Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/2a3twREcks1YQDeme3pvy4rRPeA.roa
File: 2a3twREcks1YQDeme3pvy4rRPeA.roa (raw, json)
Hash identifier: vudp8XRDwapSTyaa5Ut2zIKo7JvGHO+stXs2iwE1xaM=
Subject key identifier: D9:AD:ED:C1:11:1C:92:CD:58:40:37:A6:7B:7A:6F:CB:8A:D1:3D:E0
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018F32859E77B6948FEC5C5829AB631B1409
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/2a3twREcks1YQDeme3pvy4rRPeA.roa
Signing time: Wed 01 May 2024 04:59:28 +0000
ROA not before: Wed 01 May 2024 04:59:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15611
IP address blocks: 62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.147.0/24 maxlen: 24
62.60.168.0/21 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
213.176.96.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
2001:790::/32 maxlen: 48
Validation: Failed, certificate revoked on Sat 25 May 2024 06:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:32:85:9e:77:b6:94:8f:ec:5c:58:29:ab:63:1b:14:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 1 04:59:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9adedc1111c92cd584037a67b7a6fcb8ad13de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:35:eb:a2:b2:d8:2d:cf:96:3d:b0:bf:0d:
26:34:18:8b:ca:84:19:ac:4f:f5:b4:2c:fb:98:db:
b1:1b:60:0f:84:60:54:a6:e7:eb:48:7d:f5:c1:44:
17:29:47:bc:9f:a5:2a:ed:7e:1e:dd:3d:ed:79:f0:
99:67:37:26:be:2c:7d:34:16:47:15:67:ca:1c:8f:
0d:59:9a:a3:71:ce:ba:b5:c4:47:bc:80:57:ec:0d:
e9:db:99:83:35:b2:c7:ee:4f:86:5b:bd:96:bc:5d:
02:0b:ab:59:84:ee:7d:b1:85:47:c1:99:a5:fa:5f:
28:b9:ab:91:fe:4f:fb:95:98:c9:0c:72:87:e4:20:
ec:ea:77:78:3f:9b:ba:99:b2:cf:2a:77:78:42:71:
ce:7c:6d:80:70:64:f8:6e:65:e4:fa:72:03:86:7d:
06:e4:2f:9c:03:d9:33:5d:aa:37:c4:f5:ad:e8:fd:
a6:64:e4:00:3a:07:00:92:75:db:10:15:5d:b2:06:
ad:a1:ea:e0:49:2f:65:78:34:12:fd:fb:17:0a:c7:
b0:2c:b9:24:f3:1e:23:cd:0b:8f:fb:4e:13:af:46:
05:82:59:e6:94:d3:2f:71:65:99:46:32:e7:f6:34:
90:a9:60:7c:25:13:01:5b:12:05:a8:83:6d:9a:05:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AD:ED:C1:11:1C:92:CD:58:40:37:A6:7B:7A:6F:CB:8A:D1:3D:E0
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/2a3twREcks1YQDeme3pvy4rRPeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.140.255
62.60.142.0/24
62.60.145.0/24
62.60.147.0/24
62.60.168.0/21
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
IPv6:
2001:790::/32
Signature Algorithm: sha256WithRSAEncryption
00:00:52:d8:4b:6c:e9:2a:6b:12:8b:d5:4a:bb:79:e4:7e:a4:
b2:bb:f9:3f:2a:10:9a:ad:a2:03:a0:35:03:18:69:21:27:c8:
46:98:57:56:15:21:85:a8:ec:c6:68:2a:24:89:b0:31:44:8a:
d5:ba:30:3e:b8:c5:b5:a8:46:ce:83:24:37:dd:eb:11:56:37:
d5:80:85:c7:b0:ce:b9:dd:ac:56:23:c9:e1:a6:a5:41:52:64:
6f:b5:8d:8a:17:ba:c0:67:87:81:fa:56:a9:4d:a3:87:98:90:
35:33:df:c0:f9:4e:66:2b:d6:79:d8:31:12:63:86:e3:f0:49:
a4:22:74:e5:94:47:50:e8:c8:c0:42:05:ec:37:c1:8d:42:ce:
5e:6b:2c:a2:17:ab:00:99:c4:e5:c2:cc:e7:69:5b:d4:ed:a2:
f8:49:76:5d:c2:b0:f1:4e:d3:bd:47:2d:e1:c2:02:4e:41:62:
65:c2:89:ab:0e:bc:c8:62:99:d9:0f:18:d4:0f:e7:93:cf:6e:
ec:4d:c3:e4:2d:3b:62:98:8d:11:c9:f9:20:03:a7:33:cc:9b:
1c:2f:c8:f6:a3:76:f4:0c:ed:a1:70:6a:82:bf:82:2c:52:a8:
03:7e:53:d4:c6:34:ae:6a:b3:08:34:9a:e4:ab:02:72:3e:24:
02:59:17:8a
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgISAY8yhZ53tpSP7FxYKatjGxQJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwNTAxMDQ1OTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWFkZWRjMTExMWM5MmNkNTg0MDM3YTY3YjdhNmZjYjhhZDEzZGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGw166Ky2C3Plj2wvw0mNBiLyoQZ
rE/1tCz7mNuxG2APhGBUpufrSH31wUQXKUe8n6Uq7X4e3T3tefCZZzcmvix9NBZH
FWfKHI8NWZqjcc66tcRHvIBX7A3p25mDNbLH7k+GW72WvF0CC6tZhO59sYVHwZml
+l8ouauR/k/7lZjJDHKH5CDs6nd4P5u6mbLPKnd4QnHOfG2AcGT4bmXk+nIDhn0G
5C+cA9kzXao3xPWt6P2mZOQAOgcAknXbEBVdsgatoergSS9leDQS/fsXCsewLLkk
8x4jzQuP+04Tr0YFglnmlNMvcWWZRjLn9jSQqWB8JRMBWxIFqINtmgV0fQIDAQAB
o4ICYDCCAlwwHQYDVR0OBBYEFNmt7cERHJLNWEA3pnt6b8uK0T3gMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvMmEzdHdSRWNrczFZUURlbWUzcHZ5NHJSUGVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOMAwDBAI+PIQD
BAE+PIgwDAMEAD48iwMEAD48jAMEAD48jgMEAD48kQMEAD48kwMEAz48qAMEAdWw
BAMEANWwYDAMAwQB1bB6AwQB1bB8MA0EAgACMAcDBQAgAQeQMA0GCSqGSIb3DQEB
CwUAA4IBAQAAAFLYS2zpKmsSi9VKu3nkfqSyu/k/KhCaraIDoDUDGGkhJ8hGmFdW
FSGFqOzGaCokibAxRIrVujA+uMW1qEbOgyQ33esRVjfVgIXHsM653axWI8nhpqVB
UmRvtY2KF7rAZ4eB+lapTaOHmJA1M9/A+U5mK9Z52DESY4bj8EmkInTllEdQ6MjA
QgXsN8GNQs5eayyiF6sAmcTlwsznaVvU7aL4SXZdwrDxTtO9Ry3hwgJOQWJlwomr
DrzIYpnZDxjUD+eTz27sTcPkLTtimI0RyfkgA6czzJscL8j2o3b0DO2hcGqCv4Is
UqgDflPUxjSuarMINJrkqwJyPiQCWReK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org