Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-4rtA-GVYP_mFkCWFAEXFLklFrc.roa
File: 1-4rtA-GVYP_mFkCWFAEXFLklFrc.roa (raw, json)
Hash identifier: yloc6G4jZIefsNSj2TC9V8cEp/c3Sf+K/2MC7W6Tn7o=
Subject key identifier: FB:8A:ED:03:E1:95:60:FF:E6:16:40:96:14:01:17:14:B9:25:16:B7
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01859FF125EE4CFD3BB28AE6F09809C34966
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-4rtA-GVYP_mFkCWFAEXFLklFrc.roa
Signing time: Wed 11 Jan 2023 08:27:39 +0000
ROA not before: Wed 11 Jan 2023 08:27:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 62.60.164.0/22 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.172.0/22 maxlen: 24
62.60.176.0/22 maxlen: 24
62.60.180.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.188.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Jan 2023 07:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9f:f1:25:ee:4c:fd:3b:b2:8a:e6:f0:98:09:c3:49:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 11 08:27:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb8aed03e19560ffe616409614011714b92516b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:08:b9:2d:6b:12:e3:bf:69:21:23:cb:10:c3:
1b:07:83:01:fc:f4:84:96:c6:f3:bc:d3:8b:b0:0e:
aa:4f:88:d0:0b:52:61:9f:ef:b1:1b:7b:21:03:77:
05:5e:f0:25:e2:f5:4a:b9:80:62:a1:d1:bb:14:95:
a0:87:aa:6a:f9:8f:a0:39:54:55:cb:48:39:91:b9:
5f:c1:52:01:53:00:16:bb:34:94:59:0f:a7:e6:c5:
c6:76:86:ee:45:59:aa:63:53:97:65:ec:fd:35:5c:
32:9f:16:73:25:22:4c:17:1d:7b:c6:e0:10:64:33:
ff:ae:8d:84:9f:0d:3c:dc:26:19:3f:60:e0:61:c8:
21:a9:01:fa:10:f1:b1:0e:31:f5:3d:18:67:b5:6d:
18:24:ab:4a:c1:64:bc:63:28:99:3f:00:ad:fa:9e:
cb:68:a6:6b:b4:fc:55:0a:12:dc:88:61:fc:28:9f:
1f:d4:09:9e:f1:23:18:d8:88:22:23:71:df:0b:0d:
4a:87:a2:e6:97:7f:ef:01:50:0e:e3:f1:27:c6:7b:
5c:31:16:6d:ff:7e:62:90:10:a1:62:3b:ba:ed:c1:
7a:fb:a0:97:49:5b:d2:3c:8c:4b:77:39:77:c6:d9:
12:65:da:9c:7e:99:cf:8a:05:da:ab:39:d0:a6:bd:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8A:ED:03:E1:95:60:FF:E6:16:40:96:14:01:17:14:B9:25:16:B7
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-4rtA-GVYP_mFkCWFAEXFLklFrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.164.0-62.60.195.255
Signature Algorithm: sha256WithRSAEncryption
52:34:b9:5f:26:b3:df:d7:69:c4:b8:f9:20:1f:e6:73:9a:b0:
84:bf:29:7f:94:c2:e2:3b:ee:c2:ad:62:b0:85:4a:8d:47:36:
09:a2:07:62:49:42:80:2b:1b:e4:c7:f7:b9:97:53:a4:64:2a:
be:b2:ec:35:77:ef:db:05:f2:5a:9b:09:d4:56:61:f1:62:fa:
1c:be:9b:d8:72:8c:31:90:13:f1:57:16:81:eb:bb:f1:cd:83:
d5:e9:c3:68:07:7d:9a:5f:7b:45:ac:50:e1:60:fe:fe:e3:7a:
aa:28:5a:93:2a:c2:23:a4:9b:b9:cb:f6:88:73:63:40:3f:ed:
4e:c0:53:39:af:e6:d4:53:dc:d6:f4:92:6f:af:40:d3:b6:3e:
9b:58:9e:00:c9:d3:1e:60:14:4d:dc:72:b1:cb:13:68:20:8a:
f9:e2:92:c3:80:a3:46:4f:10:65:06:8d:f8:a6:17:c6:c7:3a:
42:a9:92:43:f9:84:ba:00:8f:7a:49:f1:4f:90:be:5d:e9:f0:
72:f1:2c:36:1b:54:30:0f:ca:a6:63:d4:be:2e:10:2a:8c:18:
ac:6d:27:9d:2d:98:a0:72:e9:88:e6:3c:27:e0:27:5c:cd:3c:
66:ae:5e:61:7e:61:40:c9:ba:2e:09:2e:77:aa:57:27:d7:c4:
38:68:8d:db
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISAYWf8SXuTP07sorm8JgJw0lmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwMTExMDgyNzM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjhhZWQwM2UxOTU2MGZmZTYxNjQwOTYxNDAxMTcxNGI5MjUxNmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgi5LWsS479pISPLEMMbB4MB/PSE
lsbzvNOLsA6qT4jQC1Jhn++xG3shA3cFXvAl4vVKuYBiodG7FJWgh6pq+Y+gOVRV
y0g5kblfwVIBUwAWuzSUWQ+n5sXGdobuRVmqY1OXZez9NVwynxZzJSJMFx17xuAQ
ZDP/ro2Enw083CYZP2DgYcghqQH6EPGxDjH1PRhntW0YJKtKwWS8YyiZPwCt+p7L
aKZrtPxVChLciGH8KJ8f1Ame8SMY2IgiI3HfCw1Kh6Lml3/vAVAO4/EnxntcMRZt
/35ikBChYju67cF6+6CXSVvSPIxLdzl3xtkSZdqcfpnPigXaqznQpr3LYwIDAQAB
o4ICEjCCAg4wHQYDVR0OBBYEFPuK7QPhlWD/5hZAlhQBFxS5JRa3MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvMS00cnRBLUdWWVBfbUZrQ1dGQUVYRkxrbEZyYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTcvMTMzOWRmLThlMDYtNDFkZS05NGYzLTBjYmEzM2VmYzVi
Yi8xL3c4R0ZKLU9pQnE4b1FnS05sYTdFRXpqbzJ2Zy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQCPjyk
AwQCPjzAMA0GCSqGSIb3DQEBCwUAA4IBAQBSNLlfJrPf12nEuPkgH+ZzmrCEvyl/
lMLiO+7CrWKwhUqNRzYJogdiSUKAKxvkx/e5l1OkZCq+suw1d+/bBfJamwnUVmHx
YvocvpvYcowxkBPxVxaB67vxzYPV6cNoB32aX3tFrFDhYP7+43qqKFqTKsIjpJu5
y/aIc2NAP+1OwFM5r+bUU9zW9JJvr0DTtj6bWJ4AydMeYBRN3HKxyxNoIIr54pLD
gKNGTxBlBo34phfGxzpCqZJD+YS6AI96SfFPkL5d6fBy8Sw2G1QwD8qmY9S+LhAq
jBisbSedLZigcumI5jwn4CdczTxmrl5hfmFAybouCS53qlcn18Q4aI3b
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:38 2024 by rpki-client on console-fra.rpki-client.org