Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/y4GDwK3qgWSXFOK1MbItwXjXdPg.roa
File: y4GDwK3qgWSXFOK1MbItwXjXdPg.roa (raw, json)
Hash identifier: Vc8/NKNzcX5ZFV0TqjzJzonIxxJXNIWI8KsN2HUe2dY=
Subject key identifier: CB:81:83:C0:AD:EA:81:64:97:14:E2:B5:31:B2:2D:C1:78:D7:74:F8
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019188DBA99BA486FA7553CE824AFB57DDBD
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/y4GDwK3qgWSXFOK1MbItwXjXdPg.roa
Signing time: Sun 25 Aug 2024 09:26:22 +0000
ROA not before: Sun 25 Aug 2024 09:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.152.0/22 maxlen: 24
62.60.156.0/22 maxlen: 24
62.60.240.0/22 maxlen: 24
213.176.72.0/23 maxlen: 24
213.176.92.0/22 maxlen: 24
213.176.112.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 04:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:88:db:a9:9b:a4:86:fa:75:53:ce:82:4a:fb:57:dd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 25 09:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb8183c0adea81649714e2b531b22dc178d774f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:43:a6:1d:e0:80:6a:19:19:2d:80:c3:6c:
a4:a2:e3:b5:87:fe:9a:38:b0:68:ee:51:41:6b:18:
54:a8:a7:79:69:4c:ae:1c:eb:ef:e1:d1:ef:a3:f8:
e7:20:76:a9:c4:68:f0:a7:d7:a1:c6:52:b0:3b:86:
28:6d:b2:d5:11:d3:78:56:2a:ed:93:4a:f6:78:c0:
60:be:3d:0f:53:f2:57:25:08:12:b7:d3:32:d9:72:
08:08:6b:ca:d4:d0:a9:3a:e8:34:af:6c:89:e3:8e:
9e:33:71:9e:09:a3:75:58:77:8a:24:5b:29:4d:17:
9c:27:8a:9e:02:7a:4e:e5:42:b3:46:92:df:49:e1:
3e:92:e3:dc:99:bb:07:8e:99:bc:44:3a:6d:d6:14:
d5:f2:69:94:f6:13:b6:96:e8:e9:dd:00:e2:27:df:
e3:74:f9:b8:4f:91:fb:f1:28:7b:9e:52:98:30:b9:
6a:2b:3d:af:d7:91:e6:50:17:d7:50:68:36:56:10:
f4:77:cb:f3:45:c2:81:9f:70:b0:ab:98:d3:0c:00:
19:13:8a:04:61:f0:66:f6:82:16:ad:b0:08:53:71:
d3:71:f1:b6:09:4b:7c:30:a9:93:e8:84:f7:2b:d6:
be:56:a4:90:a3:a7:5f:55:14:23:2f:46:f8:a2:7e:
55:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:81:83:C0:AD:EA:81:64:97:14:E2:B5:31:B2:2D:C1:78:D7:74:F8
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/y4GDwK3qgWSXFOK1MbItwXjXdPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.152.0/21
62.60.240.0/22
213.176.72.0/23
213.176.92.0/22
213.176.112.0/21
Signature Algorithm: sha256WithRSAEncryption
08:19:97:c8:6c:0d:83:87:34:d0:53:08:1e:44:24:b3:05:14:
98:e3:d3:e2:1c:65:fa:d5:e6:ff:e7:75:5f:7a:f2:f5:78:af:
2e:9c:b9:06:01:d0:a3:8c:59:92:4d:52:ba:cd:13:23:3a:15:
89:45:98:3f:ea:19:14:52:b6:4a:2a:55:b7:20:0f:96:0c:bf:
0b:8a:c1:a5:ae:9a:a8:14:7e:89:5c:8c:a6:3e:cc:14:4f:36:
5f:a9:cd:53:3c:65:5d:36:ef:37:2f:81:c9:21:d1:0f:36:f9:
a9:85:24:ee:58:fb:e6:5a:7f:2c:19:7a:22:19:59:02:0a:b4:
51:69:f9:73:7a:2f:ad:ce:7a:f5:ea:94:b9:8b:d0:73:f2:80:
ee:18:78:9e:1a:fb:9f:ee:54:1e:14:e2:71:1d:42:ab:89:ac:
8e:be:96:1e:1e:c4:22:95:e0:d6:24:ab:10:9b:a5:21:29:b6:
74:6a:82:36:a4:4e:67:20:50:9f:eb:dc:7e:f7:d6:c3:bf:cf:
fd:1c:9e:bc:87:f7:e4:d3:76:0c:e0:73:a6:83:20:ce:66:aa:
8b:bb:83:58:90:37:fb:2d:08:bd:49:a0:1d:d0:49:f1:30:c3:
ff:e7:40:fc:ce:c3:cf:fe:16:2a:21:cc:64:04:82:a8:22:59:
2f:d1:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 06:17:24 2024 by rpki-client on console-ams.rpki-client.org