Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FarxlcoAZbohDG5iud-i3MVn4p0.roa
File: FarxlcoAZbohDG5iud-i3MVn4p0.roa (raw, json)
Hash identifier: ju7P675aM1z1E1+kQWUzw/+yMdR9XZfzv74pRi5yTzU=
Subject key identifier: 15:AA:F1:95:CA:00:65:BA:21:0C:6E:62:B9:DF:A2:DC:C5:67:E2:9D
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01928ADFC8DE0273F7DDE450DABC8A68F61F
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FarxlcoAZbohDG5iud-i3MVn4p0.roa
Signing time: Mon 14 Oct 2024 11:52:54 +0000
ROA not before: Mon 14 Oct 2024 11:52:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 62.60.152.0/23 maxlen: 24
62.60.244.0/22 maxlen: 24
62.60.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 12:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:df:c8:de:02:73:f7:dd:e4:50:da:bc:8a:68:f6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 14 11:52:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15aaf195ca0065ba210c6e62b9dfa2dcc567e29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:89:9a:c5:56:72:b0:4d:15:a1:b4:5a:22:5c:
0a:76:e7:ce:2e:32:f5:b7:04:64:96:96:b3:5f:b3:
f5:91:be:8a:ac:63:04:d8:2e:18:2d:d6:6b:14:00:
05:1d:a8:51:0e:8d:3c:07:d2:c9:24:a0:05:70:10:
32:88:bb:20:fe:0a:95:c0:bf:fe:80:92:86:fa:65:
ca:d9:02:2a:4e:e9:94:df:c7:1d:4a:2c:c4:be:e6:
5b:25:80:f3:1e:fc:a3:43:cd:2a:39:0b:78:a5:cf:
a2:d1:6c:d4:b6:30:38:c7:b9:39:61:03:b6:f0:8a:
08:66:f9:c0:7a:eb:24:fa:8d:f5:7e:7e:dd:f0:9e:
73:81:37:9f:1a:69:48:56:dc:a2:5e:39:ae:1f:85:
b6:41:7c:c3:13:d6:dc:a6:1e:30:04:05:09:5e:1a:
7c:b2:1e:fc:63:24:7e:85:53:cd:ef:ef:a5:a3:75:
03:16:8f:b9:76:f3:85:c2:54:21:da:a8:81:b9:45:
1e:ee:11:71:72:a6:f9:8d:86:4a:4b:13:21:0d:c5:
53:ad:da:ae:41:3d:af:a6:84:b2:90:ff:91:bc:14:
19:d4:f2:5c:c1:05:3f:df:0f:1e:d0:fe:05:5c:ae:
a0:21:c9:3f:08:7f:78:31:a0:a4:69:dc:ff:4f:57:
b1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AA:F1:95:CA:00:65:BA:21:0C:6E:62:B9:DF:A2:DC:C5:67:E2:9D
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FarxlcoAZbohDG5iud-i3MVn4p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.152.0/23
62.60.244.0-62.60.251.255
Signature Algorithm: sha256WithRSAEncryption
b4:13:2b:0b:34:5c:cd:e8:b2:7f:d8:44:fd:5b:f1:4c:18:34:
ab:69:42:bc:7c:2b:d1:2c:6e:45:df:f3:ce:a4:78:cb:48:de:
15:b8:22:57:e7:0e:6f:dd:64:36:2e:15:1d:92:d2:70:21:09:
15:13:e4:8e:48:df:82:66:ec:45:be:13:b4:5e:e1:b7:97:99:
68:83:6c:2c:38:e1:8e:fa:49:e3:4e:3d:fc:f8:a1:54:c0:da:
1f:e5:21:e1:80:cc:6a:1a:9b:fa:28:2e:53:ee:98:d4:cb:3d:
0d:2d:3a:3d:13:20:23:08:5f:9c:e3:da:95:c9:ae:7d:17:39:
0b:e6:20:a8:46:67:4e:9c:d5:53:74:07:a1:69:74:39:0b:ec:
3f:52:da:37:90:7d:00:0b:e9:d0:0d:f8:ff:93:85:12:38:1d:
f0:17:15:b4:eb:e8:b5:7a:6b:a4:6b:b1:0c:37:4b:4f:40:65:
ce:e3:17:43:dc:30:55:72:a5:87:f7:6c:17:b6:8d:59:3f:67:
dd:64:57:a4:76:9c:0e:04:c5:3b:75:15:20:30:cf:65:b7:91:
dc:81:eb:1b:05:3d:91:4f:8c:99:a2:21:54:e7:1a:99:f6:5a:
52:78:37:8b:7b:50:41:ba:06:87:98:f8:02:8e:e2:8e:cb:dd:
fd:13:cf:ec
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZKK38jeAnP33eRQ2ryKaPYfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQxMDE0MTE1MjU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWFhZjE5NWNhMDA2NWJhMjEwYzZlNjJiOWRmYTJkY2M1NjdlMjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYmaxVZysE0VobRaIlwKdufOLjL1
twRklpazX7P1kb6KrGME2C4YLdZrFAAFHahRDo08B9LJJKAFcBAyiLsg/gqVwL/+
gJKG+mXK2QIqTumU38cdSizEvuZbJYDzHvyjQ80qOQt4pc+i0WzUtjA4x7k5YQO2
8IoIZvnAeusk+o31fn7d8J5zgTefGmlIVtyiXjmuH4W2QXzDE9bcph4wBAUJXhp8
sh78YyR+hVPN7++lo3UDFo+5dvOFwlQh2qiBuUUe7hFxcqb5jYZKSxMhDcVTrdqu
QT2vpoSykP+RvBQZ1PJcwQU/3w8e0P4FXK6gIck/CH94MaCkadz/T1exnwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBWq8ZXKAGW6IQxuYrnfotzFZ+KdMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvRmFyeGxjb0FaYm9oREc1aXVkLWkzTVZuNHAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBPjyYMAwD
BAI+PPQDBAI+PPgwDQYJKoZIhvcNAQELBQADggEBALQTKws0XM3osn/YRP1b8UwY
NKtpQrx8K9EsbkXf886keMtI3hW4IlfnDm/dZDYuFR2S0nAhCRUT5I5I34Jm7EW+
E7Re4beXmWiDbCw44Y76SeNOPfz4oVTA2h/lIeGAzGoam/ooLlPumNTLPQ0tOj0T
ICMIX5zj2pXJrn0XOQvmIKhGZ06c1VN0B6FpdDkL7D9S2jeQfQAL6dAN+P+ThRI4
HfAXFbTr6LV6a6RrsQw3S09AZc7jF0PcMFVypYf3bBe2jVk/Z91kV6R2nA4ExTt1
FSAwz2W3kdyB6xsFPZFPjJmiIVTnGpn2WlJ4N4t7UEG6BoeY+AKO4o7L3f0Tz+w=
-----END CERTIFICATE-----
Generated at Sat Nov 9 17:00:39 2024 by rpki-client on console-fra.rpki-client.org