Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wLGnrHGBYR9NBiPd_Xsl46N70Zo.roa
File: wLGnrHGBYR9NBiPd_Xsl46N70Zo.roa (raw, json)
Hash identifier: C5LsdXOpMTCh/dcL6swJ7r4SvwowY/RhqwklkWD4BwE=
Subject key identifier: C0:B1:A7:AC:71:81:61:1F:4D:06:23:DD:FD:7B:25:E3:A3:7B:D1:9A
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018847825927129280712BB489C0C7D7F63F
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wLGnrHGBYR9NBiPd_Xsl46N70Zo.roa
Signing time: Tue 23 May 2023 07:28:24 +0000
ROA not before: Tue 23 May 2023 07:28:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53356
IP address blocks: 62.60.216.0/22 maxlen: 24
213.176.2.0/23 maxlen: 24
62.60.168.0/21 maxlen: 24
213.176.6.0/23 maxlen: 24
62.60.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 05:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:47:82:59:27:12:92:80:71:2b:b4:89:c0:c7:d7:f6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 23 07:28:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0b1a7ac7181611f4d0623ddfd7b25e3a37bd19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:4c:af:73:cc:1e:03:38:9a:c2:82:d7:3a:
fd:8f:33:24:55:e8:8f:89:2a:e9:f8:61:ed:e0:44:
d0:73:45:f5:6a:8f:2b:72:b4:96:73:95:55:58:fe:
ab:d1:89:31:f7:51:9e:85:b5:ef:98:a2:dc:83:89:
45:21:46:f4:7e:72:5c:1c:d9:4e:27:b8:18:0a:f9:
93:22:f3:a6:06:66:5d:5b:c5:29:7d:78:93:e3:f1:
71:d7:3d:7f:9f:f2:d5:c9:e5:f9:a5:92:16:54:36:
89:e1:a6:51:ff:7c:df:da:d9:23:11:63:d1:a1:73:
f0:02:1f:c2:2d:ed:96:ca:2e:d1:1e:df:38:16:d3:
b1:8f:77:dd:c7:3d:3a:8e:91:8a:83:bc:76:25:9b:
00:fc:75:b8:03:bd:08:77:96:ff:ab:1c:c6:a3:8a:
07:a8:3f:74:83:1b:09:07:02:e2:ab:97:cc:b4:9b:
52:52:3d:35:11:22:98:93:8a:ee:c7:1d:b9:d1:24:
ff:9f:c6:aa:b4:55:97:6d:b8:fe:b7:d8:1d:f8:48:
64:2b:f4:9a:66:dd:0f:57:c2:19:6e:46:75:af:d5:
e7:ff:eb:f6:8d:5b:f5:6e:1c:4b:b3:8e:c7:c0:9b:
f6:7f:45:86:c2:ae:6a:58:34:31:f6:f0:9f:a6:3a:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B1:A7:AC:71:81:61:1F:4D:06:23:DD:FD:7B:25:E3:A3:7B:D1:9A
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wLGnrHGBYR9NBiPd_Xsl46N70Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.168.0/21
62.60.180.0/22
62.60.216.0/22
213.176.2.0/23
213.176.6.0/23
Signature Algorithm: sha256WithRSAEncryption
56:ac:72:57:32:c7:53:2f:87:24:4a:2d:25:73:0f:5d:a8:cb:
e4:a5:f4:ea:38:b9:f7:f4:bb:ec:86:45:db:8e:39:b4:da:6d:
87:bd:7f:41:72:1d:9f:5e:ca:e2:fd:0a:34:e5:c3:3b:20:ca:
97:54:50:c0:b7:fe:51:1a:8d:2a:8a:f7:f0:2c:60:07:d6:98:
b6:16:ff:d3:5c:f2:c4:a2:65:38:81:4b:46:b8:93:5f:0f:75:
8d:7a:be:3f:8c:4d:69:58:62:ad:98:71:dd:5d:54:26:8a:9a:
c5:91:79:17:00:79:3e:cf:e9:98:52:94:17:3b:5b:07:94:49:
02:cb:cf:8b:88:c7:ef:2f:ba:31:33:6f:45:80:f1:ed:8f:e5:
f6:1a:0b:31:29:9d:be:b5:32:31:06:02:cd:9b:fe:0f:b2:c4:
02:c4:a9:18:b6:50:9e:8f:4f:04:4a:ab:84:9e:ab:7f:cf:f9:
c1:67:fb:02:ac:1d:1b:0d:0d:67:29:cd:e1:cd:30:4a:23:2f:
3f:b1:c2:af:b7:2d:ac:46:27:a4:61:2e:ad:39:99:97:12:c9:
ee:d8:ed:c4:ea:76:5d:3c:3a:52:fb:7f:79:4d:b8:ac:dd:f8:
44:e2:65:21:d2:7a:46:37:b5:1d:71:22:04:3a:bc:a2:a1:ac:
40:d4:67:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org