Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/CinM_eh3jMW2bXNuJOL0BGKS17k.roa
File: CinM_eh3jMW2bXNuJOL0BGKS17k.roa (raw, json)
Hash identifier: BSFDnfT+ehtCqzqKuxzmnvEzCFAHg1MCSPbcSr3pTTM=
Subject key identifier: 0A:29:CC:FD:E8:77:8C:C5:B6:6D:73:6E:24:E2:F4:04:62:92:D7:B9
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0191F939EECB4CECA40DEE2C3AE8F231C5C3
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/CinM_eh3jMW2bXNuJOL0BGKS17k.roa
Signing time: Mon 16 Sep 2024 05:06:49 +0000
ROA not before: Mon 16 Sep 2024 05:06:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57456
IP address blocks: 62.60.187.0/24 maxlen: 24
62.60.224.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Sep 2024 06:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f9:39:ee:cb:4c:ec:a4:0d:ee:2c:3a:e8:f2:31:c5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 16 05:06:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a29ccfde8778cc5b66d736e24e2f4046292d7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:f3:28:b5:6c:a1:66:fa:40:c5:66:a5:ae:
3e:6e:8d:c9:67:e5:f5:0f:5d:7d:6b:1b:d8:ef:a1:
0a:11:87:91:58:d4:be:6d:01:1f:f9:0e:d0:2a:db:
05:8b:f3:27:95:16:c2:b0:5e:6e:07:f7:21:83:dd:
7e:b7:7f:3c:08:14:72:2d:c0:a7:63:84:79:07:c8:
fe:ee:6b:9c:07:50:17:3a:77:3e:c3:70:41:67:70:
67:21:8a:2a:7b:8c:bb:77:f2:9a:74:6e:64:18:6c:
94:bc:f5:b2:be:f0:8f:6a:cb:f5:47:1c:a5:47:54:
ec:74:2c:57:2d:8e:1c:97:90:3e:da:fb:17:03:fa:
08:15:16:a6:d3:9c:bb:aa:61:52:39:5d:b9:4f:13:
25:3b:c9:46:f3:d6:01:c0:23:54:35:7e:5c:70:f3:
7e:41:9c:ba:d5:4f:11:0b:ea:35:73:4d:3d:b7:b4:
25:5e:38:b0:96:1c:1b:b1:57:31:9a:be:78:dd:84:
56:09:69:6e:ad:72:15:a4:0c:54:d3:82:09:ac:2f:
d6:2e:6f:4a:73:e9:c4:1f:89:11:03:ca:00:b2:b0:
57:45:2c:88:0d:c1:8c:68:ce:c2:f3:8b:91:67:c8:
56:34:7f:7f:b6:57:16:8a:a9:75:e1:da:0f:85:ea:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:29:CC:FD:E8:77:8C:C5:B6:6D:73:6E:24:E2:F4:04:62:92:D7:B9
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/CinM_eh3jMW2bXNuJOL0BGKS17k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.187.0/24
62.60.224.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:bd:62:1e:1d:de:f1:59:46:9f:b7:17:9e:33:c8:f1:06:bc:
9b:c3:c4:36:7a:80:36:48:3b:f8:df:fa:19:ab:10:c5:91:03:
da:d8:a0:82:8e:85:28:b6:e6:24:8d:7b:8a:17:d8:23:0e:04:
7d:63:53:55:6a:c1:a8:f3:9a:54:67:c0:94:7e:27:bc:eb:b7:
c8:6a:c3:e9:57:12:44:88:e9:da:f3:75:16:b8:43:24:36:0e:
ab:51:76:1e:d1:a0:20:a2:c3:3d:4c:f5:6d:92:93:a9:60:5f:
a4:f6:be:bd:93:81:32:e7:ed:83:28:c6:e2:22:f4:5f:35:53:
29:7e:31:1e:26:60:fc:25:a7:a1:13:54:f1:39:d5:a2:4f:2a:
9c:b6:e5:17:a0:f0:d5:2f:c7:8b:67:18:6f:1a:8e:3d:00:42:
18:fd:d2:73:27:22:e6:31:3c:11:9b:2b:3b:a4:51:5c:5f:7d:
74:0a:55:d6:4e:5c:9a:03:6c:8f:c1:9c:48:11:c3:e5:e5:bd:
74:0e:ff:1f:14:16:d8:43:98:67:a9:74:bf:ea:b6:4a:4e:8e:
48:27:56:c3:a7:79:97:9b:cf:d4:04:d8:7e:dd:ba:a6:ec:48:
56:50:41:d3:64:9d:2a:3f:be:08:fc:a5:8b:ee:dd:84:06:c5:
6e:77:d3:ba
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZH5Oe7LTOykDe4sOujyMcXDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwOTE2MDUwNjQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTI5Y2NmZGU4Nzc4Y2M1YjY2ZDczNmUyNGUyZjQwNDYyOTJkN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniDzKLVsoWb6QMVmpa4+bo3JZ+X1
D119axvY76EKEYeRWNS+bQEf+Q7QKtsFi/MnlRbCsF5uB/chg91+t388CBRyLcCn
Y4R5B8j+7mucB1AXOnc+w3BBZ3BnIYoqe4y7d/KadG5kGGyUvPWyvvCPasv1Rxyl
R1TsdCxXLY4cl5A+2vsXA/oIFRam05y7qmFSOV25TxMlO8lG89YBwCNUNX5ccPN+
QZy61U8RC+o1c009t7QlXjiwlhwbsVcxmr543YRWCWlurXIVpAxU04IJrC/WLm9K
c+nEH4kRA8oAsrBXRSyIDcGMaM7C84uRZ8hWNH9/tlcWiql14doPheofnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAopzP3od4zFtm1zbiTi9ARikte5MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvQ2luTV9laDNqTVcyYlhOdUpPTDBCR0tTMTdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPjy7AwQE
PjzgMA0GCSqGSIb3DQEBCwUAA4IBAQB/vWIeHd7xWUaftxeeM8jxBrybw8Q2eoA2
SDv43/oZqxDFkQPa2KCCjoUotuYkjXuKF9gjDgR9Y1NVasGo85pUZ8CUfie867fI
asPpVxJEiOna83UWuEMkNg6rUXYe0aAgosM9TPVtkpOpYF+k9r69k4Ey5+2DKMbi
IvRfNVMpfjEeJmD8JaehE1TxOdWiTyqctuUXoPDVL8eLZxhvGo49AEIY/dJzJyLm
MTwRmys7pFFcX310ClXWTlyaA2yPwZxIEcPl5b10Dv8fFBbYQ5hnqXS/6rZKTo5I
J1bDp3mXm8/UBNh+3bqm7EhWUEHTZJ0qP74I/KWL7t2EBsVud9O6
-----END CERTIFICATE-----
Generated at Tue Sep 17 08:50:24 2024 by rpki-client on console-ams.rpki-client.org