Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/RZRUayKv6yHj1067xTQfYBB9wD0.roa
File: RZRUayKv6yHj1067xTQfYBB9wD0.roa (raw, json)
Hash identifier: wuV/amavuYUxLeMxWDi0XauVxDMFaTiqTpLXR5l1EvA=
Subject key identifier: 45:94:54:6B:22:AF:EB:21:E3:D7:4E:BB:C5:34:1F:60:10:7D:C0:3D
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018DEF97A2F2A8C782205EE746424A67CB96
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/RZRUayKv6yHj1067xTQfYBB9wD0.roa
Signing time: Wed 28 Feb 2024 12:01:48 +0000
ROA not before: Wed 28 Feb 2024 12:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 62.60.156.0/22 maxlen: 24
62.60.216.0/22 maxlen: 24
62.60.224.0/19 maxlen: 24
213.176.64.0/22 maxlen: 24
213.176.120.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 05:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:97:a2:f2:a8:c7:82:20:5e:e7:46:42:4a:67:cb:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 28 12:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4594546b22afeb21e3d74ebbc5341f60107dc03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:ea:5f:c0:71:2e:d2:dd:41:9b:27:a6:7a:
c8:fc:d9:3f:2e:17:99:df:e9:c7:93:f9:27:69:24:
00:e8:76:a2:38:f5:74:d4:62:e0:61:f8:b1:b5:9a:
2f:9c:e9:b1:25:4f:91:b7:e8:69:b0:6f:6a:72:85:
64:81:f7:5b:9b:d7:84:02:49:a2:b3:5f:58:23:72:
0c:96:7a:d2:57:3c:6a:45:b9:c4:c6:71:ad:93:73:
c8:17:3b:b4:18:33:74:99:b1:9b:44:70:41:2d:52:
4f:88:c3:d2:ea:1d:ae:79:ac:c9:ba:8b:c7:d8:cd:
bd:02:8c:ce:44:21:11:b4:0a:42:dc:5e:68:75:ac:
6c:c0:46:c1:ad:e9:c3:f5:f9:d8:6e:22:41:d7:7d:
0f:7b:c1:45:c1:58:e0:68:55:50:c3:b3:da:7c:e0:
dc:68:47:1c:1a:e7:bc:e4:85:45:e4:09:89:34:18:
6d:e6:e0:33:24:b5:59:41:a0:e4:aa:25:46:2c:72:
1d:67:32:4e:73:49:82:da:55:24:17:83:4f:1f:5d:
4e:4e:39:f0:4e:b4:a3:0e:a4:3a:17:e4:30:5b:4a:
c9:67:db:3c:9f:a5:71:a6:2e:f4:5d:8d:5a:a9:37:
df:57:ad:fc:71:09:fd:a7:ee:dd:5a:8b:63:fb:5b:
84:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:94:54:6B:22:AF:EB:21:E3:D7:4E:BB:C5:34:1F:60:10:7D:C0:3D
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/RZRUayKv6yHj1067xTQfYBB9wD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.156.0/22
62.60.216.0/22
62.60.224.0/19
213.176.64.0/22
213.176.120.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:5d:89:3d:84:5d:f5:0c:e7:99:63:be:f8:09:9e:45:4b:9c:
13:8d:84:78:4f:d0:7f:00:8f:b4:e5:03:ab:30:23:c1:9b:e1:
47:8e:7f:2b:f3:58:4d:cf:cc:6f:20:95:a5:57:9a:0f:01:13:
d0:3d:95:81:b5:1c:37:6e:38:87:86:48:22:bd:24:11:db:73:
7e:db:21:23:0a:35:66:5d:8d:7c:73:17:e3:4c:08:6e:5a:23:
cd:43:87:7d:c4:b4:d1:ff:d3:d2:11:83:a9:6b:b3:b4:b2:49:
0b:5a:fd:b2:b3:cd:e6:bc:6d:18:06:04:b2:39:3c:91:cb:15:
25:79:df:82:b4:bf:0b:0d:2e:e9:4d:8f:7d:30:4e:b2:1a:1d:
00:ce:01:a4:c3:d4:5d:89:aa:66:0a:fc:f1:8a:90:71:81:85:
71:84:e0:61:4f:c6:e9:f9:40:9d:8d:a6:58:e2:b3:e9:72:55:
91:54:fc:da:2c:5d:8a:1b:30:d3:1a:81:4c:57:ea:f0:cb:54:
29:9c:c6:d8:a6:f2:22:dd:bd:c4:2f:67:0e:ba:99:1e:ba:09:
9c:95:4c:68:82:ca:d0:6d:78:bd:c4:e3:97:84:f1:c9:31:25:
3b:24:d6:a9:fc:b3:f3:56:7e:81:b7:98:3b:d7:ed:3b:91:42:
ef:16:98:9c
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY3vl6LyqMeCIF7nRkJKZ8uWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwMjI4MTIwMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTk0NTQ2YjIyYWZlYjIxZTNkNzRlYmJjNTM0MWY2MDEwN2RjMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnPqX8BxLtLdQZsnpnrI/Nk/LheZ
3+nHk/knaSQA6HaiOPV01GLgYfixtZovnOmxJU+Rt+hpsG9qcoVkgfdbm9eEAkmi
s19YI3IMlnrSVzxqRbnExnGtk3PIFzu0GDN0mbGbRHBBLVJPiMPS6h2ueazJuovH
2M29AozORCERtApC3F5odaxswEbBrenD9fnYbiJB130Pe8FFwVjgaFVQw7PafODc
aEccGue85IVF5AmJNBht5uAzJLVZQaDkqiVGLHIdZzJOc0mC2lUkF4NPH11OTjnw
TrSjDqQ6F+QwW0rJZ9s8n6Vxpi70XY1aqTffV638cQn9p+7dWotj+1uEQwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFEWUVGsir+sh49dOu8U0H2AQfcA9MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvUlpSVWF5S3Y2eUhqMTA2N3hUUWZZQkI5d0QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCPjycAwQC
PjzYAwQFPjzgAwQC1bBAAwQB1bB4MA0GCSqGSIb3DQEBCwUAA4IBAQBtXYk9hF31
DOeZY774CZ5FS5wTjYR4T9B/AI+05QOrMCPBm+FHjn8r81hNz8xvIJWlV5oPARPQ
PZWBtRw3bjiHhkgivSQR23N+2yEjCjVmXY18cxfjTAhuWiPNQ4d9xLTR/9PSEYOp
a7O0skkLWv2ys83mvG0YBgSyOTyRyxUled+CtL8LDS7pTY99ME6yGh0AzgGkw9Rd
iapmCvzxipBxgYVxhOBhT8bp+UCdjaZY4rPpclWRVPzaLF2KGzDTGoFMV+rwy1Qp
nMbYpvIi3b3EL2cOupkeugmclUxogsrQbXi9xOOXhPHJMSU7JNap/LPzVn6Bt5g7
1+07kULvFpic
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org