Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/vAHvwPi68WBBKQf2YcObWj_tvVQ.roa
File: vAHvwPi68WBBKQf2YcObWj_tvVQ.roa (raw, json)
Hash identifier: VgYQgOYX6E6bTxv+5rK6WfZdLfJdRsIVAb/e7OiOXPY=
Subject key identifier: BC:01:EF:C0:F8:BA:F1:60:41:29:07:F6:61:C3:9B:5A:3F:ED:BD:54
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01918341F39D59C70B4D613528F0AE5836C5
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/vAHvwPi68WBBKQf2YcObWj_tvVQ.roa
Signing time: Sat 24 Aug 2024 07:20:23 +0000
ROA not before: Sat 24 Aug 2024 07:20:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55933
IP address blocks: 62.60.216.0/23 maxlen: 24
213.176.72.0/24 maxlen: 24
213.176.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 04:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:83:41:f3:9d:59:c7:0b:4d:61:35:28:f0:ae:58:36:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 24 07:20:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc01efc0f8baf160412907f661c39b5a3fedbd54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:e9:1c:8a:f4:60:82:8e:09:6e:1c:dd:e7:
31:ec:20:19:e7:6a:2c:83:92:1c:68:b9:1c:6a:9d:
02:fe:ea:c6:cb:40:ce:c8:de:e3:23:02:06:0c:13:
b8:44:08:ed:25:36:56:3d:18:e1:6b:22:02:bd:37:
74:a1:d0:0b:59:ec:d1:83:f2:1e:48:99:bb:28:99:
c9:ff:03:66:df:a7:1a:9c:64:b7:ca:02:25:31:e0:
9c:6c:59:9d:47:74:9f:f6:8a:82:4d:4d:53:c4:b6:
49:51:f9:d4:34:27:ff:c3:ed:b7:05:53:4f:e1:27:
4c:86:d0:ec:31:6c:1e:b6:82:7b:7e:87:22:c6:b4:
b0:fb:3d:e8:1b:7b:97:39:ed:fe:01:00:5f:c7:15:
10:af:b5:99:e9:78:c1:82:31:21:67:7f:06:ac:3e:
e1:cf:b1:26:01:b5:f0:08:38:b4:61:37:4f:03:19:
68:31:0d:ee:c9:d0:68:66:b7:37:67:86:52:f4:5c:
c2:51:c6:5e:bc:1c:44:72:07:4d:a8:97:62:48:fe:
d1:d0:56:69:65:fc:2c:11:2f:bc:d4:8e:8b:c8:61:
5d:7e:35:76:df:7c:60:92:b3:9c:55:d0:3b:0a:a4:
a7:fb:60:0b:2c:07:30:4e:48:01:b1:80:1c:e5:d1:
bb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:01:EF:C0:F8:BA:F1:60:41:29:07:F6:61:C3:9B:5A:3F:ED:BD:54
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/vAHvwPi68WBBKQf2YcObWj_tvVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.216.0/23
213.176.72.0/23
Signature Algorithm: sha256WithRSAEncryption
53:f3:71:0d:8d:7e:ff:cb:8d:4c:81:6a:5c:6f:70:ef:c8:1a:
76:7a:ac:ed:46:31:e7:0c:76:fa:92:12:bb:5d:9e:f6:1c:3b:
e5:5b:e0:6f:e0:93:99:ff:cc:c5:b8:77:33:82:bb:2e:c9:53:
fe:61:91:fd:49:02:25:e0:95:79:c9:b5:7f:18:6b:9a:c8:40:
15:c9:52:48:3e:7e:33:8c:83:ad:b5:ee:8c:dc:1b:ee:64:b2:
dc:54:06:8c:c6:21:b9:32:9c:63:8e:cf:7a:8c:bd:88:25:6d:
ce:74:61:1c:8b:71:82:1b:46:23:4f:06:b0:fe:c5:68:52:78:
a2:7d:7d:69:64:a3:28:4a:23:bc:91:11:12:ce:29:ef:53:e6:
32:a3:4d:61:cb:56:c6:62:e3:47:e6:fc:f7:b9:ae:a2:15:31:
5e:74:0a:86:e4:1c:39:55:20:00:ad:2a:3b:24:05:e9:9d:cf:
53:95:3f:1c:a0:d7:d7:e1:fe:3f:a5:40:b1:1a:2a:53:b6:91:
91:7a:ad:af:7d:6a:21:4a:65:5b:4c:79:f8:b8:7f:f8:82:b6:
bd:b6:2b:fb:de:25:c6:a0:a5:5a:5b:7a:a7:92:63:d8:5d:04:
09:90:e2:d9:57:9c:17:1d:b5:e7:66:5a:0f:bf:b0:d8:fd:4f:
cf:ce:90:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 08:25:30 2024 by rpki-client on console-ams.rpki-client.org