Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3NC4OZr27GmjrvjPukNsq_SaGhU.roa
File: 3NC4OZr27GmjrvjPukNsq_SaGhU.roa (raw, json)
Hash identifier: 6Ui7J63cyewOmGE5XjFkjRwvd92jJF2xdY0l0SpIqYk=
Subject key identifier: DC:D0:B8:39:9A:F6:EC:69:A3:AE:F8:CF:BA:43:6C:AB:F4:9A:1A:15
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01875FA073E98C3C8FC2D7CB9EC3772C1FD5
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3NC4OZr27GmjrvjPukNsq_SaGhU.roa
Signing time: Sat 08 Apr 2023 06:49:23 +0000
ROA not before: Sat 08 Apr 2023 06:49:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15611
IP address blocks: 213.176.96.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
62.60.180.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.128.0/21 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.143.0/24 maxlen: 24
62.60.141.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.152.0/22 maxlen: 24
62.60.146.0/23 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Apr 2023 05:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5f:a0:73:e9:8c:3c:8f:c2:d7:cb:9e:c3:77:2c:1f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Apr 8 06:49:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcd0b8399af6ec69a3aef8cfba436cabf49a1a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:42:6f:34:76:62:b2:4c:32:cd:e2:f3:1c:18:
26:28:4f:c6:12:96:40:4f:6c:9d:55:5b:0c:4c:c8:
cc:dd:74:26:a4:52:0a:fc:c3:5e:23:ce:1f:2a:c9:
96:ce:0c:28:28:80:1d:3d:08:f7:19:2d:ff:d1:9a:
bb:27:de:0e:da:df:1b:c1:2b:b4:7f:80:bb:fa:a6:
72:4f:93:f2:27:2e:e7:8e:bd:78:17:05:77:6f:80:
bb:02:b2:ad:17:33:5d:4e:52:b0:8d:4f:7d:48:d5:
bf:87:4a:1a:35:05:2b:26:e8:8a:39:19:ae:08:62:
e7:73:41:eb:64:69:77:d9:85:9c:3f:fa:fe:d6:9a:
6e:bb:ab:d4:93:c2:86:a3:1c:4b:64:0f:5d:2d:8a:
aa:fd:67:3a:a5:e6:b3:ce:14:92:a8:ab:ad:b2:df:
7a:02:8f:2c:b4:ca:b4:8f:3a:ca:9d:9a:ef:7c:9b:
30:09:0f:54:8c:ff:2b:fa:aa:9d:4e:4b:fd:fa:eb:
f3:a8:83:9f:61:06:9b:b5:dc:41:c3:e8:89:24:4e:
f3:3e:dc:34:6c:80:7d:6c:77:8b:a9:fd:bb:97:0f:
90:2b:8c:06:b6:d9:31:28:0d:99:49:3c:78:0b:bd:
1b:b3:82:e9:22:17:d8:e9:13:94:c0:e3:ac:2f:5d:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D0:B8:39:9A:F6:EC:69:A3:AE:F8:CF:BA:43:6C:AB:F4:9A:1A:15
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3NC4OZr27GmjrvjPukNsq_SaGhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0-62.60.137.255
62.60.139.0-62.60.143.255
62.60.145.0-62.60.147.255
62.60.152.0/22
62.60.180.0-62.60.187.255
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
Signature Algorithm: sha256WithRSAEncryption
3c:bf:ef:ba:9b:33:1d:cf:53:8e:29:c7:84:97:84:3d:e4:f8:
1c:dd:78:11:62:ba:a0:f3:82:9b:26:8b:30:58:06:3a:e8:7b:
5a:26:fb:d8:91:7b:79:a4:27:3e:53:48:27:ed:38:1b:60:5e:
16:6f:30:89:44:11:0c:53:af:a8:73:8b:a8:c9:0e:74:34:3a:
80:ac:25:fc:0b:31:9e:ac:81:c3:c1:63:f5:21:bc:1f:f2:fc:
51:b8:9d:66:b6:04:e7:38:6e:d0:6c:53:a6:4e:57:0d:13:03:
93:85:dc:78:97:58:72:13:f0:b7:cb:44:9f:a3:34:f4:42:b5:
2f:10:d8:45:4d:6c:31:a9:0f:18:b0:99:ae:00:b8:c5:03:de:
af:56:4c:29:52:fb:f1:00:37:9c:a2:eb:25:5e:54:53:5b:17:
7e:a1:77:ad:b6:26:d4:dd:4c:5b:f6:6a:d6:f9:be:a5:3b:11:
50:7e:73:8e:9d:5f:c1:d0:31:d2:2b:69:c7:92:07:53:78:b2:
f9:8a:03:b4:b4:ad:04:54:16:1e:f4:47:f5:6e:57:09:4b:bd:
56:26:84:35:45:01:19:07:28:06:6c:89:56:c5:ce:9f:14:53:
bf:c9:85:1a:1c:9c:6f:24:f1:57:b4:0f:dd:dd:5b:ca:25:80:
6a:f2:f2:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgISAYdfoHPpjDyPwtfLnsN3LB/VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwNDA4MDY0OTIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2QwYjgzOTlhZjZlYzY5YTNhZWY4Y2ZiYTQzNmNhYmY0OWExYTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0JvNHZiskwyzeLzHBgmKE/GEpZA
T2ydVVsMTMjM3XQmpFIK/MNeI84fKsmWzgwoKIAdPQj3GS3/0Zq7J94O2t8bwSu0
f4C7+qZyT5PyJy7njr14FwV3b4C7ArKtFzNdTlKwjU99SNW/h0oaNQUrJuiKORmu
CGLnc0HrZGl32YWcP/r+1ppuu6vUk8KGoxxLZA9dLYqq/Wc6peazzhSSqKutst96
Ao8stMq0jzrKnZrvfJswCQ9UjP8r+qqdTkv9+uvzqIOfYQabtdxBw+iJJE7zPtw0
bIB9bHeLqf27lw+QK4wGttkxKA2ZSTx4C70bs4LpIhfY6ROUwOOsL11gFQIDAQAB
o4ICWzCCAlcwHQYDVR0OBBYEFNzQuDma9uxpo674z7pDbKv0mhoVMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvM05DNE9acjI3R21qcnZqUHVrTnNxX1NhR2hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYMAwDBAc+PIAD
BAE+PIgwDAMEAD48iwMEBD48gDAMAwQAPjyRAwQCPjyQAwQCPjyYMAwDBAI+PLQD
BAI+PLgDBAHVsAQDBADVsGAwDAMEAdWwegMEAdWwfDANBgkqhkiG9w0BAQsFAAOC
AQEAPL/vupszHc9TjinHhJeEPeT4HN14EWK6oPOCmyaLMFgGOuh7Wib72JF7eaQn
PlNIJ+04G2BeFm8wiUQRDFOvqHOLqMkOdDQ6gKwl/AsxnqyBw8Fj9SG8H/L8Ubid
ZrYE5zhu0GxTpk5XDRMDk4XceJdYchPwt8tEn6M09EK1LxDYRU1sMakPGLCZrgC4
xQPer1ZMKVL78QA3nKLrJV5UU1sXfqF3rbYm1N1MW/Zq1vm+pTsRUH5zjp1fwdAx
0itpx5IHU3iy+YoDtLStBFQWHvRH9W5XCUu9ViaENUUBGQcoBmyJVsXOnxRTv8mF
GhycbyTxV7QP3d1byiWAavLydQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org