Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uqFnf5tFuFjTDzwFs9_I4FNEO6E.roa
File: uqFnf5tFuFjTDzwFs9_I4FNEO6E.roa (raw, json)
Hash identifier: bd9Ib7At7+HVx5Vh/MJ+OdPrZw/0tu4tg4mLAbel0aI=
Subject key identifier: BA:A1:67:7F:9B:45:B8:58:D3:0F:3C:05:B3:DF:C8:E0:53:44:3B:A1
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0185D86A1A71E88C30E4AC05DF4BBB9765F5
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uqFnf5tFuFjTDzwFs9_I4FNEO6E.roa
Signing time: Sun 22 Jan 2023 07:38:30 +0000
ROA not before: Sun 22 Jan 2023 07:38:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.132.0/22 maxlen: 24
62.60.148.0/22 maxlen: 24
62.60.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Mar 2023 14:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d8:6a:1a:71:e8:8c:30:e4:ac:05:df:4b:bb:97:65:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 22 07:38:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baa1677f9b45b858d30f3c05b3dfc8e053443ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d8:47:24:35:2e:84:b2:49:e0:c0:e9:fc:34:
21:b8:7f:20:1d:72:85:98:ac:84:51:39:9e:e4:54:
5b:1b:af:c9:8b:45:9b:1c:ed:5d:61:a3:de:cb:f0:
1a:3d:7e:c4:7b:e5:8d:cd:c9:c8:25:cf:95:44:ab:
79:44:37:33:c1:77:a9:02:fc:85:25:23:05:ac:33:
1a:59:5c:19:09:af:bd:29:bd:e4:7e:8c:a9:d2:d2:
ce:5d:1d:9c:fa:de:c9:c7:c3:06:a4:99:20:0e:36:
0b:ec:b1:d4:50:04:23:34:8d:b3:48:51:72:c2:f9:
95:13:90:b7:45:8b:70:3c:d8:18:1d:e6:9d:ef:07:
59:94:ee:32:d0:88:f2:8f:22:72:96:6a:9c:19:8b:
20:7e:fb:a9:e8:0b:bb:56:8a:25:32:16:1c:3a:71:
3e:4a:15:34:25:5a:ae:31:75:bc:73:d7:d7:ed:e1:
a5:76:85:6a:c9:63:18:46:ee:31:cd:25:0e:54:34:
60:fb:2e:db:d0:74:c2:d9:42:f6:53:e7:0d:92:2b:
e6:0b:a4:70:ae:32:b4:83:6b:1d:dd:1c:9e:32:ff:
e1:f2:e9:be:8b:33:09:72:26:9b:37:1e:17:bf:78:
71:28:ad:38:cf:0d:cb:f2:66:63:ba:34:6a:9d:a6:
82:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A1:67:7F:9B:45:B8:58:D3:0F:3C:05:B3:DF:C8:E0:53:44:3B:A1
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uqFnf5tFuFjTDzwFs9_I4FNEO6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0/22
62.60.148.0/22
62.60.212.0/24
Signature Algorithm: sha256WithRSAEncryption
58:24:a6:54:11:fe:a5:f3:0e:89:f4:2f:31:13:10:f2:23:41:
a8:a3:63:bf:c5:2c:ab:31:1b:97:6b:fe:bc:86:b7:50:c2:b8:
48:5a:98:bc:56:2a:a4:1d:5f:48:b1:d0:02:91:8d:ac:92:48:
af:5d:60:09:f6:85:7d:fd:ca:0c:5b:69:b7:05:d9:57:e1:68:
5f:cd:aa:37:2b:22:94:58:13:97:a9:0f:d2:70:61:41:fd:4e:
b8:1c:37:5e:7b:f9:09:5e:12:71:8d:7d:19:62:c0:78:d1:61:
db:ab:00:f9:a6:82:d3:69:38:9a:d5:98:58:ce:ff:7f:7f:0b:
23:de:f6:93:dc:2b:d9:7a:c3:58:de:b7:49:23:38:04:7a:f5:
a5:e2:76:e1:e2:c9:d5:e1:08:05:f0:49:89:6d:5a:7e:8f:08:
4d:99:59:6c:f1:8e:58:4c:b9:68:98:bf:35:8d:fc:2b:db:f2:
89:0f:19:93:4a:f4:a4:1b:26:e5:56:21:4b:e6:a3:f3:1e:bb:
43:47:cc:dc:5c:de:34:55:97:d8:67:e1:c4:1c:b1:9d:4b:20:
00:24:06:ec:d4:08:27:4a:e7:da:78:93:e9:af:36:19:d4:60:
98:65:bd:07:99:74:b6:9d:85:48:48:92:b2:b5:89:62:e3:5d:
05:de:1b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org