Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3VIYKf_8s4wSAfV7Wd0TC7s3Ov8.roa
File: 3VIYKf_8s4wSAfV7Wd0TC7s3Ov8.roa (raw, json)
Hash identifier: kn3leBJ5DrTZJd355V84RDy9eJPq4CDoQ52hMFs9D7Q=
Subject key identifier: DD:52:18:29:FF:FC:B3:8C:12:01:F5:7B:59:DD:13:0B:BB:37:3A:FF
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01886B3090A496ADFAD96B44EB5363434351
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3VIYKf_8s4wSAfV7Wd0TC7s3Ov8.roa
Signing time: Tue 30 May 2023 05:45:24 +0000
ROA not before: Tue 30 May 2023 05:45:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.220.0/22 maxlen: 24
62.60.148.0/22 maxlen: 24
62.60.152.0/22 maxlen: 24
62.60.172.0/22 maxlen: 24
62.60.176.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.196.0/24 maxlen: 24
62.60.200.0/22 maxlen: 24
62.60.204.0/22 maxlen: 24
62.60.208.0/22 maxlen: 24
62.60.212.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:30:90:a4:96:ad:fa:d9:6b:44:eb:53:63:43:43:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 30 05:45:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd521829fffcb38c1201f57b59dd130bbb373aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e5:f9:ef:25:08:f3:3b:c1:04:a0:4d:a9:b5:
28:58:8c:82:f3:80:c8:5a:13:04:fe:bc:24:97:1c:
12:da:c8:98:c1:fd:59:5e:42:f1:5d:c8:b4:f0:f8:
9e:01:e1:1d:6f:99:47:c5:dd:69:a7:04:bd:f1:ab:
7c:ee:6c:6f:15:89:3b:e8:39:f4:d7:0d:0c:2f:94:
76:10:65:94:78:28:70:27:c4:56:38:fa:00:2a:08:
c9:a9:17:0e:92:63:d1:be:e1:65:eb:fb:a7:fc:6c:
8a:a1:93:d6:bb:6b:63:ce:1e:2f:c7:d2:26:4f:9a:
ed:da:55:a2:ad:b5:f2:8a:5e:7b:18:96:76:c7:ea:
4f:97:f7:96:5c:f4:70:84:6a:c1:43:a8:b2:21:ef:
8d:2b:cf:3f:eb:32:ba:2f:11:b7:0a:71:fb:ad:c6:
86:43:b8:69:93:1b:71:73:2c:f6:a0:a6:5b:66:80:
bb:df:70:51:1d:b3:29:e0:0b:97:8d:0a:6a:9e:88:
dd:28:93:a3:52:d1:b2:4a:e5:cf:6f:ca:89:6e:c1:
5f:ed:e7:3d:83:7d:4f:f3:43:38:60:eb:89:0e:f3:
eb:ca:a2:68:78:04:25:35:fa:71:84:cb:74:64:71:
2b:c2:b5:e3:1d:20:87:4a:19:55:5d:c7:8e:62:0a:
59:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:52:18:29:FF:FC:B3:8C:12:01:F5:7B:59:DD:13:0B:BB:37:3A:FF
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3VIYKf_8s4wSAfV7Wd0TC7s3Ov8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0-62.60.155.255
62.60.172.0-62.60.179.255
62.60.184.0/22
62.60.192.0-62.60.196.255
62.60.200.0-62.60.215.255
62.60.220.0/22
Signature Algorithm: sha256WithRSAEncryption
91:69:71:bd:7e:59:39:9c:da:e1:5d:07:c7:59:22:48:4d:9e:
1a:7b:4d:8a:b7:f0:4a:a7:4a:b2:33:c9:31:db:b4:8c:01:32:
3a:e3:87:55:07:9a:72:35:0f:07:3f:99:f4:ba:e2:7c:d3:06:
65:01:5d:c8:8c:a5:5f:bc:f3:c9:2d:13:ed:00:fa:08:27:01:
09:6b:8b:c3:79:63:a3:c7:74:b4:27:4a:9d:8b:28:d3:57:ee:
fc:ff:71:7a:70:6d:77:89:fe:60:a6:e6:7a:4a:5e:f3:31:a0:
59:f7:11:0d:05:17:e8:cb:65:6f:71:9c:b2:ea:39:28:e9:77:
7c:bf:8b:f4:aa:6d:e1:47:9f:de:e8:67:49:eb:11:e3:e2:d1:
ef:ff:ad:d8:6a:2e:36:8c:1c:6d:bc:a8:68:c7:2c:4f:a4:08:
03:f3:2a:ef:0c:a7:6d:10:57:c3:b4:90:a3:1f:63:13:6d:79:
11:c6:8a:b0:61:59:8e:73:1f:ce:10:c8:88:b3:46:a4:69:8d:
6f:af:38:b0:f2:ba:20:8f:df:96:2b:ee:00:2f:3d:bd:d6:30:
48:68:47:e6:ab:67:b7:e3:34:6a:f6:9c:09:f5:2e:75:27:18:
e5:33:93:50:12:cd:70:be:1a:4f:cf:b4:af:57:02:d7:7f:f6:
79:32:72:37
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAYhrMJCklq362WtE61NjQ0NRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwNTMwMDU0NTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDUyMTgyOWZmZmNiMzhjMTIwMWY1N2I1OWRkMTMwYmJiMzczYWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeX57yUI8zvBBKBNqbUoWIyC84DI
WhME/rwklxwS2siYwf1ZXkLxXci08PieAeEdb5lHxd1ppwS98at87mxvFYk76Dn0
1w0ML5R2EGWUeChwJ8RWOPoAKgjJqRcOkmPRvuFl6/un/GyKoZPWu2tjzh4vx9Im
T5rt2lWirbXyil57GJZ2x+pPl/eWXPRwhGrBQ6iyIe+NK88/6zK6LxG3CnH7rcaG
Q7hpkxtxcyz2oKZbZoC733BRHbMp4AuXjQpqnojdKJOjUtGySuXPb8qJbsFf7ec9
g31P80M4YOuJDvPryqJoeAQlNfpxhMt0ZHErwrXjHSCHShlVXceOYgpZVwIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFN1SGCn//LOMEgH1e1ndEwu7Nzr/MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvM1ZJWUtmXzhzNHdTQWZWN1dkMFRDN3MzT3Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEMAwDBAI+PJQD
BAI+PJgwDAMEAj48rAMEAj48sAMEAj48uDAMAwQGPjzAAwQAPjzEMAwDBAM+PMgD
BAM+PNADBAI+PNwwDQYJKoZIhvcNAQELBQADggEBAJFpcb1+WTmc2uFdB8dZIkhN
nhp7TYq38EqnSrIzyTHbtIwBMjrjh1UHmnI1Dwc/mfS64nzTBmUBXciMpV+888kt
E+0A+ggnAQlri8N5Y6PHdLQnSp2LKNNX7vz/cXpwbXeJ/mCm5npKXvMxoFn3EQ0F
F+jLZW9xnLLqOSjpd3y/i/SqbeFHn97oZ0nrEePi0e//rdhqLjaMHG28qGjHLE+k
CAPzKu8Mp20QV8O0kKMfYxNteRHGirBhWY5zH84QyIizRqRpjW+vOLDyuiCP35Yr
7gAvPb3WMEhoR+arZ7fjNGr2nAn1LnUnGOUzk1ASzXC+Gk/PtK9XAtd/9nkycjc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:35 2023 by rpki-client on console-fra.rpki-client.org