Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/IgtT8XvejhfBA3HDqmE9OiLTvvw.roa
File: IgtT8XvejhfBA3HDqmE9OiLTvvw.roa (raw, json)
Hash identifier: eNETQoTzMvPn36MBdkhYU6mWqcIsHu4BhFzdAzuselo=
Subject key identifier: 22:0B:53:F1:7B:DE:8E:17:C1:03:71:C3:AA:61:3D:3A:22:D3:BE:FC
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018A1C28985A8C318A2C3D83424053DA1F31
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/IgtT8XvejhfBA3HDqmE9OiLTvvw.roa
Signing time: Tue 22 Aug 2023 07:32:17 +0000
ROA not before: Tue 22 Aug 2023 07:32:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48597
IP address blocks: 62.60.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Oct 2023 06:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:28:98:5a:8c:31:8a:2c:3d:83:42:40:53:da:1f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 22 07:32:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=220b53f17bde8e17c10371c3aa613d3a22d3befc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:be:15:93:2a:5b:d4:e1:7b:65:2a:00:42:19:
69:b3:2b:2b:c6:ff:12:5c:6e:ea:1f:c6:90:35:27:
9f:29:77:28:7a:b5:84:c2:36:28:78:a8:76:d5:09:
71:4d:fb:1f:98:e6:84:1c:0b:35:9e:ba:9a:70:70:
51:84:2f:5e:04:9c:3f:6d:59:13:43:cf:61:02:0d:
8c:28:28:4b:91:61:3e:eb:ef:c9:7d:6d:c1:e0:24:
7f:43:3f:5d:1f:8c:cd:e1:2b:ad:09:c5:fb:48:d7:
22:ab:a3:3e:c8:99:df:da:5b:26:a6:ef:8f:16:37:
03:db:f0:c3:87:ac:51:a3:67:1e:eb:2b:c0:9b:ac:
44:da:73:f9:c3:50:43:2f:5f:95:75:ef:7a:91:7a:
24:79:df:f4:9f:c9:89:db:bb:56:23:61:3e:1a:97:
f4:e5:0b:10:38:a7:e3:4d:bf:79:97:d1:65:29:49:
09:46:d4:9b:1f:01:1e:64:fa:24:a4:4d:b2:27:0c:
3e:a6:79:77:a5:2d:f8:4d:c4:bb:88:b0:6e:77:e8:
a7:ac:65:ef:0b:70:47:19:26:1f:1c:58:32:94:a9:
49:5f:bf:61:4c:b7:16:d5:4f:6d:7f:8d:08:5a:b1:
31:5b:ec:7b:96:21:99:81:01:40:4f:5c:e6:c7:c5:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0B:53:F1:7B:DE:8E:17:C1:03:71:C3:AA:61:3D:3A:22:D3:BE:FC
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/IgtT8XvejhfBA3HDqmE9OiLTvvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.141.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:26:3b:66:a4:4e:98:7e:25:47:5a:16:0e:80:f5:a5:20:43:
1c:73:40:e8:1d:be:a8:3b:c8:41:65:ca:df:98:80:b3:fb:30:
ca:f8:cf:95:25:0a:93:14:c4:00:18:e3:3b:38:c3:e1:f2:a9:
4f:32:1c:47:d3:ad:cd:6d:13:97:aa:b9:12:68:64:29:0f:2e:
44:ad:20:d5:f5:d6:bb:1b:af:7a:e3:3b:1c:f7:e4:f9:af:ae:
de:a8:ee:07:94:53:76:75:8d:ad:5d:a4:8b:04:64:2c:e5:ee:
5e:8f:9f:1c:17:01:a1:83:df:74:d4:74:ba:33:41:04:24:aa:
76:39:e7:2e:b6:b5:f3:9e:0d:e5:15:b6:c4:37:d6:1f:ee:f9:
0a:eb:9e:60:21:02:61:57:84:a0:ab:16:a5:2c:db:2d:55:d7:
fd:88:0e:47:0f:33:68:95:f2:ce:e7:b5:bc:73:ae:0b:e7:6f:
c5:0d:d2:28:46:81:9e:bb:20:9d:b1:c1:1d:8c:be:99:82:4d:
65:de:6a:c6:b3:70:9f:18:87:97:53:6f:e5:bf:e9:f9:89:af:
6a:78:17:b2:57:2e:7f:61:ff:e0:8c:91:b9:c3:7e:e3:0a:b5:
a2:49:f3:e9:be:38:8f:83:69:e8:11:47:de:a0:87:a6:6c:97:
fa:9b:5e:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYocKJhajDGKLD2DQkBT2h8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwODIyMDczMjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjBiNTNmMTdiZGU4ZTE3YzEwMzcxYzNhYTYxM2QzYTIyZDNiZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib4Vkypb1OF7ZSoAQhlpsysrxv8S
XG7qH8aQNSefKXcoerWEwjYoeKh21QlxTfsfmOaEHAs1nrqacHBRhC9eBJw/bVkT
Q89hAg2MKChLkWE+6+/JfW3B4CR/Qz9dH4zN4SutCcX7SNciq6M+yJnf2lsmpu+P
FjcD2/DDh6xRo2ce6yvAm6xE2nP5w1BDL1+Vde96kXoked/0n8mJ27tWI2E+Gpf0
5QsQOKfjTb95l9FlKUkJRtSbHwEeZPokpE2yJww+pnl3pS34TcS7iLBud+inrGXv
C3BHGSYfHFgylKlJX79hTLcW1U9tf40IWrExW+x7liGZgQFAT1zmx8UhhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCILU/F73o4XwQNxw6phPToi0778MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvSWd0VDhYdmVqaGZCQTNIRHFtRTlPaUxUdnZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPjyNMA0G
CSqGSIb3DQEBCwUAA4IBAQCqJjtmpE6YfiVHWhYOgPWlIEMcc0DoHb6oO8hBZcrf
mICz+zDK+M+VJQqTFMQAGOM7OMPh8qlPMhxH063NbROXqrkSaGQpDy5ErSDV9da7
G6964zsc9+T5r67eqO4HlFN2dY2tXaSLBGQs5e5ej58cFwGhg9901HS6M0EEJKp2
OecutrXzng3lFbbEN9Yf7vkK655gIQJhV4SgqxalLNstVdf9iA5HDzNolfLO57W8
c64L52/FDdIoRoGeuyCdscEdjL6Zgk1l3mrGs3CfGIeXU2/lv+n5ia9qeBeyVy5/
Yf/gjJG5w37jCrWiSfPpvjiPg2noEUfeoIembJf6m17E
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org