Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Sg7WKT4eD6B8byc1gzWCjdnt0AU.roa
File: Sg7WKT4eD6B8byc1gzWCjdnt0AU.roa (raw, json)
Hash identifier: s9FUf9aJ0Tb2+Ce585cxeeBBpFOFlM+63y3u1baD0ko=
Subject key identifier: 4A:0E:D6:29:3E:1E:0F:A0:7C:6F:27:35:83:35:82:8D:D9:ED:D0:05
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018591059C89D82E0BF969C87FE3711E47E7
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Sg7WKT4eD6B8byc1gzWCjdnt0AU.roa
Signing time: Sun 08 Jan 2023 10:55:42 +0000
ROA not before: Sun 08 Jan 2023 10:55:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 62.60.216.0/22 maxlen: 24
213.176.64.0/22 maxlen: 24
62.60.128.0/22 maxlen: 24
62.60.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Mar 2023 14:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:91:05:9c:89:d8:2e:0b:f9:69:c8:7f:e3:71:1e:47:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 8 10:55:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a0ed6293e1e0fa07c6f27358335828dd9edd005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5c:8e:76:d1:96:96:c3:b2:44:6f:a2:c2:4f:
bb:6d:22:69:86:ca:4e:9f:2a:95:70:6d:9b:b5:01:
be:4d:3e:4f:28:9b:bd:6d:ba:2b:82:bc:7a:48:12:
fc:28:7d:c5:a0:1c:94:5c:cb:72:4a:38:7a:fa:59:
d6:a2:e3:48:5e:e6:0c:82:e6:c1:75:69:fd:8c:6a:
7c:a0:7e:2a:e4:c4:99:2b:85:55:86:84:0f:bc:51:
00:f1:f2:da:08:61:5c:a0:fa:79:38:29:18:61:08:
fb:e9:58:fc:94:a0:06:5d:1b:58:7f:ce:29:76:d1:
79:d2:29:24:44:d6:1d:f8:f2:a5:d4:a7:07:ad:55:
f3:3c:d1:4a:10:a7:1c:db:01:29:62:7d:fe:8c:c5:
93:75:10:3d:87:6b:1e:fd:4e:da:43:68:61:a5:b0:
d0:dd:2c:b5:0a:e5:9e:40:e5:d2:cf:71:56:9c:92:
70:e2:a6:c8:f6:01:c7:51:a2:7e:07:09:39:2e:93:
9f:ae:a2:7a:39:ec:c1:12:13:66:40:72:eb:57:1d:
e6:ee:a8:6c:c6:55:43:81:bf:f1:c6:c2:e6:88:c5:
c7:cd:49:b6:28:10:b0:3b:88:18:f7:f8:fe:2a:53:
85:07:95:e3:79:b6:13:5f:00:29:05:3d:1c:64:97:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0E:D6:29:3E:1E:0F:A0:7C:6F:27:35:83:35:82:8D:D9:ED:D0:05
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Sg7WKT4eD6B8byc1gzWCjdnt0AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0/22
62.60.152.0/22
62.60.216.0/22
213.176.64.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:09:c0:54:a5:9c:c6:78:2d:87:56:b2:19:06:20:ca:42:c8:
05:7e:21:1c:4f:62:dd:a9:10:8c:30:7a:49:37:8b:ed:7d:7e:
66:19:21:b7:31:1e:b8:e5:4c:6c:63:61:34:14:ee:23:30:7d:
77:2e:58:54:cf:87:ac:47:26:9d:f9:c5:e8:61:fa:bb:96:cc:
0b:8d:50:27:7b:07:84:6b:0d:27:36:83:b8:cb:1d:af:ad:70:
94:8f:fd:b8:b1:39:13:3e:ec:eb:4e:8b:73:00:d3:78:94:71:
c6:42:ed:86:bb:a4:f0:b1:f3:8a:1e:5d:85:c5:e0:b3:78:c7:
2a:74:6d:43:b4:2c:e4:6e:1c:3f:9e:b0:1b:33:7e:d9:1d:d8:
0a:7c:5c:51:cc:9f:db:81:d4:dc:d4:5e:a9:46:cd:25:a5:f0:
8f:8c:90:5c:f7:64:35:54:2a:88:a2:ab:6a:3f:a1:0c:58:ed:
5b:4c:58:57:d7:a1:e8:24:bc:dd:42:35:9e:0c:40:a4:b6:1b:
47:b0:13:71:0f:bd:37:90:31:63:26:1f:c1:a8:77:9a:92:90:
8e:3e:72:50:d8:f9:10:bc:b3:af:61:f3:d3:d3:27:e1:04:77:
92:05:f8:47:f5:9d:15:20:32:54:a4:b9:83:52:af:30:0e:53:
35:ce:01:3e
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYWRBZyJ2C4L+WnIf+NxHkfnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwMTA4MTA1NTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTBlZDYyOTNlMWUwZmEwN2M2ZjI3MzU4MzM1ODI4ZGQ5ZWRkMDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFyOdtGWlsOyRG+iwk+7bSJphspO
nyqVcG2btQG+TT5PKJu9bborgrx6SBL8KH3FoByUXMtySjh6+lnWouNIXuYMgubB
dWn9jGp8oH4q5MSZK4VVhoQPvFEA8fLaCGFcoPp5OCkYYQj76Vj8lKAGXRtYf84p
dtF50ikkRNYd+PKl1KcHrVXzPNFKEKcc2wEpYn3+jMWTdRA9h2se/U7aQ2hhpbDQ
3Sy1CuWeQOXSz3FWnJJw4qbI9gHHUaJ+Bwk5LpOfrqJ6OezBEhNmQHLrVx3m7qhs
xlVDgb/xxsLmiMXHzUm2KBCwO4gY9/j+KlOFB5XjebYTXwApBT0cZJce3QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEoO1ik+Hg+gfG8nNYM1go3Z7dAFMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvU2c3V0tUNGVENkI4YnljMWd6V0NqZG50MEFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCPjyAAwQC
PjyYAwQCPjzYAwQC1bBAMA0GCSqGSIb3DQEBCwUAA4IBAQA+CcBUpZzGeC2HVrIZ
BiDKQsgFfiEcT2LdqRCMMHpJN4vtfX5mGSG3MR645UxsY2E0FO4jMH13LlhUz4es
Ryad+cXoYfq7lswLjVAneweEaw0nNoO4yx2vrXCUj/24sTkTPuzrTotzANN4lHHG
Qu2Gu6TwsfOKHl2FxeCzeMcqdG1DtCzkbhw/nrAbM37ZHdgKfFxRzJ/bgdTc1F6p
Rs0lpfCPjJBc92Q1VCqIoqtqP6EMWO1bTFhX16HoJLzdQjWeDECkthtHsBNxD703
kDFjJh/BqHeakpCOPnJQ2PkQvLOvYfPT0yfhBHeSBfhH9Z0VIDJUpLmDUq8wDlM1
zgE+
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org