5b:53:60:44:1a:ec:38:02:3f:f1:69:57:bc:6c:03:
71:c4:a4:b8:12:df:dd:39:b5:16:33:a3:ba:b2:c4:92:99:97:
4e:1f:47:1d:6a:b2:dd:02:08:76:30:51:2f:5b:4c:61:51:3f:
10:76:5a:4c:01:d1:4b:24:21:0b:f9:e2:0b:2e:25:ba:ba:86:
0e:b8:cc:88:86:86:be:fe:a6:0a:4c:d6:2c:6c:8f:ae:7d:fd:
4f:56:c9:82:ae:23:f2:b8:df:c5:80:ec:8b:61:7a:bc:44:4f:
b2:85:b8:21:13:84:e5:f6:f3:db:e0:8b:6c:fc:f4:07:d5:09:
cf:49:bb:ca:24:2e:56:17:5a:6c:87:a1:de:66:15:8f:cf:f1:
8d:75:6e:fe:cc:08:3b:c4:c8:05:b0:64:ce:ae:c0:14:ec:03:
5a:95:21:fb:32:5f:a5:49:09:18:e5:a4:93:79:83:8a:79:31:
08:1d:72:d4
-----BEGIN CERTIFICATE-----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Generated at Sat Nov 9 09:32:57 2024 by rpki-client on console-fra.rpki-client.org