Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/E-BWbIfK6Kq67fH1Z1Txav8vt98.roa
File: E-BWbIfK6Kq67fH1Z1Txav8vt98.roa (raw, json)
Hash identifier: SqNOnYMnYfzfzji7bQN8H0RrTYmOtxzagRSsK6uFZ0I=
Subject key identifier: 13:E0:56:6C:87:CA:E8:AA:BA:ED:F1:F5:67:54:F1:6A:FF:2F:B7:DF
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0189C8CC4993F9AB0368896A90EC3E4B4B9B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/E-BWbIfK6Kq67fH1Z1Txav8vt98.roa
Signing time: Sun 06 Aug 2023 03:02:58 +0000
ROA not before: Sun 06 Aug 2023 03:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211421
IP address blocks: 62.60.152.0/22 maxlen: 24
62.60.146.0/23 maxlen: 24
213.176.120.0/23 maxlen: 24
213.176.126.0/23 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c8:cc:49:93:f9:ab:03:68:89:6a:90:ec:3e:4b:4b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 6 03:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13e0566c87cae8aabaedf1f56754f16aff2fb7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:ef:bd:e2:ed:14:ae:94:ef:d3:20:6a:85:
c1:ed:1d:2f:6a:fa:07:09:d6:fb:06:05:43:15:98:
5b:07:a6:f6:6f:64:f3:0f:4f:70:7b:b8:b5:04:dc:
21:a0:5e:32:0d:6c:61:7c:a8:62:24:2d:df:45:e6:
a8:3b:a7:4b:b3:dc:7a:ef:82:80:57:18:aa:4e:89:
b6:d4:08:02:f5:e3:61:d5:db:35:61:91:31:1a:d1:
b6:80:fc:02:3c:5a:79:8b:c0:2a:bc:da:a2:13:c3:
e3:b3:24:95:31:ba:b1:64:de:0b:ea:e7:c5:a2:22:
2e:ee:c4:ba:ab:50:2f:c2:b5:bc:48:69:30:1b:f7:
fd:d6:26:69:ea:e0:4c:b5:32:34:84:bb:88:3f:73:
db:0e:89:9b:4e:58:c4:dd:fb:74:d5:16:69:2e:1f:
c2:9f:68:e0:a1:10:b0:65:91:14:89:9f:c1:52:96:
a4:55:aa:da:77:88:da:07:d5:1c:f1:de:55:e9:eb:
4a:ea:40:18:a5:99:41:3c:30:53:9d:fe:e3:4e:b1:
01:e8:8e:f0:79:8a:ed:7a:bf:28:a0:57:3f:b0:d8:
a9:f1:83:45:ce:e3:68:ef:3c:fc:1e:d7:19:c6:74:
f7:cc:ae:9a:1b:9a:64:9d:6b:ed:5f:0d:cc:dd:f1:
d4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E0:56:6C:87:CA:E8:AA:BA:ED:F1:F5:67:54:F1:6A:FF:2F:B7:DF
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/E-BWbIfK6Kq67fH1Z1Txav8vt98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0/23
62.60.152.0/22
62.60.192.0/21
213.176.120.0/23
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
01:5a:bf:0b:d3:34:f3:42:c8:0c:e9:68:28:a3:18:f8:8b:e6:
69:91:eb:1d:c5:46:26:70:1a:28:9b:77:a1:20:a4:e0:0a:b1:
c8:99:b8:7f:10:0b:e1:2b:a5:9f:84:5c:e1:e9:9b:b6:59:98:
aa:a3:88:bc:da:56:08:ce:c7:3f:c8:86:86:ca:14:a3:31:2b:
b4:3f:93:95:1e:ef:6e:61:fa:19:05:43:6d:5c:d9:30:4d:52:
35:8e:90:10:78:a3:99:4b:c1:37:3e:4d:88:11:c8:a8:e5:15:
93:d1:4b:05:c1:74:59:ec:aa:65:45:d2:00:4e:28:75:e5:cd:
ff:c9:84:87:f5:34:48:e1:30:c5:5b:5c:e2:91:bf:08:de:2f:
4f:0b:b3:33:b6:8b:d2:ae:fd:00:d5:a5:93:7c:37:04:b8:84:
04:34:f8:3f:e0:73:20:65:f7:90:12:5c:ef:a5:c6:33:61:e9:
f5:fe:51:25:3f:a7:24:a4:ec:b6:80:6c:08:7e:ae:13:45:50:
59:8f:d5:c7:d8:d0:d2:50:0d:24:99:2c:93:31:a0:e2:83:1d:
86:f0:98:99:0a:6e:a0:3e:a4:57:03:8e:fb:99:6e:fa:04:11:
4d:bc:d5:a6:35:18:7d:80:d1:3e:25:e1:ea:d3:be:a3:47:75:
67:62:cb:ee
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYnIzEmT+asDaIlqkOw+S0ubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwODA2MDMwMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2UwNTY2Yzg3Y2FlOGFhYmFlZGYxZjU2NzU0ZjE2YWZmMmZiN2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdzvveLtFK6U79MgaoXB7R0vavoH
Cdb7BgVDFZhbB6b2b2TzD09we7i1BNwhoF4yDWxhfKhiJC3fReaoO6dLs9x674KA
VxiqTom21AgC9eNh1ds1YZExGtG2gPwCPFp5i8AqvNqiE8PjsySVMbqxZN4L6ufF
oiIu7sS6q1AvwrW8SGkwG/f91iZp6uBMtTI0hLuIP3PbDombTljE3ft01RZpLh/C
n2jgoRCwZZEUiZ/BUpakVarad4jaB9Uc8d5V6etK6kAYpZlBPDBTnf7jTrEB6I7w
eYrter8ooFc/sNip8YNFzuNo7zz8HtcZxnT3zK6aG5pknWvtXw3M3fHUQQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBPgVmyHyuiquu3x9WdU8Wr/L7ffMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvRS1CV2JJZks2S3E2N2ZIMVoxVHhhdjh2dDk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBPjySAwQC
PjyYAwQDPjzAAwQB1bB4AwQB1bB+MA0GCSqGSIb3DQEBCwUAA4IBAQABWr8L0zTz
QsgM6Wgooxj4i+ZpkesdxUYmcBoom3ehIKTgCrHImbh/EAvhK6WfhFzh6Zu2WZiq
o4i82lYIzsc/yIaGyhSjMSu0P5OVHu9uYfoZBUNtXNkwTVI1jpAQeKOZS8E3Pk2I
Ecio5RWT0UsFwXRZ7KplRdIATih15c3/yYSH9TRI4TDFW1zikb8I3i9PC7MztovS
rv0A1aWTfDcEuIQENPg/4HMgZfeQElzvpcYzYen1/lElP6ckpOy2gGwIfq4TRVBZ
j9XH2NDSUA0kmSyTMaDigx2G8JiZCm6gPqRXA477mW76BBFNvNWmNRh9gNE+JeHq
076jR3VnYsvu
Generated at Sun Aug 6 07:04:46 2023 by rpki-client on console-fra.rpki-client.org