Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/0VvdoXv6z4oP9gnZSvHCGE1uRxA.roa
File: 0VvdoXv6z4oP9gnZSvHCGE1uRxA.roa (raw, json)
Hash identifier: DuDFT0KGfqpt2OlZOywVq03x2dPtSg+TN3HeBB8emj0=
Subject key identifier: D1:5B:DD:A1:7B:FA:CF:8A:0F:F6:09:D9:4A:F1:C2:18:4D:6E:47:10
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0191EBC5B698594D0D7BF8D0613DD2C03769
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/0VvdoXv6z4oP9gnZSvHCGE1uRxA.roa
Signing time: Fri 13 Sep 2024 14:24:48 +0000
ROA not before: Fri 13 Sep 2024 14:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 62.171.228.0/23 maxlen: 23
62.171.230.0/23 maxlen: 23
62.171.248.0/23 maxlen: 23
62.171.250.0/23 maxlen: 23
217.180.18.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 26 Sep 2024 14:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:eb:c5:b6:98:59:4d:0d:7b:f8:d0:61:3d:d2:c0:37:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Sep 13 14:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d15bdda17bfacf8a0ff609d94af1c2184d6e4710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:4f:e0:0f:f6:2f:30:4a:ab:52:b8:a9:87:
8f:2f:f8:d3:db:80:4e:6f:2d:5f:7c:94:63:47:e4:
de:bb:ae:ea:cf:aa:21:da:d0:85:b9:58:39:ac:0a:
29:5f:18:38:92:12:a1:f5:f1:89:ef:31:15:fd:41:
41:96:ac:a0:04:68:1e:5f:f6:a6:22:70:4e:24:a6:
96:ad:cf:a4:22:a9:00:e7:52:5e:86:4e:e1:5b:61:
26:a7:12:42:cc:39:b9:51:ee:31:82:2a:05:40:8f:
60:ce:6e:2b:cf:94:df:b8:fb:d2:3a:6b:6a:aa:c2:
fc:9b:45:8a:8f:72:61:a1:fb:ab:b2:ef:5d:88:2e:
e3:f2:d2:30:07:68:16:05:fb:6e:7e:9e:96:a9:84:
fa:d6:08:94:a7:25:6d:6c:c4:53:71:62:a2:5f:2a:
60:64:4b:31:a5:29:a9:be:72:00:55:47:3d:b4:82:
6e:cd:57:08:6c:04:fc:68:32:bb:3a:ac:ae:de:f1:
45:92:1d:b4:a0:3d:3a:0f:34:5d:66:55:bb:53:34:
a7:d7:c3:2c:22:59:5b:c5:64:f6:2b:35:fd:43:f2:
20:7b:b6:a3:83:63:e0:9e:5e:46:51:9a:93:20:3b:
79:0d:83:e2:f8:6c:39:cf:3c:64:c9:de:91:88:b4:
0d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5B:DD:A1:7B:FA:CF:8A:0F:F6:09:D9:4A:F1:C2:18:4D:6E:47:10
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/0VvdoXv6z4oP9gnZSvHCGE1uRxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.228.0/22
62.171.248.0/22
217.180.18.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:08:c3:5d:c1:07:f7:8a:35:81:e6:73:aa:d5:81:c2:53:19:
0c:cb:cc:c6:bb:16:f0:a8:08:eb:3a:25:13:fd:8d:aa:88:62:
88:7c:e2:e2:2b:b1:36:9e:18:d3:6b:58:ea:91:d8:22:67:33:
0e:7a:8f:89:7b:77:2f:58:6f:bc:0b:3b:2d:9a:b4:df:f2:f3:
87:23:72:c3:e8:3a:e6:62:d1:79:ed:5a:75:9a:f6:bc:29:35:
d6:48:f8:d8:56:2b:9f:f8:ae:46:9e:95:f6:40:6d:8f:bb:76:
4e:50:9d:42:12:3d:cd:04:70:1c:c7:d2:30:fc:72:c9:d3:c5:
ae:a8:2f:af:e6:f0:69:f1:a1:9f:cc:ae:3b:c6:ed:89:f5:85:
c6:d3:ae:28:c4:c8:f6:de:0e:35:44:bc:8b:cb:b1:85:5d:1f:
72:cd:a2:51:f9:3b:19:c0:2a:e7:27:35:f5:7b:0d:6d:6f:2b:
84:5f:2e:a2:cc:e3:a7:cd:47:9b:2b:49:ce:13:b5:d4:be:c0:
bf:bb:f2:be:70:b0:2f:85:6c:47:52:21:f3:c5:7f:0d:64:75:
f6:73:8f:a0:60:d8:4d:f9:60:67:11:0d:6b:7a:89:a0:33:bd:
db:6f:72:e0:af:e8:9e:a4:e3:15:2f:9f:eb:81:9a:4b:6c:a5:
e5:a9:a3:49
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZHrxbaYWU0Ne/jQYT3SwDdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjQwOTEzMTQyNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTViZGRhMTdiZmFjZjhhMGZmNjA5ZDk0YWYxYzIxODRkNmU0NzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNlP4A/2LzBKq1K4qYePL/jT24BO
by1ffJRjR+Teu67qz6oh2tCFuVg5rAopXxg4khKh9fGJ7zEV/UFBlqygBGgeX/am
InBOJKaWrc+kIqkA51Jehk7hW2EmpxJCzDm5Ue4xgioFQI9gzm4rz5TfuPvSOmtq
qsL8m0WKj3Jhofursu9diC7j8tIwB2gWBftufp6WqYT61giUpyVtbMRTcWKiXypg
ZEsxpSmpvnIAVUc9tIJuzVcIbAT8aDK7Oqyu3vFFkh20oD06DzRdZlW7UzSn18Ms
IllbxWT2KzX9Q/Ige7ajg2Pgnl5GUZqTIDt5DYPi+Gw5zzxkyd6RiLQNxQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNFb3aF7+s+KD/YJ2UrxwhhNbkcQMB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvMFZ2ZG9YdjZ6NG9QOWduWlN2SENHRTF1UnhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCPqvkAwQC
Pqv4AwQB2bQSMA0GCSqGSIb3DQEBCwUAA4IBAQA+CMNdwQf3ijWB5nOq1YHCUxkM
y8zGuxbwqAjrOiUT/Y2qiGKIfOLiK7E2nhjTa1jqkdgiZzMOeo+Je3cvWG+8Czst
mrTf8vOHI3LD6DrmYtF57Vp1mva8KTXWSPjYViuf+K5GnpX2QG2Pu3ZOUJ1CEj3N
BHAcx9Iw/HLJ08WuqC+v5vBp8aGfzK47xu2J9YXG064oxMj23g41RLyLy7GFXR9y
zaJR+TsZwCrnJzX1ew1tbyuEXy6izOOnzUebK0nOE7XUvsC/u/K+cLAvhWxHUiHz
xX8NZHX2c4+gYNhN+WBnEQ1reomgM73bb3Lgr+iepOMVL5/rgZpLbKXlqaNJ
-----END CERTIFICATE-----
Generated at Thu Sep 26 19:18:10 2024 by rpki-client on console-ams.rpki-client.org