Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/zG9c-f53r3U_s6aAC_5SgT0JMZE.roa
File: zG9c-f53r3U_s6aAC_5SgT0JMZE.roa (raw, json)
Hash identifier: hOnGu0nDPb5hzyasR1eOxBTT9SC/AsAk6/Zr3EL4C2M=
Subject key identifier: CC:6F:5C:F9:FE:77:AF:75:3F:B3:A6:80:0B:FE:52:81:3D:09:31:91
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0191DFC8DE2E8ABC59BAC2C7872BE7E38403
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/zG9c-f53r3U_s6aAC_5SgT0JMZE.roa
Signing time: Wed 11 Sep 2024 06:32:48 +0000
ROA not before: Wed 11 Sep 2024 06:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 62.60.150.0/24 maxlen: 24
62.60.152.0/22 maxlen: 24
62.60.156.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 05:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:df:c8:de:2e:8a:bc:59:ba:c2:c7:87:2b:e7:e3:84:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 11 06:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc6f5cf9fe77af753fb3a6800bfe52813d093191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a9:12:dd:14:a4:e2:84:b4:a5:02:97:36:51:
ae:fe:df:f5:cf:5d:e4:3a:ba:d2:05:14:5c:f4:2f:
ca:4f:c6:3c:0a:90:fc:1d:5e:8e:3b:ef:a2:9b:62:
16:f0:76:03:86:96:22:00:ee:d6:84:56:9e:20:b4:
9d:03:eb:89:7e:a9:93:3a:dd:0a:6a:d2:0d:0d:c7:
f3:4c:54:e2:ce:90:16:4f:44:14:22:b6:14:5a:e2:
24:a4:46:ce:56:86:90:88:bf:10:1f:cc:08:03:28:
cd:94:7a:e6:40:01:17:b3:63:39:fb:b5:e2:b5:98:
10:00:d5:67:ad:30:97:d2:31:0c:cc:30:01:ba:5e:
00:f8:08:d4:11:62:83:9b:f3:21:a5:9f:b4:d2:1a:
69:49:bf:39:e1:67:c4:51:2a:23:2d:47:f7:91:86:
bf:18:3b:56:f0:4b:89:bb:a3:93:ed:a3:34:09:57:
31:6f:11:97:2f:a0:e2:48:fd:64:79:a4:29:1f:1a:
62:53:9c:bc:41:2c:b8:2e:04:c6:b7:f5:6d:df:05:
f4:9f:93:ef:1e:56:3a:4c:68:1b:bc:29:59:95:fa:
bb:b8:c5:47:62:75:84:d8:b9:d2:00:5e:8d:b7:31:
ba:da:32:9a:b9:a2:2e:ee:b1:8e:71:05:c1:bc:d9:
84:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6F:5C:F9:FE:77:AF:75:3F:B3:A6:80:0B:FE:52:81:3D:09:31:91
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/zG9c-f53r3U_s6aAC_5SgT0JMZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.150.0/24
62.60.152.0/21
Signature Algorithm: sha256WithRSAEncryption
62:7b:25:87:6b:6d:e1:48:e9:2f:14:61:fa:39:69:2b:46:7e:
c7:f9:05:a7:db:ca:77:72:ae:d7:62:69:66:4f:63:72:3a:e7:
0f:61:97:62:cd:d3:08:a8:c1:ce:70:d2:f7:ac:67:b4:3b:96:
2a:ce:34:15:0b:6a:4f:94:f9:af:7d:15:c2:57:55:2b:57:be:
24:1e:3b:57:f9:a8:dc:72:f4:ff:bf:76:09:f0:b5:78:63:0d:
63:da:64:5a:cf:1f:f1:36:1f:17:b5:e3:dd:82:8f:38:43:63:
c8:42:cc:82:34:a8:17:8c:4f:39:b6:b9:0e:34:b3:05:98:62:
e7:88:31:24:d2:77:56:88:10:b8:54:16:c3:01:cf:6d:26:65:
e4:d3:5f:3a:57:e2:cb:8c:af:ef:dc:64:9a:f8:f0:b8:ac:51:
78:aa:fe:10:aa:f1:5f:1a:e7:91:20:1a:32:e4:23:ff:ea:dd:
2b:fa:a0:1e:a5:6e:1f:32:7c:b3:74:2f:8e:ae:34:89:54:a6:
5a:bc:b9:5d:21:8d:0f:05:45:bd:8f:3d:2f:6b:dc:7f:0d:f7:
90:2f:3f:bb:b1:54:32:13:b5:e7:8d:4a:6f:0e:a0:21:2b:e5:
49:27:b3:f2:f0:fa:79:e3:b0:8e:59:87:63:30:d7:bd:ee:dd:
94:13:d7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 07:42:46 2024 by rpki-client on console-fra.rpki-client.org