Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/vXmE9SsAqT9dQixqpDwMKkcNNvs.roa
File: vXmE9SsAqT9dQixqpDwMKkcNNvs.roa (raw, json)
Hash identifier: e3+rNKbl2rgz/si5o6M95fpvkVmj9E7mZhFtfVyF1DE=
Subject key identifier: BD:79:84:F5:2B:00:A9:3F:5D:42:2C:6A:A4:3C:0C:2A:47:0D:36:FB
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019227FE486716DAADD8A8BE5524F98D40E5
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/vXmE9SsAqT9dQixqpDwMKkcNNvs.roa
Signing time: Wed 25 Sep 2024 07:03:48 +0000
ROA not before: Wed 25 Sep 2024 07:03:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55933
IP address blocks: 62.60.216.0/23 maxlen: 24
213.176.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 07:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:27:fe:48:67:16:da:ad:d8:a8:be:55:24:f9:8d:40:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 25 07:03:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd7984f52b00a93f5d422c6aa43c0c2a470d36fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:6d:a3:ed:a1:ef:99:5b:a1:77:f5:6f:0b:
85:1c:46:b0:4c:31:3d:84:80:c0:6b:2c:34:00:5e:
70:36:cb:9a:7f:2a:c1:51:2e:b8:b9:c8:aa:d7:6e:
b7:6a:13:80:9b:6f:82:39:46:d0:17:29:ef:61:1c:
c7:4c:2a:9c:89:4b:53:9b:e6:6c:82:64:3d:54:7e:
2a:af:93:17:2e:d0:bd:a4:16:6e:93:2b:6e:db:50:
a4:ea:6d:76:77:ca:4d:f5:48:62:d1:ec:a1:ab:eb:
0a:e1:65:3c:9f:a7:92:fb:8c:97:b5:c3:66:73:ca:
d4:8b:30:26:08:5c:31:59:24:2b:6e:ea:5e:56:80:
d3:a2:0d:84:9b:31:55:64:9d:90:1b:71:0e:8f:44:
4e:68:87:9d:ca:38:2a:b8:3a:92:c2:b3:ec:17:a4:
45:c3:ca:a0:fa:31:04:ff:2a:c0:f6:24:04:7c:9a:
c5:f7:47:8e:99:4a:7e:be:8a:78:2b:25:7c:47:c1:
35:06:fb:f9:f5:13:1b:70:ed:1a:03:b8:d7:88:47:
b3:46:50:ce:ec:32:4f:ef:46:da:b9:0e:84:bd:fd:
e9:19:39:7e:c7:de:71:b9:ae:c3:62:a9:37:11:aa:
3e:a9:64:e5:88:2e:64:a3:db:8c:b8:0b:33:35:07:
ca:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:79:84:F5:2B:00:A9:3F:5D:42:2C:6A:A4:3C:0C:2A:47:0D:36:FB
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/vXmE9SsAqT9dQixqpDwMKkcNNvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.216.0/23
213.176.73.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:b8:58:e6:31:89:81:bd:0f:67:bb:c0:ef:8b:bf:7e:6b:7e:
c4:a9:c4:58:d4:bf:07:d6:13:99:bc:91:d7:e3:ac:46:e6:78:
50:15:e6:03:56:87:5f:d5:88:63:39:9b:eb:24:ab:b6:58:b5:
44:d1:61:73:9c:fb:51:44:b0:bf:67:01:17:ea:f0:b8:eb:d0:
0e:e7:32:15:b7:26:ed:59:29:a3:cb:72:6d:ce:03:c1:ca:9f:
18:e8:0a:80:54:ae:0d:05:41:8a:18:1a:26:d4:a0:2a:63:b4:
bc:61:88:ad:41:d0:eb:f3:2c:52:ee:90:de:d3:67:c2:ea:ee:
97:d1:bc:36:b0:60:1e:6a:ab:63:74:ed:29:35:3a:d2:c6:23:
12:a3:12:80:2e:be:d6:69:65:75:cb:bf:c1:30:2c:a7:1a:69:
d8:41:0c:0b:8a:25:39:9e:c6:98:2b:4f:58:43:63:61:5f:2f:
d2:57:df:52:3a:2a:aa:a1:b8:6b:0a:f7:68:23:11:c0:89:73:
1e:0f:95:32:7a:ca:a4:61:8a:fa:a5:df:de:02:63:ed:f9:30:
ad:7e:71:3b:c7:e6:30:d5:77:46:cd:d7:b3:2e:08:ed:7a:24:
e6:2e:ec:1d:0b:ea:de:ad:fe:90:9b:a9:b8:75:d2:c5:f4:69:
35:e4:36:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 08:56:40 2024 by rpki-client on console-fra.rpki-client.org