Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/voy0yVWGbff-m6BaAGbL76-VYEM.roa
File: voy0yVWGbff-m6BaAGbL76-VYEM.roa (raw, json)
Hash identifier: rErSEi8Zj+kxektNwwcoiwvmamGkSI5LmNsyH313u18=
Subject key identifier: BE:8C:B4:C9:55:86:6D:F7:FE:9B:A0:5A:00:66:CB:EF:AF:95:60:43
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018EFAA608361D39B12D3E30D152BF2407FF
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/voy0yVWGbff-m6BaAGbL76-VYEM.roa
Signing time: Sat 20 Apr 2024 08:36:08 +0000
ROA not before: Sat 20 Apr 2024 08:36:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49100
IP address blocks: 62.60.152.0/22 maxlen: 24
62.60.156.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 06:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fa:a6:08:36:1d:39:b1:2d:3e:30:d1:52:bf:24:07:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Apr 20 08:36:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be8cb4c955866df7fe9ba05a0066cbefaf956043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:28:d3:63:a9:c6:d6:1d:3f:2c:2e:fe:a1:
f7:80:a4:7a:99:5d:f7:61:f4:81:49:4e:38:0c:3d:
c2:1d:5e:27:36:9f:db:12:8a:e7:ee:a1:b7:12:a5:
8a:9c:09:88:a2:dc:ab:9d:0b:af:74:e9:fc:e5:56:
2f:ac:37:42:7d:8d:6b:1b:84:c5:90:65:04:df:32:
60:89:0b:57:d4:ee:6f:fb:ff:c6:1d:cd:18:8a:e7:
86:54:4a:c1:cc:e4:c5:52:d1:20:ee:4a:91:d5:d0:
fd:1f:c5:14:39:ca:69:cb:68:12:7d:1f:5c:a8:c0:
bd:b9:c5:4d:6f:0a:76:01:3b:78:d3:77:29:e1:cc:
d6:8a:7c:00:b2:cd:ed:a3:43:c8:a8:29:57:0c:b2:
93:c8:63:fc:f9:ee:93:40:6d:7a:5e:91:2b:9b:e4:
c8:39:d6:10:f8:56:79:9c:73:2c:36:5c:d7:b6:9d:
61:83:85:c5:a0:a8:a9:be:2c:5e:0c:8e:96:52:1c:
26:0f:aa:26:89:c1:27:82:79:34:68:66:f9:8f:c5:
6b:2a:4b:db:6d:72:3e:8d:d9:2b:80:1e:e6:c2:62:
45:a7:40:15:44:68:94:11:64:f3:ba:6f:f7:21:12:
04:d7:d0:61:e3:be:fc:46:0c:cc:b0:0a:97:89:2c:
e8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8C:B4:C9:55:86:6D:F7:FE:9B:A0:5A:00:66:CB:EF:AF:95:60:43
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/voy0yVWGbff-m6BaAGbL76-VYEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.152.0/21
62.60.184.0/22
62.60.192.0/22
62.60.216.0/22
Signature Algorithm: sha256WithRSAEncryption
52:d3:c0:2a:93:3f:ce:23:b6:56:78:13:56:cf:5b:a4:46:c6:
67:da:ca:21:58:88:45:0a:83:8b:5a:cf:4c:f9:65:3b:23:7a:
5d:8c:c6:e0:1e:ea:71:b3:fc:3f:00:3a:b4:0c:2d:10:2f:98:
7c:ac:74:b3:dc:00:db:df:9b:d0:d2:97:3a:0e:8d:a8:5d:08:
e5:3d:d8:3c:94:4e:8c:14:ae:2b:f4:bb:65:c6:04:a0:99:c1:
34:f7:9f:85:86:64:c3:b2:cd:90:51:a9:db:c6:59:3b:18:a6:
4d:c1:bb:b0:b9:8e:af:60:32:d1:db:7a:d8:c2:eb:77:c4:87:
e7:09:95:38:6d:90:10:1d:eb:ff:15:0d:20:cc:48:ac:4a:d2:
65:35:42:90:68:b4:eb:ee:cb:95:2a:61:56:15:0f:fb:d6:2a:
48:b2:97:52:a0:99:ae:2a:e0:77:06:d7:a1:4e:33:92:06:57:
e9:b9:99:2f:54:52:5e:63:35:62:64:92:3f:d3:3e:c0:15:bc:
2b:f1:56:a6:c2:6b:8d:0f:7f:0e:24:02:cd:a4:0f:6a:28:25:
83:bc:39:17:9a:f6:6b:79:36:81:04:00:12:52:d6:e1:b5:0d:
db:2d:e1:1e:66:4a:19:d8:4b:cd:72:38:f4:f3:d4:87:88:fa:
b4:7e:48:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org