Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wLvUOtShTVGmEEbL0ull6UfgInw.roa
File: wLvUOtShTVGmEEbL0ull6UfgInw.roa (raw, json)
Hash identifier: PfvzP0iOchdZfCY+CTebPAiaKNRN+N95FDCYjX/gdnY=
Subject key identifier: C0:BB:D4:3A:D4:A1:4D:51:A6:10:46:CB:D2:E9:65:E9:47:E0:22:7C
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018B1D5C14E43E9D58D956ACB7E5BDC2C654
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wLvUOtShTVGmEEbL0ull6UfgInw.roa
Signing time: Wed 11 Oct 2023 06:10:55 +0000
ROA not before: Wed 11 Oct 2023 06:10:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.216.0/22 maxlen: 24
62.60.220.0/22 maxlen: 24
62.60.152.0/21 maxlen: 24
62.60.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Oct 2023 03:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:5c:14:e4:3e:9d:58:d9:56:ac:b7:e5:bd:c2:c6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 11 06:10:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0bbd43ad4a14d51a61046cbd2e965e947e0227c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:d8:e5:3b:7a:2a:37:a9:09:fe:3f:7a:c2:
ad:93:b3:e1:de:90:b8:fe:99:40:fb:0d:fc:7f:93:
ac:70:96:14:6d:e1:56:1c:f0:82:4e:51:77:57:82:
82:26:50:37:d7:24:8d:79:09:2d:5a:4c:fd:9f:c1:
82:85:55:92:30:c5:4b:08:53:b6:76:16:e2:9c:a5:
72:67:97:e2:f3:a6:ea:98:b6:b0:fd:9f:67:18:f0:
67:a1:ed:fd:3b:b2:03:4a:c9:33:c2:e8:4e:f9:f8:
27:60:79:bf:25:8e:86:e1:66:71:46:58:9a:72:04:
b5:01:68:40:05:3c:55:99:f6:aa:09:09:c2:85:5f:
2d:ae:5e:c6:f0:b0:b0:3a:0d:4b:6d:0a:35:5f:29:
07:35:0a:65:c3:df:f1:61:aa:8a:21:c7:e5:f5:1b:
d2:84:67:57:b3:f7:d9:8f:6c:6e:f7:42:86:3f:b5:
ee:5c:bc:f8:0a:ff:df:82:e9:62:58:e0:e6:a1:bc:
33:52:dc:c2:75:ab:62:79:a8:d8:0a:f5:96:88:d5:
30:47:64:48:a9:82:3e:60:7c:96:44:02:c8:c7:d2:
58:6a:b7:e8:b3:46:0b:eb:f6:54:f8:1b:a3:19:ec:
a8:5c:cb:a7:95:02:3e:ce:f1:92:45:fb:d3:47:f9:
91:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BB:D4:3A:D4:A1:4D:51:A6:10:46:CB:D2:E9:65:E9:47:E0:22:7C
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wLvUOtShTVGmEEbL0ull6UfgInw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.152.0/21
62.60.180.0/22
62.60.216.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:72:20:ed:aa:14:cb:92:03:35:53:3e:c3:2a:76:c3:ef:ef:
13:52:8e:84:87:5b:3c:95:a5:6d:38:9b:e9:e1:0d:e6:c1:5a:
4d:76:69:29:17:3c:c0:28:38:e6:ad:4f:3a:86:e3:ed:05:d2:
b0:04:ff:f6:34:67:91:37:b6:69:4b:7a:e4:ac:f8:39:f2:63:
d0:52:de:54:c9:2d:44:4d:25:55:a7:78:db:e4:1d:56:15:60:
92:cf:f2:bc:c5:35:10:3a:31:3f:ca:9f:35:b7:42:07:24:63:
59:bc:17:cb:7c:fd:c0:a7:ae:89:0e:90:ee:7f:0c:8a:f2:c6:
9a:de:7b:e6:fd:92:91:4d:91:a2:51:56:7b:b4:cc:86:91:92:
07:f3:01:f1:55:da:86:fb:ff:64:65:6d:17:e1:74:8f:0d:b3:
22:66:e0:45:d2:f8:9c:de:d7:72:b3:31:fd:00:c9:bc:a3:58:
9c:41:33:f9:6b:bd:04:b9:6a:44:29:46:24:f9:b4:07:e3:75:
a9:de:ab:47:80:fe:3b:0a:2d:99:5c:ac:14:8b:90:13:47:5d:
c7:f1:54:1f:a3:66:3d:ba:4e:e1:a6:01:3b:98:e1:54:df:4e:
a5:3b:2e:76:a8:8b:00:96:d0:07:18:d2:df:81:7a:56:7e:20:
92:94:39:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org