Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FOlmUAnkmSHszZHBhU7yk5Mu2Ug.roa
File: FOlmUAnkmSHszZHBhU7yk5Mu2Ug.roa (raw, json)
Hash identifier: CY3ZS0tp+XMQzhPym1oZkr3RKq0bISmnRw2mISKXtUE=
Subject key identifier: 14:E9:66:50:09:E4:99:21:EC:CD:91:C1:85:4E:F2:93:93:2E:D9:48
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018AFE264F9DFC90BDF42C67BF13C7EC4511
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FOlmUAnkmSHszZHBhU7yk5Mu2Ug.roa
Signing time: Thu 05 Oct 2023 04:43:58 +0000
ROA not before: Thu 05 Oct 2023 04:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.220.0/22 maxlen: 24
62.60.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Oct 2023 12:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:26:4f:9d:fc:90:bd:f4:2c:67:bf:13:c7:ec:45:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 5 04:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14e9665009e49921eccd91c1854ef293932ed948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:91:18:25:cd:9d:22:c6:3f:5b:69:27:9d:
8e:aa:8e:4e:ba:ed:b8:d6:b3:15:17:9b:6c:b4:31:
4e:48:93:85:af:dd:b1:24:69:6c:55:02:65:a3:df:
e1:e2:fd:0d:06:21:e2:80:2b:18:6c:c3:de:c4:58:
c2:53:0a:1d:ff:cc:bc:1f:5a:c2:59:4c:39:84:b7:
77:b6:ae:38:b8:e8:a7:2e:a6:3d:32:d0:45:9b:da:
10:28:c7:0b:b8:68:27:6d:ba:1f:db:b6:c8:af:4a:
f4:93:b4:10:75:c6:4d:78:00:20:5b:08:a3:46:09:
64:20:72:e2:75:10:94:f9:17:33:8f:8e:8f:49:58:
bd:74:c5:88:a1:03:39:9d:54:27:c8:b6:01:ae:26:
76:9d:6b:70:22:a9:5c:a8:88:2d:02:de:aa:d7:4b:
af:bf:28:5c:7c:57:26:36:c7:3a:a9:5a:aa:97:7c:
da:d1:7d:b6:94:8a:70:27:c2:df:72:58:74:8f:22:
ba:6f:d2:37:45:35:eb:1b:5a:44:a2:70:34:2e:be:
fa:78:db:03:67:9f:fd:20:95:38:86:d7:f9:9a:03:
93:2d:bd:b7:3e:08:50:ee:45:22:69:a1:71:70:15:
bd:d0:8a:6b:eb:0a:ce:f9:0c:3c:12:ad:dd:4f:b5:
b9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E9:66:50:09:E4:99:21:EC:CD:91:C1:85:4E:F2:93:93:2E:D9:48
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FOlmUAnkmSHszZHBhU7yk5Mu2Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.180.0/22
62.60.220.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:19:06:84:3a:e9:51:67:3b:dc:e2:e9:2f:11:64:fb:da:03:
18:ac:4c:5c:09:3f:ee:53:08:ce:dc:1e:b8:70:d3:7b:3c:b6:
e0:7e:5f:ac:83:ff:78:61:58:28:34:b4:00:66:de:be:05:f2:
e7:8e:d4:33:6e:b2:71:38:da:58:51:e6:1c:c0:36:ff:07:7e:
f2:73:93:14:2f:9f:a5:29:87:e6:28:ff:bf:b5:ce:6b:e7:9c:
3c:59:58:df:29:3f:3d:47:f2:53:62:8e:7d:6c:2c:cc:95:e3:
9f:5c:a7:b1:94:9f:3e:4b:db:f7:c9:c4:1c:64:72:a9:84:59:
27:f0:0c:21:43:c2:f8:eb:3e:db:fd:29:ba:73:18:de:aa:18:
d8:d6:c5:dd:e2:58:a8:af:6e:50:c4:87:4a:5e:b3:36:2e:20:
2e:3d:ce:53:ff:ed:8a:86:35:ac:9c:ef:d4:9f:3e:b7:59:ba:
de:d6:98:97:0a:b6:7f:1a:53:30:7a:d3:e5:c9:9c:f9:17:40:
00:bf:01:44:66:8b:ab:e7:85:46:22:a9:f9:21:5a:08:7a:40:
24:4b:a1:a2:43:e1:72:32:48:6d:9a:39:ae:05:e6:58:bc:91:
1b:54:10:f7:e3:56:a6:df:1e:a3:9f:b4:59:c6:06:28:3f:f6:
c9:a8:29:ce
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYr+Jk+d/JC99CxnvxPH7EURMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMxMDA1MDQ0MzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGU5NjY1MDA5ZTQ5OTIxZWNjZDkxYzE4NTRlZjI5MzkzMmVkOTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLCRGCXNnSLGP1tpJ52Oqo5Ouu24
1rMVF5tstDFOSJOFr92xJGlsVQJlo9/h4v0NBiHigCsYbMPexFjCUwod/8y8H1rC
WUw5hLd3tq44uOinLqY9MtBFm9oQKMcLuGgnbbof27bIr0r0k7QQdcZNeAAgWwij
RglkIHLidRCU+Rczj46PSVi9dMWIoQM5nVQnyLYBriZ2nWtwIqlcqIgtAt6q10uv
vyhcfFcmNsc6qVqql3za0X22lIpwJ8Lfclh0jyK6b9I3RTXrG1pEonA0Lr76eNsD
Z5/9IJU4htf5mgOTLb23PghQ7kUiaaFxcBW90Ipr6wrO+Qw8Eq3dT7W56QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBTpZlAJ5Jkh7M2RwYVO8pOTLtlIMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvRk9sbVVBbmttU0hzelpIQmhVN3lrNU11MlVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCPjy0AwQC
PjzcMA0GCSqGSIb3DQEBCwUAA4IBAQAqGQaEOulRZzvc4ukvEWT72gMYrExcCT/u
UwjO3B64cNN7PLbgfl+sg/94YVgoNLQAZt6+BfLnjtQzbrJxONpYUeYcwDb/B37y
c5MUL5+lKYfmKP+/tc5r55w8WVjfKT89R/JTYo59bCzMleOfXKexlJ8+S9v3ycQc
ZHKphFkn8AwhQ8L46z7b/Sm6cxjeqhjY1sXd4lior25QxIdKXrM2LiAuPc5T/+2K
hjWsnO/Unz63Wbre1piXCrZ/GlMwetPlyZz5F0AAvwFEZour54VGIqn5IVoIekAk
S6GiQ+FyMkhtmjmuBeZYvJEbVBD341am3x6jn7RZxgYoP/bJqCnO
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org