Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6oqYNnjmFufIZ_qATuy5gNNmP3c.roa
File: 6oqYNnjmFufIZ_qATuy5gNNmP3c.roa (raw, json)
Hash identifier: fcKH3naP23CbH5iyaLv8KLdDsKDJCJQquDsqSTgfGMI=
Subject key identifier: EA:8A:98:36:78:E6:16:E7:C8:67:FA:80:4E:EC:B9:80:D3:66:3F:77
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018BADEF86A299C2D7DA503579D28258286C
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6oqYNnjmFufIZ_qATuy5gNNmP3c.roa
Signing time: Wed 08 Nov 2023 07:57:17 +0000
ROA not before: Wed 08 Nov 2023 07:57:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15611
IP address blocks: 213.176.96.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
213.176.7.0/24 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.147.0/24 maxlen: 24
62.60.148.0/23 maxlen: 24
213.176.120.0/23 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
213.176.127.0/24 maxlen: 24
2001:790::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ad:ef:86:a2:99:c2:d7:da:50:35:79:d2:82:58:28:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Nov 8 07:57:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea8a983678e616e7c867fa804eecb980d3663f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:21:46:c9:6e:09:18:d9:32:e5:70:ef:7a:
f5:90:1a:f4:6a:fb:ce:8a:5c:25:bb:cb:fb:9d:d6:
ac:26:34:dc:03:f9:ea:03:4c:a2:7a:e4:dd:1d:f2:
22:80:23:62:9a:fa:38:47:68:f8:1f:3a:fc:05:03:
ce:a4:b8:44:23:75:8e:38:ae:ec:ab:ad:2c:e6:f9:
36:0d:35:11:b6:07:8c:75:24:91:b0:ad:19:2a:73:
2c:cb:4c:6b:36:89:05:a6:b7:e5:47:03:df:5b:40:
00:d2:64:d7:55:01:36:17:8a:77:6a:32:81:1b:7a:
80:75:31:4d:f4:f8:59:03:91:d5:62:fb:2d:ee:c4:
4b:96:bd:bf:5f:f3:e8:13:43:01:5a:92:e7:f2:14:
33:f5:23:b7:fd:81:7b:5d:44:40:74:c1:15:bd:d4:
5b:a6:b1:f1:03:7a:5b:4f:be:4d:c5:c8:18:29:d3:
7c:ef:95:f2:b8:96:3e:d0:ce:b1:fd:60:ca:b1:a6:
f5:33:72:ae:b9:14:a6:63:78:2b:f0:11:ea:ac:82:
dd:d1:89:e1:14:39:ae:40:c7:e7:c0:8c:7b:f9:40:
1d:75:89:a5:c0:68:60:64:5c:e5:b0:36:b2:4c:98:
9c:d4:a6:4d:af:9b:64:46:8b:79:a4:34:18:11:e0:
49:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8A:98:36:78:E6:16:E7:C8:67:FA:80:4E:EC:B9:80:D3:66:3F:77
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6oqYNnjmFufIZ_qATuy5gNNmP3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.140.255
62.60.142.0/24
62.60.145.0/24
62.60.147.0-62.60.149.255
62.60.168.0/21
213.176.4.0/23
213.176.7.0/24
213.176.96.0/24
213.176.120.0-213.176.125.255
