Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/KChW3BDmQmZua239mPTv1I71jC8.roa
File: KChW3BDmQmZua239mPTv1I71jC8.roa (raw, json)
Hash identifier: cIQb0EVDiKvG/Xo8+VuMr/4KcyDkCWapFEEhSFkjLS8=
Subject key identifier: 28:28:56:DC:10:E6:42:66:6E:6B:6D:FD:98:F4:EF:D4:8E:F5:8C:2F
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01905D59193ABD66B3C2E18795FD5FB4684A
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/KChW3BDmQmZua239mPTv1I71jC8.roa
Signing time: Fri 28 Jun 2024 05:37:18 +0000
ROA not before: Fri 28 Jun 2024 05:37:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44559
IP address blocks: 62.60.184.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 07:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5d:59:19:3a:bd:66:b3:c2:e1:87:95:fd:5f:b4:68:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 28 05:37:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=282856dc10e642666e6b6dfd98f4efd48ef58c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:8d:d9:17:cd:dc:13:d3:8e:ad:a8:fe:0e:
4e:72:6f:c8:65:20:ac:39:70:fa:1d:cb:92:eb:36:
9b:7a:c2:b8:04:d8:77:46:a4:30:30:3c:9e:31:b9:
e7:c5:e2:44:a9:b9:59:31:e0:86:95:32:80:38:f9:
1d:e9:95:9f:82:83:4f:2e:75:48:d4:20:7d:49:ac:
94:cd:ae:9b:5a:cb:72:95:0c:e8:2c:55:06:13:76:
ee:93:99:87:68:ae:24:19:f0:6d:2e:8f:07:bd:df:
8a:d6:70:d1:b1:32:6b:58:09:5b:46:95:b3:ab:16:
6e:1c:42:d0:0c:f1:a6:f9:f4:3e:53:b5:ae:ae:3f:
a3:ba:f6:b0:8f:8b:d7:e5:f0:b0:6c:81:69:66:0a:
99:9f:12:6f:e5:e9:12:9f:b0:13:31:5f:58:af:9e:
8b:2c:19:5d:90:52:1a:e1:04:d5:4e:d8:1f:5d:69:
a6:91:0a:d2:c2:e8:9b:53:ba:59:98:f9:99:1f:cc:
41:3a:89:17:af:2e:f2:fe:30:62:fb:25:f4:d6:04:
3f:54:05:bc:2a:71:0f:fe:d0:ce:f1:d3:fa:3a:05:
9c:d3:2b:9f:aa:75:16:1f:b7:d3:93:77:85:78:b0:
2e:ed:e1:e1:e5:ab:7d:9b:6b:3d:17:15:98:f7:80:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:28:56:DC:10:E6:42:66:6E:6B:6D:FD:98:F4:EF:D4:8E:F5:8C:2F
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/KChW3BDmQmZua239mPTv1I71jC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.184.0/22
62.60.192.0/22
62.60.220.0/22
Signature Algorithm: sha256WithRSAEncryption
11:99:73:d5:7a:1f:99:05:de:e7:a0:80:a2:7b:41:64:08:8b:
e3:af:45:26:03:83:65:8a:fd:f6:f0:d1:39:40:ce:bb:0f:2b:
f8:a8:ec:5f:60:a3:88:8e:db:25:13:cc:b2:96:52:c6:64:cd:
49:e9:9f:55:9d:1b:76:06:9f:04:ee:15:41:00:c8:bc:71:cf:
bc:9d:5c:e7:40:24:c2:fa:28:70:3e:31:dc:d3:8e:9f:6e:77:
e3:47:5d:c1:ce:cd:f2:ac:a5:a4:cb:19:fe:f2:41:d0:b5:1d:
f4:5d:87:f9:b9:c7:cc:88:f3:fb:7f:ff:cc:94:a9:69:72:93:
a2:70:58:eb:d4:91:07:55:81:b7:4b:24:a4:f4:f3:9a:58:d3:
d7:9e:e9:04:e6:4c:f1:be:40:54:e7:a0:08:34:5b:41:20:c0:
5e:30:0e:36:2e:6a:a1:b3:4d:09:ed:44:9c:53:b9:0e:0a:e6:
43:ca:85:fa:b4:27:19:7b:f3:c5:9d:20:38:b0:36:7c:44:60:
e0:5e:80:77:4c:fa:02:a4:c9:d2:95:7d:d7:c9:75:5a:51:9d:
5d:96:21:63:9d:05:92:5f:16:33:1f:4f:af:13:f8:a4:7b:10:
49:ff:18:c2:a6:4c:72:bf:83:60:7f:e4:c2:1c:80:82:1f:d8:
69:65:13:c8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZBdWRk6vWazwuGHlf1ftGhKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwNjI4MDUzNzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODI4NTZkYzEwZTY0MjY2NmU2YjZkZmQ5OGY0ZWZkNDhlZjU4YzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmiN2RfN3BPTjq2o/g5Ocm/IZSCs
OXD6HcuS6zabesK4BNh3RqQwMDyeMbnnxeJEqblZMeCGlTKAOPkd6ZWfgoNPLnVI
1CB9SayUza6bWstylQzoLFUGE3buk5mHaK4kGfBtLo8Hvd+K1nDRsTJrWAlbRpWz
qxZuHELQDPGm+fQ+U7Wurj+juvawj4vX5fCwbIFpZgqZnxJv5ekSn7ATMV9Yr56L
LBldkFIa4QTVTtgfXWmmkQrSwuibU7pZmPmZH8xBOokXry7y/jBi+yX01gQ/VAW8
KnEP/tDO8dP6OgWc0yufqnUWH7fTk3eFeLAu7eHh5at9m2s9FxWY94AHxwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCgoVtwQ5kJmbmtt/Zj079SO9YwvMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvS0NoVzNCRG1RbVp1YTIzOW1QVHYxSTcxakM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCPjy4AwQC
PjzAAwQCPjzcMA0GCSqGSIb3DQEBCwUAA4IBAQARmXPVeh+ZBd7noICie0FkCIvj
r0UmA4Nliv328NE5QM67Dyv4qOxfYKOIjtslE8yyllLGZM1J6Z9VnRt2Bp8E7hVB
AMi8cc+8nVznQCTC+ihwPjHc046fbnfjR13Bzs3yrKWkyxn+8kHQtR30XYf5ucfM
iPP7f//MlKlpcpOicFjr1JEHVYG3SySk9POaWNPXnukE5kzxvkBU56AINFtBIMBe
MA42Lmqhs00J7UScU7kOCuZDyoX6tCcZe/PFnSA4sDZ8RGDgXoB3TPoCpMnSlX3X
yXVaUZ1dliFjnQWSXxYzH0+vE/ikexBJ/xjCpkxyv4Ngf+TCHICCH9hpZRPI
-----END CERTIFICATE-----
Generated at Mon Jul 1 09:20:23 2024 by rpki-client on console-ams.rpki-client.org