Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/K2e9Y5NX7jyzSEw_TyFtLdqsuYo.roa
File: K2e9Y5NX7jyzSEw_TyFtLdqsuYo.roa (raw, json)
Hash identifier: A6i6wBKlYe/Avwk2t8ZuKuqpPvSQvESQP1FjkLynxZk=
Subject key identifier: 2B:67:BD:63:93:57:EE:3C:B3:48:4C:3F:4F:21:6D:2D:DA:AC:B9:8A
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018FAF779C25C9FBA2BED93156F1B3DA244B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/K2e9Y5NX7jyzSEw_TyFtLdqsuYo.roa
Signing time: Sat 25 May 2024 11:16:42 +0000
ROA not before: Sat 25 May 2024 11:16:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15611
IP address blocks: 62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.147.0/24 maxlen: 24
62.60.168.0/21 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
213.176.64.0/23 maxlen: 24
213.176.72.0/22 maxlen: 24
213.176.96.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
2001:790::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 May 2024 12:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:af:77:9c:25:c9:fb:a2:be:d9:31:56:f1:b3:da:24:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 25 11:16:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b67bd639357ee3cb3484c3f4f216d2ddaacb98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:9f:bf:95:e4:50:13:d0:63:e7:af:39:e1:
a4:d9:03:93:d5:c0:ef:15:fe:8d:72:56:9a:89:67:
4b:c6:ea:51:c9:2e:00:79:c8:7e:84:f8:f5:d1:1e:
04:13:15:71:d3:14:17:be:b8:ef:ef:b3:a6:76:a1:
f1:5d:57:97:d5:5b:c6:90:55:0c:cf:f8:c1:ea:81:
3c:d1:22:07:83:22:97:be:a2:41:1c:ce:51:f5:9d:
1c:47:9a:5f:e0:a1:8b:5d:dc:42:df:89:37:18:22:
b2:3d:3f:d5:5a:d4:51:f1:c1:18:5b:32:83:e8:f2:
5b:8b:0c:4c:92:f8:ba:6f:05:dc:3a:41:91:1c:80:
61:c1:30:3d:09:20:83:55:f3:49:95:f3:5b:0f:73:
25:00:cc:f5:19:19:e8:aa:67:dd:8f:2a:3a:c3:44:
ab:5d:90:a6:d5:a6:7a:b6:4d:8b:b5:54:70:04:76:
0e:59:95:fa:c2:cb:3d:df:97:ce:aa:19:12:93:5c:
08:5f:93:34:30:8c:f7:2c:23:f5:d5:c0:41:b5:87:
9d:17:77:ce:8e:69:b1:9d:5b:e1:52:04:a0:04:e3:
36:fc:54:0d:cb:e7:71:6c:e1:e4:21:e8:e2:b9:cb:
79:9c:1e:f9:36:86:0b:eb:d4:2f:8a:83:ba:9c:0d:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:67:BD:63:93:57:EE:3C:B3:48:4C:3F:4F:21:6D:2D:DA:AC:B9:8A
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/K2e9Y5NX7jyzSEw_TyFtLdqsuYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.140.255
62.60.142.0/24
62.60.145.0/24
62.60.147.0/24
62.60.168.0/21
213.176.4.0/23
213.176.64.0/23
213.176.72.0/22
213.176.96.0/24
213.176.122.0-213.176.125.255
IPv6:
2001:790::/32
Signature Algorithm: sha256WithRSAEncryption
6a:53:e4:ea:6e:05:88:74:f9:87:c9:5a:5b:f1:a0:e0:21:2a:
e8:34:83:7f:6b:bc:7d:ac:bb:2b:34:39:05:28:0a:75:76:0a:
d2:ed:f8:c5:3e:a2:66:82:5c:17:55:13:91:47:db:27:52:c7:
4e:eb:bf:0c:ec:08:fa:35:07:74:94:30:1b:ca:fb:f3:43:af:
1f:aa:6a:dc:cc:51:43:2c:4a:f0:2f:7f:92:ce:f7:e8:69:3f:
bc:e8:c4:c2:0e:6d:56:f7:1f:c9:2f:2f:87:8d:52:9c:7e:12:
01:87:ae:6b:12:2a:d8:97:4e:aa:82:7c:5d:37:37:95:6d:16:
90:69:16:a8:60:a2:56:47:93:ff:3d:eb:7b:95:ba:e8:58:29:
5d:3b:ab:91:eb:07:19:3a:e2:9a:32:32:f9:88:b2:fc:c1:d8:
92:c0:ac:38:cf:ba:45:e6:a7:9a:33:c2:22:66:30:fa:4b:22:
2d:c5:29:48:35:30:04:1a:f8:be:fb:2b:eb:43:b6:15:9a:f5:
7c:20:e3:d4:a0:62:cc:25:75:4d:1d:7b:42:da:c4:14:73:81:
27:de:e4:c6:50:d4:92:b0:eb:4a:3b:36:f8:af:27:26:d0:e9:
ca:d7:18:5f:51:46:39:e0:74:35:86:df:6d:02:d9:a1:38:25:
3f:f3:ed:92
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgISAY+vd5wlyfuivtkxVvGz2iRLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwNTI1MTExNjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjY3YmQ2MzkzNTdlZTNjYjM0ODRjM2Y0ZjIxNmQyZGRhYWNiOThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4Cfv5XkUBPQY+evOeGk2QOT1cDv
Ff6NclaaiWdLxupRyS4Aech+hPj10R4EExVx0xQXvrjv77OmdqHxXVeX1VvGkFUM
z/jB6oE80SIHgyKXvqJBHM5R9Z0cR5pf4KGLXdxC34k3GCKyPT/VWtRR8cEYWzKD
6PJbiwxMkvi6bwXcOkGRHIBhwTA9CSCDVfNJlfNbD3MlAMz1GRnoqmfdjyo6w0Sr
XZCm1aZ6tk2LtVRwBHYOWZX6wss935fOqhkSk1wIX5M0MIz3LCP11cBBtYedF3fO
jmmxnVvhUgSgBOM2/FQNy+dxbOHkIejiuct5nB75NoYL69QvioO6nA3VCQIDAQAB
o4ICbTCCAmkwHQYDVR0OBBYEFCtnvWOTV+48s0hMP08hbS3arLmKMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvSzJlOVk1Tlg3anl6U0V3X1R5RnRMZHFzdVlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwYAQCAAEwWjAMAwQCPjyE
AwQBPjyIMAwDBAA+PIsDBAA+PIwDBAA+PI4DBAA+PJEDBAA+PJMDBAM+PKgDBAHV
sAQDBAHVsEADBALVsEgDBADVsGAwDAMEAdWwegMEAdWwfDANBAIAAjAHAwUAIAEH
kDANBgkqhkiG9w0BAQsFAAOCAQEAalPk6m4FiHT5h8laW/Gg4CEq6DSDf2u8fay7
KzQ5BSgKdXYK0u34xT6iZoJcF1UTkUfbJ1LHTuu/DOwI+jUHdJQwG8r780OvH6pq
3MxRQyxK8C9/ks736Gk/vOjEwg5tVvcfyS8vh41SnH4SAYeuaxIq2JdOqoJ8XTc3
lW0WkGkWqGCiVkeT/z3re5W66FgpXTurkesHGTrimjIy+Yiy/MHYksCsOM+6Rean
mjPCImYw+ksiLcUpSDUwBBr4vvsr60O2FZr1fCDj1KBizCV1TR17QtrEFHOBJ97k
xlDUkrDrSjs2+K8nJtDpytcYX1FGOeB0NYbfbQLZoTglP/Ptkg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org