Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/voULCKsFqOqbDS-vnXMdHAuJEIM.roa
File: voULCKsFqOqbDS-vnXMdHAuJEIM.roa (raw, json)
Hash identifier: 2fWFU0chLZUxZWqhMdO+JielL0qLaqtAjGAQV/FV0/g=
Subject key identifier: BE:85:0B:08:AB:05:A8:EA:9B:0D:2F:AF:9D:73:1D:1C:0B:89:10:83
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01915F45E9428D8A60D4A641FB7CC1FA6ABF
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/voULCKsFqOqbDS-vnXMdHAuJEIM.roa
Signing time: Sat 17 Aug 2024 07:38:22 +0000
ROA not before: Sat 17 Aug 2024 07:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64458
IP address blocks: 62.60.148.0/22 maxlen: 24
62.60.180.0/22 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 10:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5f:45:e9:42:8d:8a:60:d4:a6:41:fb:7c:c1:fa:6a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 17 07:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be850b08ab05a8ea9b0d2faf9d731d1c0b891083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:07:45:8e:05:60:80:b2:f9:15:8b:7a:e5:
91:8b:c5:a2:8e:5b:aa:e7:e6:4a:16:a5:a1:8b:6d:
51:46:18:9a:dc:dc:3b:b1:5a:30:12:d8:98:69:43:
b8:7b:82:ab:8a:df:5a:83:2e:c5:ed:22:f4:85:38:
0f:31:69:5f:2c:ba:2b:26:cd:15:99:e1:ea:bb:8b:
44:ce:d6:0a:5e:80:4a:3e:da:21:b0:ab:28:cf:38:
e5:0b:bb:20:10:4a:b3:e0:3f:5f:e2:da:54:98:4d:
b6:57:8b:16:26:f6:2b:be:e9:c3:b3:ca:87:19:60:
0a:2c:f3:46:4c:bb:40:ff:15:f5:d3:12:e5:41:06:
81:92:c4:ef:fd:dc:28:8b:94:97:a1:63:fe:9f:a7:
4d:0d:54:65:53:8e:f2:a3:d2:cb:50:90:3c:13:68:
9c:7a:5c:ef:9b:1d:60:0a:ae:42:bb:16:2b:cb:77:
9d:11:55:9c:d6:cb:d7:20:ce:19:9d:fa:e2:50:09:
ad:83:86:62:e4:d5:e1:58:bf:4c:2e:7c:ee:a7:32:
c0:c2:d2:f5:ef:b5:d7:f2:3e:41:56:ea:4e:0b:7a:
bb:b2:bf:fd:ef:b1:1b:13:38:bd:59:ae:8f:16:bb:
71:cc:94:9e:89:dc:1b:04:22:70:84:fc:7b:2f:58:
09:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:85:0B:08:AB:05:A8:EA:9B:0D:2F:AF:9D:73:1D:1C:0B:89:10:83
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/voULCKsFqOqbDS-vnXMdHAuJEIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0/22
62.60.180.0/22
62.60.196.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:ba:b2:f0:6e:20:ef:12:34:1c:03:34:a3:5e:b7:0d:18:c4:
86:eb:8a:9b:b5:45:bf:eb:48:27:46:94:1e:fd:5d:1f:21:c0:
65:e4:bb:47:53:e5:10:6c:83:98:64:26:e0:06:15:b6:f2:13:
8f:83:8a:6e:8d:72:ff:8f:0d:2c:49:9d:1b:11:d5:fe:af:dc:
51:f4:82:ff:2a:ae:ca:1d:a9:71:d1:ad:de:bb:59:2d:4f:f0:
28:d5:06:dc:c4:3c:b3:b4:fa:40:de:83:92:f0:b0:58:de:d7:
66:b0:01:f3:a2:3d:c7:51:12:d0:62:42:15:2e:70:84:ea:30:
c7:98:f4:43:5c:9e:c6:d9:e2:a8:da:dd:76:23:90:67:1d:dc:
ee:b0:24:6b:14:96:1f:a2:a0:dc:6a:2b:98:3f:71:6d:75:6a:
6c:ef:12:f4:b7:8d:c3:a4:b7:1f:3d:dd:30:27:0a:b7:b7:2f:
14:77:26:79:5c:b5:33:c3:db:cf:27:d3:4a:28:23:a9:ad:7c:
61:bb:53:09:67:98:76:43:70:4f:21:74:8e:85:35:7e:fa:4d:
49:0d:71:ae:2b:09:6b:c9:13:0f:97:d8:fb:a6:f2:47:59:33:
5f:69:ba:82:9b:21:ec:47:5f:bc:49:76:b2:36:a7:98:4b:ab:
b6:bd:51:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 17:10:13 2024 by rpki-client on console-ams.rpki-client.org