Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/PPFE5-11nhZ9NdDq6lUphFo6aUE.roa
File: PPFE5-11nhZ9NdDq6lUphFo6aUE.roa (raw, json)
Hash identifier: iOeFMkKBr723+1go2SJ0HTYy23CrOwyTxRZOw8HyWEA=
Subject key identifier: 3C:F1:44:E7:ED:75:9E:16:7D:35:D0:EA:EA:55:29:84:5A:3A:69:41
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0191922BB1D4334AA15D5C5DDF54DD756AB6
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/PPFE5-11nhZ9NdDq6lUphFo6aUE.roa
Signing time: Tue 27 Aug 2024 04:50:22 +0000
ROA not before: Tue 27 Aug 2024 04:50:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40940
IP address blocks: 62.60.216.0/23 maxlen: 24
213.176.72.0/23 maxlen: 24
213.176.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 07:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:92:2b:b1:d4:33:4a:a1:5d:5c:5d:df:54:dd:75:6a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 27 04:50:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cf144e7ed759e167d35d0eaea5529845a3a6941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:ef:84:db:92:a3:f1:17:3d:b6:be:91:b9:
04:85:77:48:30:29:19:65:09:07:b1:d2:2d:6b:cb:
63:0c:5a:ad:de:8c:aa:e1:4e:03:13:8a:05:80:c2:
9b:b2:1e:27:8e:26:13:a9:13:b9:2d:93:0a:b1:c2:
3e:51:71:c8:95:ba:d5:5b:a1:3c:67:ef:79:5e:ca:
2e:a3:20:22:35:63:6b:03:9e:d8:95:e4:b2:90:93:
cd:6d:53:ac:8b:e5:db:88:b2:ec:23:48:e8:32:91:
75:94:10:ee:cb:85:9f:03:ab:13:e1:85:d1:00:d1:
7b:a4:20:80:7a:0e:d4:ec:63:b2:69:de:0d:1c:19:
c7:95:f1:8c:97:00:c6:d8:8a:8e:0f:43:0e:84:df:
67:6f:39:b2:8a:1e:32:68:cc:2c:b8:0c:6c:29:4e:
49:16:6b:82:45:ff:9e:5c:93:8f:85:84:17:5a:5b:
60:50:ba:69:1f:6f:9b:f8:ed:a6:ea:95:0a:2f:d3:
c4:1d:42:c5:ee:30:85:0a:cb:80:06:35:da:87:0d:
a8:94:92:b4:45:75:0f:0d:10:80:95:4e:ba:57:41:
2c:4f:f2:02:6d:8d:20:78:49:3e:90:ba:07:d1:9c:
b4:9a:46:91:98:70:c2:89:2c:6e:be:df:f5:c6:6f:
5c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F1:44:E7:ED:75:9E:16:7D:35:D0:EA:EA:55:29:84:5A:3A:69:41
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/PPFE5-11nhZ9NdDq6lUphFo6aUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.216.0/23
213.176.72.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:ba:ba:47:bc:f1:8f:09:37:a3:63:d3:ab:fc:a5:a1:7f:b4:
9b:31:24:c0:29:2f:ec:08:e4:c6:3b:29:58:bc:0c:65:e1:04:
da:5b:fc:06:8b:08:bb:6e:ab:d6:bb:c6:f0:05:e9:7d:ba:61:
65:1d:5f:9d:ad:f5:7c:88:f2:8a:ed:4c:d9:6d:c5:7c:a3:fb:
06:94:8f:05:d0:bd:46:dc:0f:61:82:1b:aa:1a:55:8b:8b:21:
af:93:5c:39:6d:d5:93:b9:7a:90:be:43:29:70:f3:39:b7:00:
e6:6c:79:79:19:cf:23:8e:df:5b:b4:f2:2b:bf:e1:d0:ae:11:
57:af:3c:ed:f1:57:82:2b:b6:ba:99:5a:3e:bb:7d:fb:20:88:
02:b9:08:14:78:b3:ce:59:ff:6e:50:a3:e0:4c:c0:f3:21:d8:
eb:0f:94:11:c4:89:f9:48:2b:c0:65:4a:a0:fa:3f:fe:37:f7:
ad:8a:2c:19:1f:ec:cd:51:96:a5:c6:32:e8:4d:3c:c1:b8:fc:
fc:1a:21:27:93:b1:f2:f9:cc:e5:07:b9:ec:7b:aa:23:99:b4:
3d:d8:cf:37:0e:08:1d:8a:cf:5e:37:03:39:5b:da:2d:65:8f:
b1:9c:bb:51:cd:ff:c3:eb:9e:0b:f6:ad:cc:5e:6f:7b:e8:27:
62:63:14:96
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZGSK7HUM0qhXVxd31TddWq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwODI3MDQ1MDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2YxNDRlN2VkNzU5ZTE2N2QzNWQwZWFlYTU1Mjk4NDVhM2E2OTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvjvhNuSo/EXPba+kbkEhXdIMCkZ
ZQkHsdIta8tjDFqt3oyq4U4DE4oFgMKbsh4njiYTqRO5LZMKscI+UXHIlbrVW6E8
Z+95XsouoyAiNWNrA57YleSykJPNbVOsi+XbiLLsI0joMpF1lBDuy4WfA6sT4YXR
ANF7pCCAeg7U7GOyad4NHBnHlfGMlwDG2IqOD0MOhN9nbzmyih4yaMwsuAxsKU5J
FmuCRf+eXJOPhYQXWltgULppH2+b+O2m6pUKL9PEHULF7jCFCsuABjXahw2olJK0
RXUPDRCAlU66V0EsT/ICbY0geEk+kLoH0Zy0mkaRmHDCiSxuvt/1xm9c2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDzxROftdZ4WfTXQ6upVKYRaOmlBMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvUFBGRTUtMTFuaFo5TmREcTZsVXBoRm82YVVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBPjzYAwQB
1bBIMA0GCSqGSIb3DQEBCwUAA4IBAQCiurpHvPGPCTejY9Or/KWhf7SbMSTAKS/s
COTGOylYvAxl4QTaW/wGiwi7bqvWu8bwBel9umFlHV+drfV8iPKK7UzZbcV8o/sG
lI8F0L1G3A9hghuqGlWLiyGvk1w5bdWTuXqQvkMpcPM5twDmbHl5Gc8jjt9btPIr
v+HQrhFXrzzt8VeCK7a6mVo+u337IIgCuQgUeLPOWf9uUKPgTMDzIdjrD5QRxIn5
SCvAZUqg+j/+N/etiiwZH+zNUZalxjLoTTzBuPz8GiEnk7Hy+czlB7nse6ojmbQ9
2M83Dggdis9eNwM5W9otZY+xnLtRzf/D654L9q3MXm976CdiYxSW
-----END CERTIFICATE-----
Generated at Wed Sep 25 08:13:21 2024 by rpki-client on console-fra.rpki-client.org