Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/0ACJ4V5D5Ypp88Scwmuj8bUGQgE.roa
File: 0ACJ4V5D5Ypp88Scwmuj8bUGQgE.roa (raw, json)
Hash identifier: Tzp1qHVH7DtLIU0X5icOh/+Ibp0q3xjM4BNUDHXOtK0=
Subject key identifier: D0:00:89:E1:5E:43:E5:8A:69:F3:C4:9C:C2:6B:A3:F1:B5:06:42:01
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01920390B9A338EBA8ED598C41D2A87B24D5
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/0ACJ4V5D5Ypp88Scwmuj8bUGQgE.roa
Signing time: Wed 18 Sep 2024 05:17:49 +0000
ROA not before: Wed 18 Sep 2024 05:17:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 62.60.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 08:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:03:90:b9:a3:38:eb:a8:ed:59:8c:41:d2:a8:7b:24:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 18 05:17:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d00089e15e43e58a69f3c49cc26ba3f1b5064201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:5f:1a:02:bd:ea:d5:d7:be:79:87:e2:47:
4a:0b:8c:c7:e3:6d:37:aa:b5:47:f0:24:82:4a:f7:
a1:fd:f4:b7:42:f3:20:8a:f7:91:73:ee:22:10:f0:
94:4d:06:93:be:38:36:14:ad:69:a1:7c:28:9b:fb:
6c:24:5c:01:59:64:24:b7:fc:11:b3:a3:99:f7:1a:
b7:a6:cf:9d:43:b3:b4:09:88:c9:08:f5:f9:72:60:
00:e8:3e:9c:bd:e4:f2:7e:d7:7b:85:63:b1:6e:6a:
91:61:87:61:d7:da:13:31:67:e3:15:db:a7:5b:8d:
45:11:42:09:4a:67:d6:0c:aa:f9:70:63:52:1c:f4:
9f:ec:d9:be:ce:34:e1:58:5a:0a:03:9d:1a:a4:b4:
f2:6b:f7:9e:64:a9:5f:e6:7d:ba:84:7c:5f:47:1e:
6c:db:65:09:1f:f3:72:5d:41:91:ec:e7:4f:64:a2:
2f:14:34:49:99:6f:d3:70:cb:dd:28:b7:84:da:67:
ed:c7:39:fa:c3:6e:de:0d:08:6a:ce:32:e0:c9:1b:
9c:2c:19:4c:20:f7:e7:3c:36:93:56:5f:45:fe:4b:
61:95:20:e3:7e:87:62:ae:e6:26:14:58:50:99:be:
20:dc:94:a3:20:d0:67:3f:de:70:0d:f5:ed:53:09:
09:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:00:89:E1:5E:43:E5:8A:69:F3:C4:9C:C2:6B:A3:F1:B5:06:42:01
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/0ACJ4V5D5Ypp88Scwmuj8bUGQgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:6e:af:ae:9e:00:5b:eb:0a:5c:4c:fe:55:63:53:4e:fe:6e:
44:b1:07:9b:80:c8:7c:e1:62:32:14:fc:7e:3b:62:d5:74:0a:
3f:36:0e:8a:a5:c8:25:ce:e9:7b:28:88:f5:e6:00:a5:8b:75:
98:2a:0e:79:83:87:21:88:97:c7:df:b2:d3:57:8c:51:28:b1:
b9:0f:c0:ce:45:c6:35:a5:d0:54:65:88:72:85:b0:48:77:1e:
fa:df:fc:cc:d4:55:5b:68:ff:22:60:f0:8f:bc:d8:1b:89:62:
aa:52:bd:4d:75:e8:4e:90:3c:db:25:4b:e8:72:0a:ce:82:dc:
53:10:4b:f9:7c:35:9d:ab:96:71:2a:7f:4f:bb:0f:4a:ec:59:
e3:7c:64:a7:d8:5c:94:b5:ac:b0:77:94:ce:7d:f0:9d:ab:85:
bd:63:7a:04:d8:2e:e4:49:45:43:4e:c0:93:44:d8:90:c2:00:
d2:86:d4:e6:5f:e6:67:ff:d3:c8:f0:55:1c:1e:c3:d2:c0:a9:
1c:2f:eb:25:74:e1:03:8e:a4:cb:cf:2b:35:38:6d:0f:ad:04:
bd:a1:36:9a:7d:37:0b:1b:f5:96:45:80:ad:6b:ad:f7:7e:0e:
f5:70:1a:20:11:e7:23:d9:56:0a:e7:57:f2:a2:c6:a5:0c:54:
b2:7f:ec:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIDkLmjOOuo7VmMQdKoeyTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwOTE4MDUxNzQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDAwODllMTVlNDNlNThhNjlmM2M0OWNjMjZiYTNmMWI1MDY0MjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoBfGgK96tXXvnmH4kdKC4zH4203
qrVH8CSCSveh/fS3QvMgiveRc+4iEPCUTQaTvjg2FK1poXwom/tsJFwBWWQkt/wR
s6OZ9xq3ps+dQ7O0CYjJCPX5cmAA6D6cveTyftd7hWOxbmqRYYdh19oTMWfjFdun
W41FEUIJSmfWDKr5cGNSHPSf7Nm+zjThWFoKA50apLTya/eeZKlf5n26hHxfRx5s
22UJH/NyXUGR7OdPZKIvFDRJmW/TcMvdKLeE2mftxzn6w27eDQhqzjLgyRucLBlM
IPfnPDaTVl9F/kthlSDjfodiruYmFFhQmb4g3JSjINBnP95wDfXtUwkJXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNAAieFeQ+WKafPEnMJro/G1BkIBMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvMEFDSjRWNUQ1WXBwODhTY3dtdWo4YlVHUWdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPjzkMA0G
CSqGSIb3DQEBCwUAA4IBAQCobq+ungBb6wpcTP5VY1NO/m5EsQebgMh84WIyFPx+
O2LVdAo/Ng6Kpcglzul7KIj15gCli3WYKg55g4chiJfH37LTV4xRKLG5D8DORcY1
pdBUZYhyhbBIdx763/zM1FVbaP8iYPCPvNgbiWKqUr1NdehOkDzbJUvocgrOgtxT
EEv5fDWdq5ZxKn9Puw9K7FnjfGSn2FyUtaywd5TOffCdq4W9Y3oE2C7kSUVDTsCT
RNiQwgDShtTmX+Zn/9PI8FUcHsPSwKkcL+sldOEDjqTLzys1OG0PrQS9oTaafTcL
G/WWRYCta633fg71cBogEecj2VYK51fyosalDFSyf+x1
-----END CERTIFICATE-----
Generated at Sat Nov 9 09:32:56 2024 by rpki-client on console-fra.rpki-client.org