Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yde9YZfHkUZFxWzC-pw3cehLwMQ.roa
File: yde9YZfHkUZFxWzC-pw3cehLwMQ.roa (raw, json)
Hash identifier: vII0cQ/EFL83XBPQYm9jUHuLVoxWYGh3iacMW9Sp84g=
Subject key identifier: C9:D7:BD:61:97:C7:91:46:45:C5:6C:C2:FA:9C:37:71:E8:4B:C0:C4
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019006F7B1025EBD4F61DADBBB9B1FFACFB0
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yde9YZfHkUZFxWzC-pw3cehLwMQ.roa
Signing time: Tue 11 Jun 2024 11:03:34 +0000
ROA not before: Tue 11 Jun 2024 11:03:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 62.60.224.0/24 maxlen: 24
62.60.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jul 2024 07:54:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:f7:b1:02:5e:bd:4f:61:da:db:bb:9b:1f:fa:cf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 11 11:03:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9d7bd6197c7914645c56cc2fa9c3771e84bc0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2b:7b:82:20:0e:1d:d4:a7:c1:2c:58:6a:9c:
f4:3b:1b:e8:ad:0f:63:87:ba:17:83:37:47:67:22:
ea:d3:12:c6:64:5f:82:48:f3:88:3c:fb:3b:a7:25:
47:98:a6:57:06:f8:6b:13:80:32:2a:4d:64:d4:b0:
57:0d:e9:a9:ca:2f:f8:82:cf:87:6a:04:af:43:92:
ad:8f:e1:ee:3a:e2:f5:60:bc:6d:ae:48:ff:a8:a1:
91:c0:16:36:a7:19:ed:c6:0c:89:59:fd:e8:8a:31:
3c:98:1d:02:bb:b3:a7:49:51:ec:dd:25:a3:88:28:
81:be:64:3c:06:ff:01:d7:26:ca:6c:92:58:67:0d:
0b:fd:da:74:0d:d0:50:1f:06:32:52:e7:b3:df:22:
da:a9:24:85:6b:e5:c0:04:3c:6a:91:e3:45:a9:ea:
06:44:3c:76:cd:0d:23:26:e4:f0:93:cf:f3:90:47:
40:e9:a8:ca:52:f5:08:6b:e7:c7:60:4a:70:87:b0:
cc:91:0b:9c:d3:85:5f:ad:e1:eb:3f:86:2b:7a:8d:
0a:a0:24:7f:5e:1a:1a:19:bd:ce:82:36:70:42:91:
a5:7d:41:49:62:08:2f:91:23:cc:02:1d:de:24:c6:
80:dc:86:41:fa:0b:d1:0e:4f:6a:d0:ce:75:eb:19:
b1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D7:BD:61:97:C7:91:46:45:C5:6C:C2:FA:9C:37:71:E8:4B:C0:C4
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yde9YZfHkUZFxWzC-pw3cehLwMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.224.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:49:d3:cf:7a:c0:79:1b:04:16:e7:24:7e:44:db:fa:02:d4:
16:f3:59:fa:da:1d:34:39:c8:c1:fe:3a:04:2e:31:aa:74:02:
14:86:84:ae:07:9b:00:40:6f:7d:f1:49:c2:fb:11:86:71:3e:
48:be:23:6f:1c:ae:04:04:2f:43:58:d8:96:51:17:5f:05:80:
23:83:2c:e8:35:28:c4:fe:b3:94:27:fa:74:f0:fa:0c:26:1b:
6e:81:31:1c:cf:b1:df:eb:7e:9f:95:68:95:a6:ac:78:c3:1b:
09:ea:92:28:33:44:fa:03:a6:a9:a3:21:48:93:17:47:6f:b7:
f8:b8:10:60:07:79:1f:25:04:99:a8:ec:b5:63:cf:fe:3d:a2:
17:32:4e:9c:10:f8:a5:e4:ce:60:46:9b:3a:cb:4f:c0:d4:f4:
e2:9b:94:f8:67:b1:23:7f:c7:4a:1b:03:35:4c:bc:a8:b8:3e:
a3:77:7e:37:ea:24:ff:07:4c:a9:a8:9a:4e:9a:4c:27:ea:c7:
3d:19:73:f8:64:f9:6c:5f:7d:76:8a:af:59:cf:fd:cb:fb:48:
8c:fc:ca:6d:ae:61:b7:24:35:94:55:fe:3f:e0:70:b3:eb:89:
7c:86:19:a0:09:26:5e:7e:48:bf:1c:1a:5f:ed:2b:cf:21:b5:
e9:a2:49:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 09:46:35 2024 by rpki-client on console-ams.rpki-client.org