Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MulDcOnwqbkArepdgkjxqvM25AE.roa
File: MulDcOnwqbkArepdgkjxqvM25AE.roa (raw, json)
Hash identifier: RnI7AWILXjQJvJd/GlNcq9kV/7cYGCvirXbQLUsSa68=
Subject key identifier: 32:E9:43:70:E9:F0:A9:B9:00:AD:EA:5D:82:48:F1:AA:F3:36:E4:01
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0187699FA3AD0C8696A82C819B701ABD2C69
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MulDcOnwqbkArepdgkjxqvM25AE.roa
Signing time: Mon 10 Apr 2023 05:24:42 +0000
ROA not before: Mon 10 Apr 2023 05:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15611
IP address blocks: 213.176.96.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.128.0/21 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.143.0/24 maxlen: 24
62.60.141.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.152.0/22 maxlen: 24
62.60.146.0/23 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Apr 2023 13:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:69:9f:a3:ad:0c:86:96:a8:2c:81:9b:70:1a:bd:2c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Apr 10 05:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32e94370e9f0a9b900adea5d8248f1aaf336e401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:35:20:12:e1:d4:ce:d7:2f:22:a9:77:ee:4c:
ca:66:11:56:e1:a2:55:6e:18:66:38:48:3a:37:88:
4a:c5:bb:42:f1:ef:99:68:eb:2c:8f:a6:ec:2c:f4:
ef:36:f2:ae:55:2f:c2:39:ac:d9:71:9c:40:26:71:
99:f1:08:bf:b3:b6:32:c3:a0:aa:95:df:16:77:97:
f4:0e:d9:ea:96:f2:68:e4:18:86:b7:96:ff:28:02:
a6:2d:fc:56:1a:07:d3:7c:31:4c:e0:da:4a:68:7d:
f8:4b:c9:64:d3:14:06:a3:9c:da:c4:1a:e8:26:e2:
1b:2b:dd:5c:5d:8f:af:9d:7b:29:cb:06:97:1c:a1:
d3:33:b3:1c:89:a4:cc:69:60:fa:0c:29:78:46:29:
52:72:96:ce:6d:92:25:31:e9:3c:eb:f9:ef:dc:55:
06:de:d9:a5:e6:15:37:e7:66:e8:d0:f3:e2:db:8a:
8e:86:e7:f9:bc:c1:24:c5:cd:ff:fc:47:0e:4b:99:
ea:37:9b:16:66:a1:6e:91:a0:6b:b2:4a:77:0c:95:
53:9a:96:a1:42:0a:f3:51:2f:89:ed:ae:e9:35:b4:
26:c1:10:8f:0c:75:e7:93:c9:db:52:0c:dd:e2:dd:
c7:35:10:99:5c:1b:26:81:a1:39:a9:02:da:aa:53:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E9:43:70:E9:F0:A9:B9:00:AD:EA:5D:82:48:F1:AA:F3:36:E4:01
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MulDcOnwqbkArepdgkjxqvM25AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0-62.60.137.255
62.60.139.0-62.60.143.255
62.60.145.0-62.60.147.255
62.60.152.0/22
62.60.184.0/22
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
Signature Algorithm: sha256WithRSAEncryption
1e:da:2c:f6:50:cb:5f:5b:b3:2f:0c:02:0a:5d:60:da:44:18:
2e:10:b8:d9:5e:cf:fe:4a:0a:6a:1d:a2:ac:f2:bc:a4:10:56:
11:0c:29:10:0a:4a:6c:20:e0:15:f3:9a:68:44:c2:37:71:33:
dd:79:55:c9:3a:4f:3b:29:7a:96:11:8c:c0:05:47:33:05:a5:
d9:e7:5c:23:4a:4e:43:1e:3e:d9:ec:92:37:c8:2c:c0:8b:b0:
64:8d:c8:0f:d5:3d:9c:39:aa:9f:b9:32:8f:8e:f4:f7:91:3b:
23:ee:d5:a1:e8:f2:ae:64:03:b9:ad:cd:0e:98:58:33:c3:e3:
78:fa:bc:09:f2:aa:09:a2:4b:f3:c3:8b:9b:b9:20:27:42:48:
94:8a:92:84:82:53:4a:e2:ea:dd:dd:a1:cb:1d:cf:13:dd:7a:
3d:ba:92:74:a5:fc:b6:02:66:19:35:b4:e2:84:76:ee:16:81:
7a:04:36:84:55:42:8d:db:39:b3:6a:9d:b7:41:24:a6:f6:62:
22:dd:a6:b0:d6:6a:37:fd:5a:52:b8:75:09:16:f7:5c:2b:3f:
70:26:af:9d:2c:9a:f5:86:83:8d:24:3d:1e:a2:1e:d2:2e:ae:
59:e9:cc:2b:92:c6:0a:74:ee:89:08:9a:b0:e9:ff:be:39:0a:
4a:a4:e2:f1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAYdpn6OtDIaWqCyBm3AavSxpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwNDEwMDUyNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmU5NDM3MGU5ZjBhOWI5MDBhZGVhNWQ4MjQ4ZjFhYWYzMzZlNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzUgEuHUztcvIql37kzKZhFW4aJV
bhhmOEg6N4hKxbtC8e+ZaOssj6bsLPTvNvKuVS/COazZcZxAJnGZ8Qi/s7Yyw6Cq
ld8Wd5f0DtnqlvJo5BiGt5b/KAKmLfxWGgfTfDFM4NpKaH34S8lk0xQGo5zaxBro
JuIbK91cXY+vnXspywaXHKHTM7MciaTMaWD6DCl4RilScpbObZIlMek86/nv3FUG
3tml5hU352bo0PPi24qOhuf5vMEkxc3//EcOS5nqN5sWZqFukaBrskp3DJVTmpah
QgrzUS+J7a7pNbQmwRCPDHXnk8nbUgzd4t3HNRCZXBsmgaE5qQLaqlPHfQIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFDLpQ3Dp8Km5AK3qXYJI8arzNuQBMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvTXVsRGNPbndxYmtBcmVwZGdranhxdk0yNUFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQMAwDBAc+PIAD
BAE+PIgwDAMEAD48iwMEBD48gDAMAwQAPjyRAwQCPjyQAwQCPjyYAwQCPjy4AwQB
1bAEAwQA1bBgMAwDBAHVsHoDBAHVsHwwDQYJKoZIhvcNAQELBQADggEBAB7aLPZQ
y19bsy8MAgpdYNpEGC4QuNlez/5KCmodoqzyvKQQVhEMKRAKSmwg4BXzmmhEwjdx
M915Vck6TzspepYRjMAFRzMFpdnnXCNKTkMePtnskjfILMCLsGSNyA/VPZw5qp+5
Mo+O9PeROyPu1aHo8q5kA7mtzQ6YWDPD43j6vAnyqgmiS/PDi5u5ICdCSJSKkoSC
U0ri6t3docsdzxPdej26knSl/LYCZhk1tOKEdu4WgXoENoRVQo3bObNqnbdBJKb2
YiLdprDWajf9WlK4dQkW91wrP3Amr50smvWGg40kPR6iHtIurlnpzCuSxgp07okI
mrDp/745Ckqk4vE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org