Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FFRfD9XzjZdmqB9SSjFY5G5RQhI.roa
File: FFRfD9XzjZdmqB9SSjFY5G5RQhI.roa (raw, json)
Hash identifier: VjWy3I9qOAgZKTAytGZNc1juA1PJBl72l1yRIH2xjZ4=
Subject key identifier: 14:54:5F:0F:D5:F3:8D:97:66:A8:1F:52:4A:31:58:E4:6E:51:42:12
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0189C497A19D5E9EB95E63A48007E32EE346
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FFRfD9XzjZdmqB9SSjFY5G5RQhI.roa
Signing time: Sat 05 Aug 2023 07:26:58 +0000
ROA not before: Sat 05 Aug 2023 07:26:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210474
IP address blocks: 62.60.138.0/24 maxlen: 24
62.60.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 05:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c4:97:a1:9d:5e:9e:b9:5e:63:a4:80:07:e3:2e:e3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 5 07:26:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14545f0fd5f38d9766a81f524a3158e46e514212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:49:4c:a6:c8:c3:fa:ee:d1:8d:58:48:6d:93:
91:a2:8d:be:d1:04:b8:96:f9:e4:73:4e:4a:5e:21:
8b:ea:e1:db:2e:49:51:86:a8:72:0c:cc:ec:67:9b:
02:aa:45:92:46:ba:fc:cc:a9:be:6c:7b:b6:fd:ac:
7e:9e:4c:ef:53:2f:cd:fb:23:0d:b2:c8:62:01:12:
60:cb:48:77:56:71:17:47:1a:d3:67:f1:e4:39:8b:
ec:23:63:b7:e6:6c:c1:99:61:53:e2:35:d2:31:c7:
b0:82:e4:0c:43:bc:71:6f:ee:3d:2f:f1:82:71:60:
e6:59:b9:bc:ca:75:1f:90:6d:11:f2:9b:68:de:d0:
94:7c:bd:5d:7b:1e:5f:41:78:1a:c0:d0:13:12:3f:
c5:f0:32:e9:26:5e:0b:18:39:26:a1:61:39:1f:1c:
26:16:20:79:59:c0:bf:9f:44:be:fb:00:57:2f:cc:
65:4d:80:91:62:a0:d0:7c:1a:ce:ab:13:2b:fa:13:
43:a2:a6:e9:57:fa:9d:0a:25:e4:de:fd:85:ea:c7:
fe:78:55:08:ee:32:ef:22:ca:0b:df:57:19:24:b8:
20:fc:62:83:0e:a5:b7:3b:3e:70:b0:41:cb:ed:8e:
59:d6:13:03:a6:47:21:9c:bd:ab:75:b2:9f:01:29:
d9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:54:5F:0F:D5:F3:8D:97:66:A8:1F:52:4A:31:58:E4:6E:51:42:12
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FFRfD9XzjZdmqB9SSjFY5G5RQhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.138.0/24
62.60.143.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ea:cf:26:dc:07:da:63:d8:59:ae:95:35:7e:fc:21:48:c6:
7c:3a:3a:bf:95:5a:3b:4b:4b:71:70:fc:a2:0d:48:4d:d0:8c:
68:d8:c5:d8:75:41:bc:4a:8a:74:97:39:e6:79:fe:23:ab:09:
88:2f:a0:63:a1:5e:e3:12:df:24:68:4a:1c:87:e4:89:2c:ec:
f6:56:25:c5:80:41:f6:d6:11:da:81:cb:fe:a9:9d:ad:aa:45:
13:ac:21:75:84:c5:e9:2d:d4:74:10:39:3f:ef:02:eb:90:6e:
74:80:05:55:ce:30:5a:5e:9c:d4:1d:53:c1:04:90:8a:d6:bf:
91:fa:28:45:d1:10:d2:ec:b5:3a:87:d3:d7:ad:1f:34:89:92:
de:35:55:04:2e:19:ba:3c:3a:1b:1e:d3:4e:48:ae:99:11:0b:
19:7e:81:4c:11:99:01:56:75:64:a8:56:57:a4:ad:a0:4b:0b:
18:4a:c3:84:e9:bb:a1:53:17:74:20:be:05:13:6d:ed:cf:f6:
0e:80:71:82:56:b2:09:7a:27:fe:c7:d5:ee:f7:ab:51:16:39:
c6:44:04:bf:42:76:14:8c:61:39:41:71:2e:d7:9b:49:b1:73:
de:9f:a7:d0:0c:fa:ca:78:9c:a9:58:2b:85:9b:91:62:5d:1e:
3b:4f:6b:22
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYnEl6GdXp65XmOkgAfjLuNGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwODA1MDcyNjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDU0NWYwZmQ1ZjM4ZDk3NjZhODFmNTI0YTMxNThlNDZlNTE0MjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgklMpsjD+u7RjVhIbZORoo2+0QS4
lvnkc05KXiGL6uHbLklRhqhyDMzsZ5sCqkWSRrr8zKm+bHu2/ax+nkzvUy/N+yMN
sshiARJgy0h3VnEXRxrTZ/HkOYvsI2O35mzBmWFT4jXSMcewguQMQ7xxb+49L/GC
cWDmWbm8ynUfkG0R8pto3tCUfL1dex5fQXgawNATEj/F8DLpJl4LGDkmoWE5Hxwm
FiB5WcC/n0S++wBXL8xlTYCRYqDQfBrOqxMr+hNDoqbpV/qdCiXk3v2F6sf+eFUI
7jLvIsoL31cZJLgg/GKDDqW3Oz5wsEHL7Y5Z1hMDpkchnL2rdbKfASnZ3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBRUXw/V842XZqgfUkoxWORuUUISMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvRkZSZkQ5WHpqWmRtcUI5U1NqRlk1RzVSUWhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPjyKAwQA
PjyPMA0GCSqGSIb3DQEBCwUAA4IBAQCJ6s8m3AfaY9hZrpU1fvwhSMZ8Ojq/lVo7
S0txcPyiDUhN0Ixo2MXYdUG8Sop0lznmef4jqwmIL6BjoV7jEt8kaEoch+SJLOz2
ViXFgEH21hHagcv+qZ2tqkUTrCF1hMXpLdR0EDk/7wLrkG50gAVVzjBaXpzUHVPB
BJCK1r+R+ihF0RDS7LU6h9PXrR80iZLeNVUELhm6PDobHtNOSK6ZEQsZfoFMEZkB
VnVkqFZXpK2gSwsYSsOE6buhUxd0IL4FE23tz/YOgHGCVrIJeif+x9Xu96tRFjnG
RAS/QnYUjGE5QXEu15tJsXPen6fQDPrKeJypWCuFm5FiXR47T2si
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org