Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/DCV-2AnF6MBQkWQ_aSwkhXa24Us.roa
File: DCV-2AnF6MBQkWQ_aSwkhXa24Us.roa (raw, json)
Hash identifier: KlQ43zTdIhD5aTpZ0QHbB1k83tt0j8f1nfjzBHspULo=
Subject key identifier: 0C:25:7E:D8:09:C5:E8:C0:50:91:64:3F:69:2C:24:85:76:B6:E1:4B
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0186DAEEF3B958DF3B7B3D67B5D7D2853D15
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/DCV-2AnF6MBQkWQ_aSwkhXa24Us.roa
Signing time: Mon 13 Mar 2023 12:25:38 +0000
ROA not before: Mon 13 Mar 2023 12:25:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 62.60.216.0/22 maxlen: 24
62.60.220.0/22 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.172.0/22 maxlen: 24
62.60.176.0/22 maxlen: 24
62.60.180.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.188.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.196.0/24 maxlen: 24
62.60.204.0/22 maxlen: 24
62.60.200.0/21 maxlen: 24
62.60.208.0/22 maxlen: 24
62.60.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:ee:f3:b9:58:df:3b:7b:3d:67:b5:d7:d2:85:3d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Mar 13 12:25:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c257ed809c5e8c05091643f692c248576b6e14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:18:33:a1:3a:69:f6:17:d1:1f:ea:10:b4:55:
5b:20:d7:ab:62:42:b8:87:27:ee:fd:35:cd:82:45:
58:f3:10:ca:a5:0a:f7:43:ea:bb:32:b2:1c:a7:9d:
ea:e4:6e:9e:20:4c:96:61:73:83:25:5c:e1:88:af:
2b:3b:b5:48:96:91:91:f1:f0:5d:38:75:13:2d:f0:
09:85:78:b3:ff:66:9e:5a:12:d0:fc:67:0c:d3:a5:
15:62:1f:cb:b1:a6:07:b9:08:28:42:e0:0d:c5:ff:
7c:5a:fd:4d:19:75:b9:7d:18:b7:e3:bb:48:0a:e4:
29:c9:dc:77:5b:c1:39:35:82:27:0a:17:2d:5a:4d:
17:03:9b:4b:31:f6:ac:62:8a:a2:11:af:ae:1c:a2:
83:13:52:a1:a4:76:bc:7a:1f:e2:a2:77:38:9e:52:
7d:60:15:22:43:94:92:cf:89:10:54:96:b7:89:89:
ec:7b:54:25:8a:fc:bb:73:c1:4e:6a:31:63:9b:0b:
7f:bf:55:6e:d6:95:74:a5:43:1f:b6:15:be:de:6b:
45:5b:5d:7c:16:6e:0b:b2:6c:fc:d3:24:14:2c:57:
47:1a:a1:48:50:aa:93:b1:32:ac:de:e4:71:eb:55:
21:99:4c:2d:87:65:d3:a9:f5:e8:f9:07:71:d1:54:
64:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:25:7E:D8:09:C5:E8:C0:50:91:64:3F:69:2C:24:85:76:B6:E1:4B
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/DCV-2AnF6MBQkWQ_aSwkhXa24Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.168.0-62.60.196.255
62.60.200.0-62.60.212.255
62.60.216.0/21
Signature Algorithm: sha256WithRSAEncryption
29:51:3b:d6:78:a9:c4:04:67:a4:c6:40:a2:23:50:92:a7:c4:
8b:2d:67:73:94:e9:32:86:f5:8c:8d:d4:cd:e6:08:4e:a7:27:
b0:0d:18:1c:8f:f8:82:9c:7e:e5:ab:18:f2:dc:79:5f:de:fc:
ba:24:e4:de:51:f0:b1:44:0c:2d:7f:68:4b:7c:17:ab:05:00:
a0:50:c8:16:24:34:59:78:b6:86:77:3a:07:35:a4:6e:59:c1:
e1:fa:46:2e:c5:0d:75:20:e7:ef:c4:87:2d:7c:2f:69:f9:45:
08:f9:97:4a:f8:a5:cb:80:47:e8:33:86:22:85:a8:a7:55:7c:
8e:b0:95:20:ea:6c:69:4c:16:9f:e1:87:e3:bf:a7:5f:3a:4a:
71:7e:8f:21:53:a6:1e:6f:06:3e:16:0e:60:ad:45:56:3c:3c:
ce:39:87:8d:0b:61:3a:3b:5b:df:e2:17:a0:36:73:bd:97:67:
8b:29:e7:2e:eb:2d:c8:03:0e:7c:df:df:25:f9:2f:12:97:e0:
2f:61:b1:6a:39:52:80:49:fd:f4:d5:24:04:ea:0b:01:5f:ae:
91:44:fe:43:7d:fc:0a:69:f2:51:83:bd:c3:02:52:b0:c4:63:
ae:e9:1e:ec:c4:df:ce:eb:4b:99:fe:be:0b:df:70:fc:6a:76:
3d:03:46:d1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYba7vO5WN87ez1ntdfShT0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwMzEzMTIyNTM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzI1N2VkODA5YzVlOGMwNTA5MTY0M2Y2OTJjMjQ4NTc2YjZlMTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xgzoTpp9hfRH+oQtFVbINerYkK4
hyfu/TXNgkVY8xDKpQr3Q+q7MrIcp53q5G6eIEyWYXODJVzhiK8rO7VIlpGR8fBd
OHUTLfAJhXiz/2aeWhLQ/GcM06UVYh/LsaYHuQgoQuANxf98Wv1NGXW5fRi347tI
CuQpydx3W8E5NYInChctWk0XA5tLMfasYoqiEa+uHKKDE1KhpHa8eh/ionc4nlJ9
YBUiQ5SSz4kQVJa3iYnse1Qlivy7c8FOajFjmwt/v1Vu1pV0pUMfthW+3mtFW118
Fm4Lsmz80yQULFdHGqFIUKqTsTKs3uRx61UhmUwth2XTqfXo+Qdx0VRkBwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAwlftgJxejAUJFkP2ksJIV2tuFLMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvRENWLTJBbkY2TUJRa1dRX2FTd2toWGEyNFVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAM+PKgD
BAA+PMQwDAMEAz48yAMEAD481AMEAz482DANBgkqhkiG9w0BAQsFAAOCAQEAKVE7
1nipxARnpMZAoiNQkqfEiy1nc5TpMob1jI3UzeYITqcnsA0YHI/4gpx+5asY8tx5
X978uiTk3lHwsUQMLX9oS3wXqwUAoFDIFiQ0WXi2hnc6BzWkblnB4fpGLsUNdSDn
78SHLXwvaflFCPmXSvily4BH6DOGIoWop1V8jrCVIOpsaUwWn+GH47+nXzpKcX6P
IVOmHm8GPhYOYK1FVjw8zjmHjQthOjtb3+IXoDZzvZdniynnLustyAMOfN/fJfkv
EpfgL2GxajlSgEn99NUkBOoLAV+ukUT+Q338CmnyUYO9wwJSsMRjruke7MTfzutL
mf6+C99w/Gp2PQNG0Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:23 2023 by rpki-client on console-ams.rpki-client.org