Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-7iZ2tx0xPSPdns2BGc6oWQLveY.roa
File: 1-7iZ2tx0xPSPdns2BGc6oWQLveY.roa (raw, json)
Hash identifier: iPwt9Q6csZDRj1qCx3x1qPcNXkPqVqr65a8Duhdk/wU=
Subject key identifier: FB:B8:99:DA:DC:74:C4:F4:8F:76:7B:36:04:67:3A:A1:64:0B:BD:E6
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018F44EC6F311C3DA9DBC6B8CDF0ED0ACF0F
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-7iZ2tx0xPSPdns2BGc6oWQLveY.roa
Signing time: Sat 04 May 2024 18:44:56 +0000
ROA not before: Sat 04 May 2024 18:44:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 62.60.152.0/22 maxlen: 24
62.60.156.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.216.0/22 maxlen: 24
62.60.224.0/19 maxlen: 24
213.176.64.0/22 maxlen: 24
213.176.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 08:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:44:ec:6f:31:1c:3d:a9:db:c6:b8:cd:f0:ed:0a:cf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 4 18:44:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbb899dadc74c4f48f767b3604673aa1640bbde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:e5:82:7d:6d:d3:46:e7:f0:a4:ef:22:8b:
05:5d:1b:77:a3:46:9b:d5:8c:ea:71:2a:3b:4d:f7:
c5:6f:f8:f5:5b:8f:a6:be:7c:71:41:d2:bc:df:03:
fa:ac:bd:97:cb:f3:f3:db:fe:15:88:47:16:cf:31:
cb:be:b4:5f:58:1b:b7:b8:ac:33:42:9d:c4:88:6a:
54:d5:39:e1:6e:a2:06:3f:34:d5:3e:65:c7:62:a6:
53:66:9a:3c:a1:60:7e:30:5e:68:68:4d:f9:14:55:
e1:19:dd:9a:4b:e2:48:f8:85:6f:36:3f:07:42:7a:
a5:81:02:79:72:99:4e:0b:d4:e1:c8:4c:e9:21:50:
a4:e1:a8:c9:3c:6e:f9:e3:bb:2f:1d:33:7e:9c:2c:
17:89:0c:97:6b:87:6c:16:56:49:c8:06:b2:4e:bb:
6a:65:b3:94:0a:87:e8:73:70:e1:02:28:11:e9:63:
aa:c1:f3:50:c3:64:b0:4a:1e:8a:5f:8a:bb:9c:b0:
b5:80:51:31:a1:89:ba:80:e4:37:bc:16:c8:2a:e3:
1d:cd:fc:98:48:d8:f1:17:5b:25:b8:10:c7:6a:c1:
2d:7c:10:9b:0f:94:19:dc:5e:81:a5:db:bf:1d:2d:
2a:55:ed:b2:db:6f:28:9e:cb:e0:48:c7:4a:49:d7:
4a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B8:99:DA:DC:74:C4:F4:8F:76:7B:36:04:67:3A:A1:64:0B:BD:E6
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-7iZ2tx0xPSPdns2BGc6oWQLveY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.152.0/21
62.60.184.0/22
62.60.192.0/22
62.60.216.0/22
62.60.224.0/19
213.176.64.0/22
213.176.127.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:97:e5:23:98:d2:5a:22:cd:54:68:a6:10:5f:e2:c7:de:e4:
74:91:7d:f5:dc:30:1e:38:f2:3d:30:9e:e3:e0:b3:3c:b9:12:
e1:b2:26:de:20:14:eb:a1:4f:1e:54:f2:2e:4c:23:db:f7:66:
fd:73:6b:f4:26:a2:5c:c3:42:71:1b:56:b8:17:82:11:6d:99:
9e:3c:3b:12:93:fb:22:b0:49:66:43:76:72:b9:f2:ef:8e:78:
a6:a8:4c:79:ea:26:47:1a:4c:2c:04:0b:51:8f:8c:e7:41:98:
8e:d7:aa:0f:52:e1:b6:91:c5:f6:0c:0d:b1:3c:51:f2:e6:89:
3c:22:bf:08:77:b3:78:19:e0:75:e7:dc:b4:93:c7:6e:95:52:
2d:b2:c7:a7:b6:f0:7f:53:24:91:9a:46:39:a4:67:9a:38:87:
cc:e1:0f:9c:52:5d:f4:fd:fc:38:f1:4f:4d:4a:91:99:f8:27:
d2:de:34:33:86:d6:04:a1:a4:0c:27:a9:89:dc:5a:7e:41:f6:
c7:7f:3e:a4:99:75:6c:f6:51:37:a8:c2:13:33:19:10:36:13:
4a:a6:a8:11:c7:0d:65:67:ac:11:96:c0:b6:1c:4b:cf:e1:3c:
bd:f5:69:b4:7a:84:9f:cb:91:f2:bc:b9:2e:5a:81:3d:22:33:
3d:58:9e:7d
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgISAY9E7G8xHD2p28a4zfDtCs8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwNTA0MTg0NDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmI4OTlkYWRjNzRjNGY0OGY3NjdiMzYwNDY3M2FhMTY0MGJiZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw77lgn1t00bn8KTvIosFXRt3o0ab
1YzqcSo7TffFb/j1W4+mvnxxQdK83wP6rL2Xy/Pz2/4ViEcWzzHLvrRfWBu3uKwz
Qp3EiGpU1TnhbqIGPzTVPmXHYqZTZpo8oWB+MF5oaE35FFXhGd2aS+JI+IVvNj8H
QnqlgQJ5cplOC9ThyEzpIVCk4ajJPG7547svHTN+nCwXiQyXa4dsFlZJyAayTrtq
ZbOUCofoc3DhAigR6WOqwfNQw2SwSh6KX4q7nLC1gFExoYm6gOQ3vBbIKuMdzfyY
SNjxF1sluBDHasEtfBCbD5QZ3F6Bpdu/HS0qVe2y228onsvgSMdKSddKQwIDAQAB
o4ICLjCCAiowHQYDVR0OBBYEFPu4mdrcdMT0j3Z7NgRnOqFkC73mMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvMS03aVoydHgweFBTUGRuczJCR2M2b1dRTHZlWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTcvMTMzOWRmLThlMDYtNDFkZS05NGYzLTBjYmEzM2VmYzVi
Yi8xL3c4R0ZKLU9pQnE4b1FnS05sYTdFRXpqbzJ2Zy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBDBggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAz48mAME
Aj48uAMEAj48wAMEAj482AMEBT484AMEAtWwQAMEANWwfzANBgkqhkiG9w0BAQsF
AAOCAQEAvJflI5jSWiLNVGimEF/ix97kdJF99dwwHjjyPTCe4+CzPLkS4bIm3iAU
66FPHlTyLkwj2/dm/XNr9CaiXMNCcRtWuBeCEW2Znjw7EpP7IrBJZkN2crny7454
pqhMeeomRxpMLAQLUY+M50GYjteqD1LhtpHF9gwNsTxR8uaJPCK/CHezeBngdefc
tJPHbpVSLbLHp7bwf1MkkZpGOaRnmjiHzOEPnFJd9P38OPFPTUqRmfgn0t40M4bW
BKGkDCepidxafkH2x38+pJl1bPZRN6jCEzMZEDYTSqaoEccNZWesEZbAthxLz+E8
vfVptHqEn8uR8ry5LlqBPSIzPViefQ==
-----END CERTIFICATE-----
Generated at Thu May 9 11:35:08 2024 by rpki-client on console-ams.rpki-client.org