Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yS1LpS--rY_AUNfeu9nchOxsaqQ.roa
File: yS1LpS--rY_AUNfeu9nchOxsaqQ.roa (raw, json)
Hash identifier: dJW3zTjBAAmx3nHd/luCv1LvzAKNnnyd0uMXSUeLxlo=
Subject key identifier: C9:2D:4B:A5:2F:BE:AD:8F:C0:50:D7:DE:BB:D9:DC:84:EC:6C:6A:A4
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019188D54155D1567DBB2B23389B67872106
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yS1LpS--rY_AUNfeu9nchOxsaqQ.roa
Signing time: Sun 25 Aug 2024 09:19:22 +0000
ROA not before: Sun 25 Aug 2024 09:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 62.60.148.0/22 maxlen: 24
62.60.196.0/22 maxlen: 24
62.60.244.0/22 maxlen: 24
62.60.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 19:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:88:d5:41:55:d1:56:7d:bb:2b:23:38:9b:67:87:21:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 25 09:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c92d4ba52fbead8fc050d7debbd9dc84ec6c6aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:f9:b0:7d:16:70:0f:54:83:b2:a3:2e:bf:
1b:93:5d:e2:6e:88:7d:d8:47:42:ab:d0:c3:5b:89:
ae:a5:9e:aa:56:17:70:25:a7:b0:5d:06:26:15:ea:
a0:b4:4e:ac:48:dc:0d:68:ea:44:fc:bc:f9:84:60:
94:3d:8a:ff:f6:41:63:6d:c8:aa:d7:4e:14:36:ae:
fd:1c:c3:52:3c:fb:01:ed:79:f7:f2:0f:ca:c2:c4:
a0:c8:55:2d:fc:f1:8c:0d:55:5e:7e:9e:ac:a6:a5:
34:de:02:57:14:ca:c9:dc:f3:24:a2:ad:60:67:fc:
d8:2b:6e:42:86:93:0b:4b:68:4e:6d:1f:04:6e:ee:
1b:6a:22:22:6b:f0:05:f4:91:82:1f:b4:8d:c9:31:
69:79:6b:96:b1:1c:fb:78:67:0e:96:91:50:88:fa:
c1:3c:8a:9b:c7:08:2e:36:4c:52:c3:68:17:ee:e4:
55:e2:e8:5d:ea:d4:7d:27:8e:5e:e1:b9:84:f8:f4:
b0:39:f8:6a:6b:ae:8c:8f:40:e7:8d:c1:88:68:b4:
d1:10:5c:b5:49:3e:ad:19:66:db:2a:cc:d3:77:9d:
39:f6:c9:51:33:74:8f:1e:7f:7c:b2:d2:c9:2e:1d:
53:9b:05:67:09:76:01:28:79:51:2e:2e:e4:47:73:
bc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2D:4B:A5:2F:BE:AD:8F:C0:50:D7:DE:BB:D9:DC:84:EC:6C:6A:A4
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yS1LpS--rY_AUNfeu9nchOxsaqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0/22
62.60.196.0/22
62.60.244.0-62.60.251.255
Signature Algorithm: sha256WithRSAEncryption
45:9f:13:ea:c7:e4:2f:23:c9:e8:b2:b6:54:c9:40:05:30:7d:
5d:4b:9b:63:c0:1b:ed:7d:cb:5c:87:a1:33:29:1d:34:9f:3f:
09:27:84:7a:fc:a4:5a:3b:37:c9:48:28:0c:f9:9b:b1:2f:b2:
0b:8d:86:03:41:95:78:a8:b1:04:b7:28:a7:a5:d7:fc:20:30:
a3:79:64:94:3e:d3:bc:1c:7d:91:ff:56:93:22:6c:ab:5d:e3:
89:19:ac:23:ff:e5:60:fe:08:62:88:54:aa:df:11:5d:ba:19:
79:ad:3b:f2:d4:15:11:61:3a:9d:b2:75:2e:77:f7:1b:73:ef:
d5:78:31:c9:e2:76:fb:12:58:b0:ed:96:08:fd:e3:1d:eb:d6:
0d:0f:b5:87:0f:0e:e7:60:00:80:f5:06:26:65:9d:5b:b7:ab:
1c:7d:2d:dd:d6:6f:93:4f:68:7f:07:c1:3b:1e:54:2f:95:c2:
c2:c6:50:52:38:04:95:8a:f6:ad:4a:65:c6:6d:16:40:86:8b:
24:a4:e9:17:7e:f4:c7:82:ce:41:9f:05:9c:e0:a8:92:cb:03:
ba:a4:7b:b5:3d:68:b9:97:a2:ea:4d:8c:bc:66:29:be:f6:52:
27:78:6b:62:33:e5:5f:ad:02:c5:03:e2:67:34:22:47:70:8d:
b8:32:23:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 21:41:42 2024 by rpki-client on console-fra.rpki-client.org