Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uj4mjNJnphclxk3NkpsWYGHejDY.roa
File: uj4mjNJnphclxk3NkpsWYGHejDY.roa (raw, json)
Hash identifier: N+qSZ8hwCYn1CdhSjRHZsj1v0Fp8RjL4D230lUN/Yfw=
Subject key identifier: BA:3E:26:8C:D2:67:A6:17:25:C6:4D:CD:92:9B:16:60:61:DE:8C:36
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019054144BC9BD2ADC611FD2FB32BC56E04A
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uj4mjNJnphclxk3NkpsWYGHejDY.roa
Signing time: Wed 26 Jun 2024 10:25:34 +0000
ROA not before: Wed 26 Jun 2024 10:25:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44559
IP address blocks: 62.60.156.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 05:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:14:4b:c9:bd:2a:dc:61:1f:d2:fb:32:bc:56:e0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 26 10:25:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba3e268cd267a61725c64dcd929b166061de8c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:40:a5:a0:5e:ed:7e:ab:af:38:ab:94:ae:
5f:3d:e6:bf:49:c2:f2:8a:83:fa:07:23:cd:7e:ff:
f9:1f:33:44:a7:ca:18:41:70:87:2c:f7:0c:92:f0:
4c:62:1f:02:1d:27:50:6f:4d:02:e9:9e:0b:ce:8b:
c9:82:13:bf:d9:fb:48:84:08:c3:85:60:48:64:cb:
d2:55:39:c7:3f:91:85:23:c7:a5:8d:4f:19:36:a3:
36:62:f2:64:1d:28:2a:53:3d:ed:43:af:58:d0:82:
e3:e2:97:95:dc:ef:a7:03:39:81:18:14:a2:5d:cb:
41:9f:d1:cb:8f:f1:3f:c6:7f:3b:7f:d3:af:2e:0d:
4f:98:3a:29:db:5a:6d:e0:6d:27:2e:9f:e6:23:8c:
92:47:42:c0:37:53:27:8a:aa:85:e2:ed:80:6e:86:
ff:ff:d2:e7:40:53:e3:66:17:b0:31:d2:96:6d:0e:
6b:53:34:d1:b0:d6:0f:a6:fa:a6:da:0f:dc:cc:eb:
ca:17:89:f1:f7:6d:70:f9:f2:c3:79:50:73:4f:3f:
24:a3:23:77:ca:d6:f9:6b:af:cf:56:3c:ec:c5:40:
7e:25:63:5c:aa:d4:8d:47:9e:56:f7:54:6e:95:ac:
34:11:76:24:f3:75:b2:f3:f9:2a:d9:27:88:cd:f5:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3E:26:8C:D2:67:A6:17:25:C6:4D:CD:92:9B:16:60:61:DE:8C:36
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uj4mjNJnphclxk3NkpsWYGHejDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.156.0/22
62.60.184.0/22
62.60.192.0/22
62.60.220.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:3a:94:b5:ac:8e:c8:11:38:fe:36:6b:bb:e0:19:57:08:d4:
61:f8:03:38:ba:5c:16:31:53:80:25:32:ab:ef:99:8c:80:e1:
7e:0f:f8:5b:c3:5a:7c:df:76:48:9d:68:34:43:6b:22:bb:11:
f6:1b:34:60:86:71:7c:31:57:1b:11:6c:29:b7:66:a6:21:2f:
22:cb:d1:b2:56:da:3b:65:26:38:45:7f:63:55:b1:a7:10:6a:
ca:9e:2a:1d:5b:10:37:05:94:d7:d9:6b:73:3d:04:93:c2:bc:
c9:73:78:14:ab:3c:25:29:f6:2b:81:ac:cd:a8:79:0c:40:16:
1f:86:a6:fd:63:a5:36:7c:f7:70:30:aa:7e:ae:ae:cb:ee:8f:
fc:3d:24:cd:20:32:22:44:5b:da:99:8b:0c:69:b3:8b:83:94:
de:55:43:46:78:c6:91:30:28:a0:0b:99:15:ae:a4:f5:5e:63:
15:44:c6:2e:f6:06:3f:1d:84:76:33:78:ae:c9:99:7e:e5:a1:
c5:1d:ad:c4:4a:49:42:00:2e:05:c1:af:aa:10:c6:59:bd:e0:
eb:2b:19:be:33:db:36:bc:05:4b:3c:ba:6c:71:03:d0:18:62:
f2:5b:4a:7a:e7:9f:a5:8b:c4:e9:88:75:9b:88:3c:04:98:b4:
dc:37:9d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 11:23:03 2024 by rpki-client on console-fra.rpki-client.org