Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/O5Ue45MKYJBkLeXs_z7_s4OlpiA.roa
File: O5Ue45MKYJBkLeXs_z7_s4OlpiA.roa (raw, json)
Hash identifier: EAd6VZDVGgPljaC8wXYswCr2ZK1m2wNS3qdfAcgja2o=
Subject key identifier: 3B:95:1E:E3:93:0A:60:90:64:2D:E5:EC:FF:3E:FF:B3:83:A5:A6:20
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01904E282EFE8481914B5619C2A0EB225187
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/O5Ue45MKYJBkLeXs_z7_s4OlpiA.roa
Signing time: Tue 25 Jun 2024 06:49:34 +0000
ROA not before: Tue 25 Jun 2024 06:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40940
IP address blocks: 62.60.216.0/23 maxlen: 24
213.176.72.0/23 maxlen: 24
213.176.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 06:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:28:2e:fe:84:81:91:4b:56:19:c2:a0:eb:22:51:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 25 06:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b951ee3930a6090642de5ecff3effb383a5a620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a0:48:b3:fe:0b:75:76:f2:7e:15:d5:90:10:
fa:fa:62:21:1f:80:8f:16:0a:9b:05:30:0b:04:52:
e4:50:fc:de:c3:d5:21:37:da:d2:a3:a7:5f:cc:e5:
6d:8d:42:4f:61:e0:11:cf:14:c2:74:1c:a7:11:15:
7d:08:9f:59:e1:59:75:ff:0a:51:17:e6:4a:a3:b5:
43:7a:b1:30:23:9a:4b:e9:06:cb:dc:d6:d0:b6:f2:
36:0f:86:55:8e:0e:bc:0b:d3:d9:4c:26:72:26:9f:
98:dd:74:06:23:1f:21:cb:72:46:23:76:67:4f:71:
5f:f1:4d:c4:73:f7:97:d4:fa:13:36:2f:9d:0c:94:
82:b1:56:ab:66:ee:7b:61:bc:00:1e:e6:e4:dc:3c:
f7:e6:89:d6:f6:e0:01:55:37:0e:fd:b0:ce:bf:c1:
9e:ae:ad:f2:7c:47:90:67:c1:06:ee:20:22:43:f1:
b2:d0:59:64:30:8e:d4:24:39:d2:8f:55:35:6d:3f:
0e:da:ce:c4:92:50:fb:6d:ac:5e:09:a1:68:fe:83:
0a:fc:66:75:40:8c:5a:cb:b8:c9:ad:41:46:4a:fa:
cb:dc:1b:9f:65:23:8a:de:5e:0f:a4:c2:8d:54:a8:
15:ed:bc:03:6f:f5:47:10:55:c7:84:11:64:07:d8:
3f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:95:1E:E3:93:0A:60:90:64:2D:E5:EC:FF:3E:FF:B3:83:A5:A6:20
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/O5Ue45MKYJBkLeXs_z7_s4OlpiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.216.0/23
213.176.72.0/23
Signature Algorithm: sha256WithRSAEncryption
55:9f:52:b0:a9:f4:bb:7f:6b:42:f5:cc:dc:ae:17:a4:52:35:
2f:6d:1f:8c:00:56:3c:2d:7d:c5:c7:86:b9:96:f8:0c:3d:48:
a3:3d:5d:f3:81:1c:44:d1:b6:df:ea:23:9a:75:f9:e7:06:1a:
86:c7:2a:3d:2a:41:5d:10:40:c8:e9:05:e9:82:ec:e7:9a:a1:
8e:04:54:16:0b:06:9a:71:9a:ab:96:00:54:5e:df:b4:93:2d:
ea:46:ce:1f:c3:d8:76:86:7f:b5:a6:53:07:22:bb:ad:e1:44:
b2:b2:80:57:a4:eb:9d:9b:64:04:54:d9:81:b8:1b:ac:73:2e:
5d:85:de:75:6a:ba:f6:c3:bc:42:07:a3:80:62:0f:8d:40:5f:
52:66:43:2f:3e:99:72:47:a0:3b:84:09:4b:03:4e:e5:f6:62:
e6:b0:5b:3d:2c:8a:a9:57:d6:f9:98:33:59:c6:ae:1e:6f:df:
5d:6f:77:b9:4b:ce:dc:7a:00:dd:cf:97:95:f4:a9:a5:c0:f4:
1e:3d:93:5e:de:fd:b1:6c:dd:ec:2f:d9:a4:60:20:00:58:94:
4b:e2:98:f0:72:4b:1d:c5:b1:a3:5b:12:97:84:ab:4d:3d:ec:
18:8c:40:12:dd:7b:3e:86:e5:cd:8a:c0:ab:47:1f:a6:a6:0f:
f8:d5:8a:04
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZBOKC7+hIGRS1YZwqDrIlGHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwNjI1MDY0OTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjk1MWVlMzkzMGE2MDkwNjQyZGU1ZWNmZjNlZmZiMzgzYTVhNjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36BIs/4LdXbyfhXVkBD6+mIhH4CP
FgqbBTALBFLkUPzew9UhN9rSo6dfzOVtjUJPYeARzxTCdBynERV9CJ9Z4Vl1/wpR
F+ZKo7VDerEwI5pL6QbL3NbQtvI2D4ZVjg68C9PZTCZyJp+Y3XQGIx8hy3JGI3Zn
T3Ff8U3Ec/eX1PoTNi+dDJSCsVarZu57YbwAHubk3Dz35onW9uABVTcO/bDOv8Ge
rq3yfEeQZ8EG7iAiQ/Gy0FlkMI7UJDnSj1U1bT8O2s7EklD7baxeCaFo/oMK/GZ1
QIxay7jJrUFGSvrL3BufZSOK3l4PpMKNVKgV7bwDb/VHEFXHhBFkB9g/oQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDuVHuOTCmCQZC3l7P8+/7ODpaYgMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvTzVVZTQ1TUtZSkJrTGVYc196N19zNE9scGlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBPjzYAwQB
1bBIMA0GCSqGSIb3DQEBCwUAA4IBAQBVn1KwqfS7f2tC9czcrhekUjUvbR+MAFY8
LX3Fx4a5lvgMPUijPV3zgRxE0bbf6iOadfnnBhqGxyo9KkFdEEDI6QXpguznmqGO
BFQWCwaacZqrlgBUXt+0ky3qRs4fw9h2hn+1plMHIrut4USysoBXpOudm2QEVNmB
uBuscy5dhd51arr2w7xCB6OAYg+NQF9SZkMvPplyR6A7hAlLA07l9mLmsFs9LIqp
V9b5mDNZxq4eb99db3e5S87cegDdz5eV9KmlwPQePZNe3v2xbN3sL9mkYCAAWJRL
4pjwcksdxbGjWxKXhKtNPewYjEAS3Xs+huXNisCrRx+mpg/41YoE
-----END CERTIFICATE-----
Generated at Fri Jun 28 12:08:51 2024 by rpki-client on console-ams.rpki-client.org