Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/61iU134lEgrHE33F-WlKqX_eU80.roa
File: 61iU134lEgrHE33F-WlKqX_eU80.roa (raw, json)
Hash identifier: yWvV5LVliu5xuqDXEG2YcQ7lSFaxHhZk9jIlYVjiL/Q=
Subject key identifier: EB:58:94:D7:7E:25:12:0A:C7:13:7D:C5:F9:69:4A:A9:7F:DE:53:CD
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018894C27653211FB8D45ACCECD8B7E2C932
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/61iU134lEgrHE33F-WlKqX_eU80.roa
Signing time: Wed 07 Jun 2023 07:29:12 +0000
ROA not before: Wed 07 Jun 2023 07:29:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.220.0/22 maxlen: 24
62.60.148.0/22 maxlen: 24
62.60.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Jun 2023 10:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:c2:76:53:21:1f:b8:d4:5a:cc:ec:d8:b7:e2:c9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 7 07:29:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb5894d77e25120ac7137dc5f9694aa97fde53cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b2:a2:70:2e:42:11:49:61:21:0e:cd:05:59:
f7:34:31:30:05:c0:b5:68:82:cd:55:4d:97:75:70:
36:9a:f9:2c:d2:3a:0d:a2:80:3c:64:8c:ad:fa:3b:
9f:fa:81:8d:b8:b3:86:e1:41:e0:fe:23:58:8f:c1:
ea:a3:18:47:2e:61:d6:cd:2d:78:d8:0d:2f:f6:68:
d1:65:fd:46:73:ff:02:ee:62:3d:f6:ce:d0:c4:ff:
cf:a4:d8:4c:a6:a9:04:9f:96:db:a1:ac:94:d2:39:
40:6b:ee:ff:a8:e7:d5:d9:22:0b:67:2a:66:9a:54:
8a:70:e4:d1:9d:e3:28:9a:c1:0f:4d:c7:23:5e:6f:
f3:06:03:57:a3:c2:01:6c:91:86:1a:b2:14:fa:e6:
15:d1:d1:48:3c:05:28:e9:a7:eb:1d:79:23:47:52:
d5:5e:a6:ff:fd:e7:a6:05:18:c9:08:f3:97:b4:69:
6d:4d:a4:94:c3:be:ac:4a:8e:c0:c2:d0:65:07:74:
c8:2f:84:27:08:0a:e8:7d:9d:4c:bd:93:0d:ac:04:
4a:19:11:0c:50:9e:79:44:9c:ae:30:98:2b:83:83:
d2:c9:aa:52:a2:3e:69:23:15:06:08:46:4b:7e:9a:
58:38:3c:f7:92:eb:76:69:5b:bf:d8:5e:f2:78:a9:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:58:94:D7:7E:25:12:0A:C7:13:7D:C5:F9:69:4A:A9:7F:DE:53:CD
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/61iU134lEgrHE33F-WlKqX_eU80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0-62.60.155.255
62.60.220.0/22
Signature Algorithm: sha256WithRSAEncryption
99:6d:5c:4e:1a:7e:92:52:2f:1f:e8:af:f3:65:85:9f:f3:5e:
5c:40:fa:33:9e:28:4c:e4:61:35:91:25:02:16:25:27:00:12:
82:ab:41:49:61:c9:64:8f:4d:37:34:06:97:16:c6:8d:d6:2d:
3d:28:94:5a:54:ac:d6:48:f9:a3:d5:e9:3c:0b:3d:7e:bc:01:
95:39:be:1e:70:3a:79:1d:27:12:2e:71:48:52:b2:ed:27:01:
e0:41:bd:02:a5:20:3f:9c:76:88:cb:29:ae:6a:9f:57:52:a0:
02:fb:69:9b:d3:48:b6:0c:a0:79:39:74:6e:54:b2:0c:10:97:
c5:f7:d4:b6:93:5a:65:6d:45:50:0f:5c:29:0a:9c:cb:9a:69:
c5:84:58:ea:08:5f:48:51:e1:3f:fc:61:19:f7:4e:4e:71:32:
16:59:15:d8:2a:b1:2d:8d:b0:1d:6e:55:3c:af:4a:79:14:e3:
ae:0b:00:ab:7a:e5:ef:82:ee:71:44:43:6b:27:ed:0f:13:1f:
fc:3b:d0:14:e0:39:35:46:03:c1:21:aa:cd:9c:7f:82:2f:a1:
1b:ac:f2:30:4c:76:e6:16:35:55:c2:80:47:74:e3:89:3a:3e:
fd:da:3c:08:c1:fd:51:21:5c:b5:0a:ed:14:8a:4c:ec:f7:07:
a0:5e:7b:00
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYiUwnZTIR+41FrM7Ni34skyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwNjA3MDcyOTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjU4OTRkNzdlMjUxMjBhYzcxMzdkYzVmOTY5NGFhOTdmZGU1M2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLKicC5CEUlhIQ7NBVn3NDEwBcC1
aILNVU2XdXA2mvks0joNooA8ZIyt+juf+oGNuLOG4UHg/iNYj8HqoxhHLmHWzS14
2A0v9mjRZf1Gc/8C7mI99s7QxP/PpNhMpqkEn5bboayU0jlAa+7/qOfV2SILZypm
mlSKcOTRneMomsEPTccjXm/zBgNXo8IBbJGGGrIU+uYV0dFIPAUo6afrHXkjR1LV
Xqb//eemBRjJCPOXtGltTaSUw76sSo7AwtBlB3TIL4QnCArofZ1MvZMNrARKGREM
UJ55RJyuMJgrg4PSyapSoj5pIxUGCEZLfppYODz3kut2aVu/2F7yeKmukQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFOtYlNd+JRIKxxN9xflpSql/3lPNMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvNjFpVTEzNGxFZ3JIRTMzRi1XbEtxWF9lVTgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAI+PJQD
BAI+PJgDBAI+PNwwDQYJKoZIhvcNAQELBQADggEBAJltXE4afpJSLx/or/NlhZ/z
XlxA+jOeKEzkYTWRJQIWJScAEoKrQUlhyWSPTTc0BpcWxo3WLT0olFpUrNZI+aPV
6TwLPX68AZU5vh5wOnkdJxIucUhSsu0nAeBBvQKlID+cdojLKa5qn1dSoAL7aZvT
SLYMoHk5dG5UsgwQl8X31LaTWmVtRVAPXCkKnMuaacWEWOoIX0hR4T/8YRn3Tk5x
MhZZFdgqsS2NsB1uVTyvSnkU464LAKt65e+C7nFEQ2sn7Q8TH/w70BTgOTVGA8Eh
qs2cf4IvoRus8jBMduYWNVXCgEd044k6Pv3aPAjB/VEhXLUK7RSKTOz3B6BeewA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org