Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/S5a6VkksESK9H7JPrhTT5UqSLmI.roa
File: S5a6VkksESK9H7JPrhTT5UqSLmI.roa (raw, json)
Hash identifier: Lgh2cF01QX0kfTyN++HN6gpCmIqG9SvQjNoNtL4VVz8=
Subject key identifier: 4B:96:BA:56:49:2C:11:22:BD:1F:B2:4F:AE:14:D3:E5:4A:92:2E:62
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01925431491CA713E39B7A8B5F449CEF5E2D
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/S5a6VkksESK9H7JPrhTT5UqSLmI.roa
Signing time: Thu 03 Oct 2024 21:02:48 +0000
ROA not before: Thu 03 Oct 2024 21:02:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 62.60.230.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:54:31:49:1c:a7:13:e3:9b:7a:8b:5f:44:9c:ef:5e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 3 21:02:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b96ba56492c1122bd1fb24fae14d3e54a922e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:06:3f:50:a5:2b:9c:31:03:e0:dc:16:e1:0b:
12:cc:4e:ef:78:81:fa:e9:32:11:ab:65:e4:13:82:
59:1a:73:6c:76:c2:a1:c4:76:4d:71:7e:b0:7f:67:
0a:cc:5d:e7:a0:9f:98:2a:4b:10:9c:ab:57:fc:78:
96:f1:5c:de:9f:0f:07:f9:a3:4f:14:89:4e:3f:f9:
50:03:14:b9:c1:61:d4:6d:cf:6b:69:1c:b8:24:2e:
8e:be:18:a8:d5:71:47:ea:5d:52:e7:ce:9f:df:a6:
02:ee:98:52:46:4c:0d:9e:2f:cf:46:30:d3:ea:e8:
57:f1:6f:83:74:6f:db:ed:f4:44:10:12:52:ba:cd:
ed:62:60:04:38:08:5a:83:da:54:b1:dc:66:42:93:
ab:db:07:20:f2:42:5f:57:50:47:4d:b1:23:bb:37:
a1:26:71:c0:35:67:9a:b6:6a:60:b9:27:25:89:dc:
dd:76:e4:d1:a5:0d:dc:ce:13:b4:2c:b2:f5:9f:52:
43:3a:ee:f4:fb:62:79:c7:a6:e0:d9:7d:d1:61:4d:
3b:f5:73:cb:0a:d9:e7:03:77:29:39:94:a2:1e:da:
13:da:d3:eb:43:5d:26:12:48:2b:35:8e:3f:34:02:
60:42:21:62:52:91:29:13:78:02:e1:04:22:70:d9:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:96:BA:56:49:2C:11:22:BD:1F:B2:4F:AE:14:D3:E5:4A:92:2E:62
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/S5a6VkksESK9H7JPrhTT5UqSLmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.230.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:58:8b:52:7a:87:dc:16:a8:e8:89:ee:00:94:e8:32:c4:3a:
20:6e:83:ec:39:81:40:70:c2:50:8f:5f:80:ab:da:cb:3b:d9:
34:e2:f1:9f:a9:e8:c7:b9:b4:31:39:0c:33:4b:bd:c0:4a:89:
c4:dc:f4:a5:2a:b3:8b:1f:d8:01:6f:ea:74:63:d5:64:15:73:
6a:a3:62:06:f0:71:e9:7a:0d:01:15:3d:66:a8:e0:51:b4:55:
77:55:3d:02:75:aa:4b:9c:cf:6c:61:61:7a:d3:22:7c:0e:b3:
45:06:fa:a3:4f:c5:87:d2:34:55:f8:20:d5:43:6a:3d:a1:fa:
aa:bb:e2:0e:19:8d:45:8d:e2:7e:4b:2b:a5:2e:33:26:9c:09:
8d:b6:0f:a8:a3:a0:42:38:9b:f2:78:6c:65:6c:95:1b:0b:58:
e4:cf:2c:e4:17:f9:c0:4f:41:59:cc:fa:21:7e:b7:c5:ae:a0:
ff:f4:05:2a:13:e8:e9:12:33:06:a3:f4:cf:0f:67:12:d4:d1:
67:bd:3d:e1:cf:70:12:17:d5:7c:7e:3a:c2:ad:c2:1d:64:2a:
d5:a6:ba:7b:f8:ed:23:cc:0d:82:92:c3:fd:3a:4b:63:53:1a:
74:cd:e9:88:f8:a9:13:e8:06:48:83:45:78:c7:37:91:46:44:
24:d6:1f:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJUMUkcpxPjm3qLX0Sc714tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQxMDAzMjEwMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yjk2YmE1NjQ5MmMxMTIyYmQxZmIyNGZhZTE0ZDNlNTRhOTIyZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QY/UKUrnDED4NwW4QsSzE7veIH6
6TIRq2XkE4JZGnNsdsKhxHZNcX6wf2cKzF3noJ+YKksQnKtX/HiW8Vzenw8H+aNP
FIlOP/lQAxS5wWHUbc9raRy4JC6Ovhio1XFH6l1S586f36YC7phSRkwNni/PRjDT
6uhX8W+DdG/b7fREEBJSus3tYmAEOAhag9pUsdxmQpOr2wcg8kJfV1BHTbEjuzeh
JnHANWeatmpguSclidzdduTRpQ3czhO0LLL1n1JDOu70+2J5x6bg2X3RYU079XPL
CtnnA3cpOZSiHtoT2tPrQ10mEkgrNY4/NAJgQiFiUpEpE3gC4QQicNlzHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEuWulZJLBEivR+yT64U0+VKki5iMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvUzVhNlZra3NFU0s5SDdKUHJoVFQ1VXFTTG1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPjzmMA0G
CSqGSIb3DQEBCwUAA4IBAQBLWItSeofcFqjoie4AlOgyxDogboPsOYFAcMJQj1+A
q9rLO9k04vGfqejHubQxOQwzS73ASonE3PSlKrOLH9gBb+p0Y9VkFXNqo2IG8HHp
eg0BFT1mqOBRtFV3VT0CdapLnM9sYWF60yJ8DrNFBvqjT8WH0jRV+CDVQ2o9ofqq
u+IOGY1FjeJ+SyulLjMmnAmNtg+oo6BCOJvyeGxlbJUbC1jkzyzkF/nAT0FZzPoh
frfFrqD/9AUqE+jpEjMGo/TPD2cS1NFnvT3hz3ASF9V8fjrCrcIdZCrVprp7+O0j
zA2CksP9OktjUxp0zemI+KkT6AZIg0V4xzeRRkQk1h+O
-----END CERTIFICATE-----
Generated at Wed Nov 20 09:39:30 2024 by rpki-client on console-ams.rpki-client.org