Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Si6Eu6SsJqmXBgtIwKfVH3d57qw.roa
File: Si6Eu6SsJqmXBgtIwKfVH3d57qw.roa (raw, json)
Hash identifier: Ov7kzTa33URHxow9uMCg1UYiB6nOY8NjY6Hk2HUe2Tk=
Subject key identifier: 4A:2E:84:BB:A4:AC:26:A9:97:06:0B:48:C0:A7:D5:1F:77:79:EE:AC
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0185D86A7AC2AE5589F62E2F96AD36D7D26B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Si6Eu6SsJqmXBgtIwKfVH3d57qw.roa
Signing time: Sun 22 Jan 2023 07:38:54 +0000
ROA not before: Sun 22 Jan 2023 07:38:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 62.60.164.0/22 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.172.0/22 maxlen: 24
62.60.176.0/22 maxlen: 24
62.60.180.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Feb 2023 12:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d8:6a:7a:c2:ae:55:89:f6:2e:2f:96:ad:36:d7:d2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 22 07:38:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a2e84bba4ac26a997060b48c0a7d51f7779eeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e3:40:41:81:d3:51:58:09:fc:fd:19:7b:95:
8a:cd:6d:d7:06:f6:0f:a9:ef:d9:6a:a0:dc:b8:63:
26:e1:66:ab:ca:40:47:ec:11:b7:e2:5a:cb:c2:7f:
6e:ca:ce:62:d1:ad:c1:56:44:3f:89:07:d1:a2:26:
fb:33:be:e0:3a:fb:60:1c:27:a5:86:ef:d5:ff:0a:
9e:20:57:a8:20:92:00:e1:c2:b8:ed:4d:3f:1e:d5:
fc:6a:d5:88:d0:35:28:08:44:f7:20:cb:48:01:9a:
b0:1d:fc:05:de:71:6e:e9:32:65:b3:30:5b:65:1f:
8c:f3:c9:40:06:22:95:7f:e4:fd:e3:64:12:fb:9c:
e4:ba:49:ec:bf:42:34:c7:09:35:c2:99:d7:c5:1e:
9d:15:72:71:a4:5a:2c:1d:6c:87:66:d7:42:c2:f7:
9d:9f:79:70:f2:ce:e2:fe:d0:66:cd:e5:41:b2:4a:
a7:95:da:28:f7:fd:71:56:b0:14:54:dd:71:5f:1e:
b1:57:43:2c:b9:8e:a2:13:f5:ba:6b:a6:a7:0a:b8:
6b:9e:47:35:5b:94:2a:3d:d8:e6:57:bf:7a:0d:fe:
86:b9:27:41:bc:f1:35:36:78:e7:54:8c:0f:ae:e2:
25:8c:fd:18:60:c4:d1:ab:49:d7:3b:71:70:40:f5:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2E:84:BB:A4:AC:26:A9:97:06:0B:48:C0:A7:D5:1F:77:79:EE:AC
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Si6Eu6SsJqmXBgtIwKfVH3d57qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.164.0-62.60.183.255
62.60.192.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:da:fe:e6:fb:fe:72:09:d0:60:0c:9d:aa:75:4e:7d:00:63:
c4:23:e6:28:5e:5a:35:2c:85:26:27:66:af:3e:df:ae:12:1d:
ee:71:b1:a0:c8:46:a0:b9:cb:17:73:a8:a6:b1:5b:0c:cf:3a:
6a:da:f0:36:8f:b7:f4:39:fa:5b:11:af:1f:c9:44:9c:e4:0f:
9b:1e:65:2f:9b:0b:77:3c:9e:f0:59:31:d2:88:d8:2b:3c:1d:
ae:78:bd:55:74:eb:72:85:b8:de:af:33:60:6a:74:5d:20:80:
bf:81:94:c0:c3:01:15:a8:5d:09:ec:f6:84:70:17:fb:2d:bb:
56:45:a4:ad:dc:bc:7c:0b:97:af:06:a8:d6:e9:90:e2:94:5f:
cc:db:c2:50:7b:7d:e4:a5:23:b4:5f:16:f6:47:a7:42:d6:02:
0c:d0:7c:06:67:62:44:34:f1:d5:28:85:56:58:75:18:f1:4f:
f1:ea:8d:83:20:c7:6e:a2:06:ab:85:93:b0:e0:33:e7:dc:57:
cc:8a:06:54:b7:ad:b9:29:d0:56:42:2d:a2:2b:7a:25:61:e4:
8f:9d:0f:44:a3:af:0f:c6:82:fb:d6:f8:32:63:4a:93:9d:88:
79:84:95:cc:1a:da:36:c1:49:85:69:0d:75:c7:79:fb:bf:ac:
c9:f0:53:93
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYXYanrCrlWJ9i4vlq0219JrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwMTIyMDczODU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTJlODRiYmE0YWMyNmE5OTcwNjBiNDhjMGE3ZDUxZjc3NzllZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleNAQYHTUVgJ/P0Ze5WKzW3XBvYP
qe/ZaqDcuGMm4WarykBH7BG34lrLwn9uys5i0a3BVkQ/iQfRoib7M77gOvtgHCel
hu/V/wqeIFeoIJIA4cK47U0/HtX8atWI0DUoCET3IMtIAZqwHfwF3nFu6TJlszBb
ZR+M88lABiKVf+T942QS+5zkuknsv0I0xwk1wpnXxR6dFXJxpFosHWyHZtdCwved
n3lw8s7i/tBmzeVBskqnldoo9/1xVrAUVN1xXx6xV0MsuY6iE/W6a6anCrhrnkc1
W5QqPdjmV796Df6GuSdBvPE1NnjnVIwPruIljP0YYMTRq0nXO3FwQPXeCQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFEouhLukrCaplwYLSMCn1R93ee6sMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvU2k2RXU2U3NKcW1YQmd0SXdLZlZIM2Q1N3F3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAI+PKQD
BAM+PLADBAI+PMAwDQYJKoZIhvcNAQELBQADggEBAKfa/ub7/nIJ0GAMnap1Tn0A
Y8Qj5iheWjUshSYnZq8+364SHe5xsaDIRqC5yxdzqKaxWwzPOmra8DaPt/Q5+lsR
rx/JRJzkD5seZS+bC3c8nvBZMdKI2Cs8Ha54vVV063KFuN6vM2BqdF0ggL+BlMDD
ARWoXQns9oRwF/stu1ZFpK3cvHwLl68GqNbpkOKUX8zbwlB7feSlI7RfFvZHp0LW
AgzQfAZnYkQ08dUohVZYdRjxT/HqjYMgx26iBquFk7DgM+fcV8yKBlS3rbkp0FZC
LaIreiVh5I+dD0Sjrw/GgvvW+DJjSpOdiHmElcwa2jbBSYVpDXXHefu/rMnwU5M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org