Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yfgYQNOP46ISrT0qeySOac-b5II.roa
File: yfgYQNOP46ISrT0qeySOac-b5II.roa (raw, json)
Hash identifier: u4Xws0nVajL9wo0TcSQO5yHB5oermMVAVnpiV2n0GU0=
Subject key identifier: C9:F8:18:40:D3:8F:E3:A2:12:AD:3D:2A:7B:24:8E:69:CF:9B:E4:82
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01927F3FABE84B0A674A6D979A27786D0C2E
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yfgYQNOP46ISrT0qeySOac-b5II.roa
Signing time: Sat 12 Oct 2024 05:42:12 +0000
ROA not before: Sat 12 Oct 2024 05:42:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 62.60.154.0/23 maxlen: 24
62.60.156.0/22 maxlen: 24
62.60.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 07:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7f:3f:ab:e8:4b:0a:67:4a:6d:97:9a:27:78:6d:0c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 12 05:42:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9f81840d38fe3a212ad3d2a7b248e69cf9be482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:90:c0:82:d1:eb:10:94:5d:39:54:96:6f:
cc:1e:4c:56:17:5d:42:62:3b:67:7c:3b:bf:c5:cc:
1c:1c:bb:bf:07:3b:3e:81:e2:64:41:27:70:15:c5:
f6:7a:dd:c7:2c:10:82:be:1c:57:e1:ae:02:d4:eb:
54:63:14:0a:e7:71:19:17:70:41:c3:89:9f:20:8f:
90:13:8c:b4:df:8a:5f:43:f2:3f:19:f6:12:36:d5:
c7:3e:1e:f0:6d:4e:49:ca:a9:2c:c3:1d:01:7f:b0:
70:1f:1d:41:12:48:c4:ae:59:ed:8f:20:bd:46:47:
0b:7c:a7:1c:cc:6e:06:16:9a:6d:22:6c:85:5e:d4:
aa:42:58:c9:26:4b:6f:66:cc:6d:95:21:7e:0a:98:
85:4b:78:ec:1a:67:3b:f4:79:17:96:df:1d:ed:27:
71:81:5b:a5:3b:d2:2c:c1:40:fc:6d:ad:99:fb:c2:
07:a5:d2:1b:1e:12:b2:7f:a9:4a:61:71:7e:03:ca:
68:15:80:2c:55:77:8a:22:22:c4:f2:d1:22:e5:86:
07:e0:93:c8:59:38:f0:8a:91:6d:fb:ce:cb:b1:ae:
fa:53:89:e7:90:89:f6:ef:25:eb:79:d2:1d:fb:9c:
96:e5:0d:74:7c:c3:44:46:ca:52:ed:10:e0:3c:48:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F8:18:40:D3:8F:E3:A2:12:AD:3D:2A:7B:24:8E:69:CF:9B:E4:82
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yfgYQNOP46ISrT0qeySOac-b5II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.154.0-62.60.159.255
62.60.236.0/22
Signature Algorithm: sha256WithRSAEncryption
00:4d:76:70:f7:7d:8f:ac:a1:7b:91:ed:62:00:80:e2:6a:80:
a8:9b:7b:aa:1e:5c:ee:20:57:83:7f:a6:c6:9d:bc:e8:42:6d:
f7:67:7b:b3:9b:fc:80:d4:57:71:5a:33:7e:4c:c5:12:53:f6:
a0:75:f2:0b:a8:54:3c:30:87:e9:c8:63:cb:a7:b8:dc:0b:04:
a4:8e:a8:fa:b0:1c:a4:96:52:e1:26:39:fd:4e:3b:87:3b:78:
b6:29:97:ea:4e:62:ac:49:a1:84:e0:66:19:38:56:e0:85:1f:
b3:bd:60:f1:e4:e6:df:38:be:16:9b:03:bf:41:0c:d4:65:71:
2d:53:74:31:42:47:96:d9:35:20:80:97:03:6b:00:6a:db:0b:
09:8f:c4:13:71:84:fb:34:c0:62:10:55:bb:c7:41:14:f4:05:
d4:83:4a:1d:77:4a:18:2b:d7:4a:3c:e0:5f:96:39:cd:c5:bf:
c8:52:84:78:f1:6e:ff:51:ee:a3:b8:08:2a:f2:13:d7:b7:b3:
34:e7:5b:9f:63:ed:95:7d:e0:36:6f:80:bc:82:24:4f:5b:a2:
f6:c6:72:68:0d:f5:94:cd:9e:5c:59:f8:e2:01:f1:27:c4:03:
ea:34:56:82:17:13:f7:10:86:75:e8:62:db:72:b8:a2:47:74:
0b:d8:b8:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 12 08:56:41 2024 by rpki-client on console-fra.rpki-client.org