Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wvD2i-GcRdQCmlrNHNZCbOw0U8A.roa
File: wvD2i-GcRdQCmlrNHNZCbOw0U8A.roa (raw, json)
Hash identifier: WbWRciBOvSHSR6RHTTOcDbj2FqjmK3rs+LbHDVRpceE=
Subject key identifier: C2:F0:F6:8B:E1:9C:45:D4:02:9A:5A:CD:1C:D6:42:6C:EC:34:53:C0
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CCA29C20F1EEA361D6CAA33CADCE9A613
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wvD2i-GcRdQCmlrNHNZCbOw0U8A.roa
Signing time: Tue 02 Jan 2024 12:33:03 +0000
ROA not before: Tue 02 Jan 2024 12:33:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 62.60.216.0/22 maxlen: 24
213.176.64.0/22 maxlen: 24
62.60.146.0/23 maxlen: 24
62.60.156.0/22 maxlen: 24
213.176.6.0/24 maxlen: 24
213.176.6.0/23 maxlen: 23
213.176.120.0/23 maxlen: 24
213.176.126.0/23 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jan 2024 20:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c2:0f:1e:ea:36:1d:6c:aa:33:ca:dc:e9:a6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 12:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2f0f68be19c45d4029a5acd1cd6426cec3453c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d0:c6:d8:16:76:18:dd:06:03:2a:84:1a:3e:
94:39:94:9f:11:6d:54:62:59:83:01:82:b9:ac:5f:
6f:82:09:f6:ca:a5:d2:31:68:34:41:e1:94:36:89:
1f:9d:19:90:5a:3d:ab:12:fb:0b:e3:bb:80:09:87:
d0:bd:ee:bd:87:3f:8d:40:5b:09:86:a3:88:bf:d7:
81:62:5f:b4:b4:f6:fe:8b:1c:9e:6e:2a:62:07:39:
e9:dc:0c:00:63:8e:88:8e:a9:b8:68:bf:5e:e9:93:
c4:4b:66:45:8d:5b:8f:92:e1:22:fd:4d:b9:02:ae:
8a:db:15:4f:7a:df:f6:15:58:11:3a:31:0a:31:87:
56:90:df:36:41:11:4e:7a:cf:f3:b8:73:6b:82:f5:
17:a0:9a:25:dd:c1:b7:38:ae:d5:e1:e1:b7:09:04:
6c:7a:25:0c:bf:5f:d3:1b:63:57:3b:17:b4:04:12:
53:91:07:45:5c:c2:ca:da:60:e8:41:95:a5:2d:b2:
f1:66:5c:6f:66:dc:24:bf:1e:ac:d3:7d:91:70:ff:
3a:73:77:58:9a:21:94:04:d4:21:91:7d:e6:6b:e8:
0a:df:97:77:8a:36:86:e4:57:16:0b:3f:b2:49:90:
55:88:c3:68:8b:28:4b:06:f9:c8:5c:c8:81:13:40:
a4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F0:F6:8B:E1:9C:45:D4:02:9A:5A:CD:1C:D6:42:6C:EC:34:53:C0
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wvD2i-GcRdQCmlrNHNZCbOw0U8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0/23
62.60.156.0/22
62.60.184.0-62.60.195.255
62.60.216.0/22
213.176.6.0/23
213.176.64.0/22
213.176.120.0/23
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
97:5d:30:c7:c8:bf:26:eb:1a:dc:73:44:b1:64:a5:d7:cc:b0:
90:a1:a4:c6:e7:ca:0f:51:48:05:08:c7:f9:0d:b2:15:cb:4f:
f1:94:8b:47:3b:8b:5c:bd:49:29:66:96:2e:03:70:9b:6b:bf:
7e:65:25:be:60:4b:d6:fe:d1:2b:6a:d9:4d:39:36:8b:a2:94:
92:2a:18:03:5c:f5:20:5c:27:b6:51:d0:7a:7d:9b:48:66:51:
0b:03:c8:4a:57:28:b4:9c:e6:22:c6:bb:24:bb:71:1b:51:7c:
c2:01:5e:0b:96:ba:ec:33:51:db:b5:82:de:9a:17:e5:ce:2e:
b6:26:70:1e:45:4c:a9:20:4b:96:58:e4:9f:8e:4a:11:a3:c6:
dc:a3:18:f8:36:2a:36:72:2a:01:51:af:1d:4d:a9:be:1b:03:
f6:ae:c9:fd:93:5b:a7:c2:49:0e:51:8b:cf:63:d8:dc:5d:b3:
ad:2f:f2:6a:22:86:b2:d2:89:3e:97:b1:e7:f5:0d:ec:00:bd:
c9:bc:05:0b:0e:c3:22:3b:4f:b0:02:81:d2:f3:2a:8e:ac:d0:
3c:cf:74:2e:30:59:93:81:75:7b:d8:df:ac:69:e6:a1:3d:40:
ca:13:37:c0:24:c6:2e:ef:93:e8:e9:bf:d4:37:1f:a2:6b:09:
86:0a:20:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org