213.176.127.0/24
IPv6:
2001:790::/32
Signature Algorithm: sha256WithRSAEncryption
21:12:71:9b:b3:15:0c:b1:da:72:c6:f1:8c:2d:0f:77:b8:34:
a1:45:6c:a5:19:48:e6:2a:62:c3:3a:d9:78:6f:88:d4:1b:2b:
05:7e:ad:2f:09:89:05:fc:f4:4e:9a:33:62:63:81:cc:9e:04:
fd:28:31:ae:e6:6b:1e:44:71:e4:38:d8:66:51:2d:dd:5a:03:
bb:ea:07:21:08:03:a4:68:67:3e:02:03:8a:c1:5a:df:e1:e7:
75:9a:1b:b7:da:b7:de:94:80:a9:77:05:72:f4:16:b0:95:b1:
6e:47:8a:cd:58:cf:e0:15:bf:7c:59:2b:2e:f1:b0:3f:4b:3f:
6c:17:6a:4f:82:25:8a:94:4e:4a:c9:5d:57:7d:01:1a:50:64:
8a:6d:aa:2e:d8:07:cb:40:b0:10:27:bb:5e:34:3e:0d:43:e6:
91:67:3a:0e:54:f6:11:28:c8:73:ec:22:9f:74:4b:4e:56:ae:
f9:f4:99:c1:92:f2:1d:fe:6f:97:27:73:16:83:c9:99:f9:c9:
4e:0e:d0:25:a3:10:1b:bf:28:a3:c1:15:9b:5d:b5:c0:d2:db:
68:bf:37:2e:53:57:d5:0d:65:6a:78:2d:20:af:2c:69:be:80:
3f:44:72:7b:3a:9a:8e:8e:62:1f:d1:6c:67:33:2a:39:4f:e6:
61:c5:bd:76
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgISAYut74aimcLX2lA1edKCWChsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMxMTA4MDc1NzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYThhOTgzNjc4ZTYxNmU3Yzg2N2ZhODA0ZWVjYjk4MGQzNjYzZjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hghRsluCRjZMuVw73r1kBr0avvO
ilwlu8v7ndasJjTcA/nqA0yieuTdHfIigCNimvo4R2j4Hzr8BQPOpLhEI3WOOK7s
q60s5vk2DTURtgeMdSSRsK0ZKnMsy0xrNokFprflRwPfW0AA0mTXVQE2F4p3ajKB
G3qAdTFN9PhZA5HVYvst7sRLlr2/X/PoE0MBWpLn8hQz9SO3/YF7XURAdMEVvdRb
prHxA3pbT75NxcgYKdN875XyuJY+0M6x/WDKsab1M3KuuRSmY3gr8BHqrILd0Ynh
FDmuQMfnwIx7+UAddYmlwGhgZFzlsDayTJic1KZNr5tkRot5pDQYEeBJYQIDAQAB
o4ICdTCCAnEwHQYDVR0OBBYEFOqKmDZ45hbnyGf6gE7suYDTZj93MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvNm9xWU5uam1GdWZJWl9xQVR1eTVnTk5tUDNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGKBggrBgEFBQcBBwEB/wR7MHkwaAQCAAEwYjAMAwQCPjyE
AwQBPjyIMAwDBAA+PIsDBAA+PIwDBAA+PI4DBAA+PJEwDAMEAD48kwMEAT48lAME
Az48qAMEAdWwBAMEANWwBwMEANWwYDAMAwQD1bB4AwQB1bB8AwQA1bB/MA0EAgAC
MAcDBQAgAQeQMA0GCSqGSIb3DQEBCwUAA4IBAQAhEnGbsxUMsdpyxvGMLQ93uDSh
RWylGUjmKmLDOtl4b4jUGysFfq0vCYkF/PROmjNiY4HMngT9KDGu5mseRHHkONhm
US3dWgO76gchCAOkaGc+AgOKwVrf4ed1mhu32rfelICpdwVy9BawlbFuR4rNWM/g
Fb98WSsu8bA/Sz9sF2pPgiWKlE5KyV1XfQEaUGSKbaou2AfLQLAQJ7teND4NQ+aR
ZzoOVPYRKMhz7CKfdEtOVq759JnBkvId/m+XJ3MWg8mZ+clODtAloxAbvyijwRWb
XbXA0ttovzcuU1fVDWVqeC0gryxpvoA/RHJ7OpqOjmIf0WxnMyo5T+Zhxb12
-----END CERTIFICATE-----
Generated at Tue Dec 12 08:36:24 2023 by rpki-client on console-fra.rpki-client.org