Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/xRcEkrEuvO_htEN120_UUqB8zPM.roa
File: xRcEkrEuvO_htEN120_UUqB8zPM.roa (raw, json)
Hash identifier: 3l0RlIra2UDo9c8Q2QB0nf+aLOEZKRafGTOlUYIqzFM=
Subject key identifier: C5:17:04:92:B1:2E:BC:EF:E1:B4:43:75:DB:4F:D4:52:A0:7C:CC:F3
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01916F66F0FDF238BDCA29B5035E2F155481
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/xRcEkrEuvO_htEN120_UUqB8zPM.roa
Signing time: Tue 20 Aug 2024 10:48:22 +0000
ROA not before: Tue 20 Aug 2024 10:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64458
IP address blocks: 62.60.148.0/22 maxlen: 24
62.60.180.0/22 maxlen: 24
62.60.196.0/22 maxlen: 24
62.60.244.0/22 maxlen: 24
62.60.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Aug 2024 09:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:66:f0:fd:f2:38:bd:ca:29:b5:03:5e:2f:15:54:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 20 10:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5170492b12ebcefe1b44375db4fd452a07cccf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:32:dc:4c:c5:ec:8f:96:46:38:18:96:46:
01:dd:6c:0c:1e:14:99:cb:54:cf:a3:5f:72:f5:6d:
7a:37:14:29:f1:67:cf:b1:c1:27:3e:b3:93:11:38:
83:b8:70:81:3a:99:ee:61:10:54:67:62:0f:10:07:
e4:63:d2:07:62:bc:5d:4e:58:63:05:b2:d9:a3:8c:
0b:ab:67:45:2d:93:61:c9:82:f5:07:0c:5b:8c:02:
cd:3a:43:dd:c1:3b:e8:81:7b:76:ad:fa:ec:43:72:
bb:20:c3:75:9c:88:95:4c:7a:40:f3:48:26:9e:94:
b0:70:5c:b2:85:e3:b0:f6:9f:b8:5c:de:c3:ee:84:
5a:9f:f2:6b:b7:1b:58:24:d1:05:bf:cd:8a:98:de:
60:5d:40:c7:63:8d:40:58:7d:f2:80:94:fc:4f:30:
8c:5a:a2:d2:45:94:ff:52:b3:1d:f7:20:f7:51:70:
2e:d3:17:8b:26:1d:66:5b:7f:05:6c:72:25:91:30:
da:bb:c8:3f:e5:22:a8:f0:b5:c4:26:0a:dc:f8:ca:
a0:98:ee:c0:11:9c:b0:f1:f8:52:e3:ea:c7:1f:de:
07:84:89:40:b3:95:fd:b7:6a:da:cb:0b:ff:63:c3:
18:2b:06:50:3e:8a:95:c7:1d:b4:02:e5:0d:14:19:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:17:04:92:B1:2E:BC:EF:E1:B4:43:75:DB:4F:D4:52:A0:7C:CC:F3
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/xRcEkrEuvO_htEN120_UUqB8zPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0/22
62.60.180.0/22
62.60.196.0/22
62.60.244.0-62.60.251.255
Signature Algorithm: sha256WithRSAEncryption
af:8c:09:84:64:b9:9c:a4:39:df:63:e5:c4:f5:7b:8f:5b:1c:
61:f2:ae:a2:4d:6a:1d:a1:ee:90:7a:a4:3a:da:38:b7:f1:49:
27:4b:33:47:af:a5:7a:1a:75:0a:ff:35:38:66:0a:60:77:9e:
ae:84:c3:81:7e:41:0e:bc:11:66:0d:9b:35:39:38:2b:05:b1:
71:2c:e8:ca:87:8a:69:02:2e:a6:8a:5a:e6:bc:2f:b9:29:19:
c2:96:83:02:8f:a6:c0:50:34:3f:51:d0:dc:c0:d0:86:c0:3d:
8e:5c:6d:79:6d:6b:78:15:80:c2:67:ab:92:d8:1b:93:d9:36:
99:06:e5:08:18:27:04:22:da:9c:e3:2f:2b:3e:99:04:1d:28:
f1:4c:e0:f6:1b:1d:e3:bd:b8:c6:55:bb:ee:9c:24:f7:ac:6c:
cb:92:07:4b:96:3a:9f:a0:64:a2:ad:8a:14:79:fd:2e:1d:28:
4a:5c:e0:4d:04:aa:d1:38:75:bc:28:e2:82:8a:47:c1:a4:d3:
fa:9d:d6:e7:c6:37:05:f7:2c:b5:98:cf:ea:93:f7:21:01:5c:
90:3d:f6:c5:5a:4a:50:0c:6c:4b:82:cf:87:c8:e0:1c:7c:7b:
36:b2:fa:af:e0:78:07:4f:d1:45:40:34:4e:e8:e3:c3:75:4f:
38:eb:2f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 13:04:10 2024 by rpki-client on console-ams.rpki-client.org