Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/URS1tGtdTfBQlJ52nopuaaTkLzI.roa
File: URS1tGtdTfBQlJ52nopuaaTkLzI.roa (raw, json)
Hash identifier: JyqrlMh+Jj+YlosDANoFGHE1uuCVjZMOmbdp3sffqdg=
Subject key identifier: 51:14:B5:B4:6B:5D:4D:F0:50:94:9E:76:9E:8A:6E:69:A4:E4:2F:32
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01904E239A565F5F28B15AA9A49BF2A4AE58
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/URS1tGtdTfBQlJ52nopuaaTkLzI.roa
Signing time: Tue 25 Jun 2024 06:44:34 +0000
ROA not before: Tue 25 Jun 2024 06:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44559
IP address blocks: 62.60.156.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.220.0/22 maxlen: 24
213.176.64.0/22 maxlen: 24
213.176.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 07:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:23:9a:56:5f:5f:28:b1:5a:a9:a4:9b:f2:a4:ae:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 25 06:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5114b5b46b5d4df050949e769e8a6e69a4e42f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:b9:40:e0:e2:8a:45:db:39:07:d0:12:c8:
54:ce:d1:3f:83:ca:52:80:e9:b7:19:c3:51:1c:77:
87:04:69:b2:03:59:69:cc:4a:28:86:49:66:3e:d8:
88:20:d9:a7:86:40:ae:ab:74:47:a0:c5:fa:ca:39:
99:0b:0d:ec:13:08:a6:e8:3e:ee:cb:83:83:21:d2:
cf:9f:d9:ff:ce:3d:27:4a:a9:cc:17:ba:d8:bc:73:
e5:04:61:3d:6d:e2:4b:ab:ba:2e:06:7c:e5:0e:b1:
87:48:1b:ed:70:37:df:8f:68:1c:e2:c5:6b:a3:ae:
10:c8:ba:9a:a3:c9:00:18:17:11:98:fb:91:2f:aa:
47:74:9a:84:d3:05:e3:87:60:56:e1:55:a9:5d:1b:
81:3e:b0:5f:f5:8c:58:53:d9:69:d1:62:4a:7f:37:
80:e4:2b:18:0e:d1:75:11:8c:5f:fa:44:d3:43:e5:
74:dd:1d:40:51:a0:83:c4:eb:4b:20:12:21:05:b8:
6b:a2:59:ef:c3:69:1f:4f:f7:33:dd:3d:4a:c1:02:
3c:d9:d6:69:d7:d5:b9:db:18:38:2d:99:4c:2a:6b:
f8:af:a2:bf:69:c8:14:ab:68:28:a9:dc:57:1c:10:
dd:a5:98:f9:ba:d2:a4:d7:d6:2b:c8:e0:bd:1a:6a:
a3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:14:B5:B4:6B:5D:4D:F0:50:94:9E:76:9E:8A:6E:69:A4:E4:2F:32
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/URS1tGtdTfBQlJ52nopuaaTkLzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.156.0/22
62.60.184.0/22
62.60.192.0/22
62.60.220.0/22
213.176.64.0/22
213.176.92.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:d2:64:a2:68:62:a6:3e:7a:29:03:e2:e3:10:1a:37:ad:6e:
71:64:77:10:37:8f:5a:5c:7f:9d:cc:c7:07:e5:5f:d6:7b:f3:
65:da:61:fa:ac:3a:4c:43:b4:c9:9f:7a:21:bb:dd:19:8c:5b:
56:4e:7d:0e:96:b5:a4:c3:cc:1c:bb:60:ea:0a:3d:05:c8:6e:
e2:fd:ba:77:8a:53:8c:a1:b6:f4:5b:c8:62:51:c7:76:82:b5:
14:4b:8a:40:23:4f:7f:9a:0d:31:54:ec:94:53:35:69:13:d8:
78:f7:75:46:28:f4:76:48:b3:20:80:3d:b6:90:d9:e7:51:b1:
8a:fe:9a:12:5d:00:21:d5:1c:f7:5d:c0:6a:75:40:04:32:75:
eb:1b:09:75:97:86:4f:f2:e7:4e:e4:c5:8d:0f:89:54:19:15:
42:ec:1a:e4:27:df:d6:2f:8f:5e:04:0c:00:2c:b1:db:0c:13:
e4:2c:c6:f7:7b:79:59:ce:a2:33:42:f1:98:c0:28:0d:01:ef:
47:ec:cf:f5:74:25:75:56:a8:c3:bb:fd:c6:75:4c:a3:4a:ac:
bd:dc:25:d9:30:b6:10:08:1f:d8:db:5c:30:3d:35:2e:09:e2:
08:14:26:12:9e:e6:15:fd:38:71:a3:16:2a:57:8a:0a:a8:20:
ac:3a:1a:8a
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZBOI5pWX18osVqppJvypK5YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwNjI1MDY0NDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTE0YjViNDZiNWQ0ZGYwNTA5NDllNzY5ZThhNmU2OWE0ZTQyZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn365QODiikXbOQfQEshUztE/g8pS
gOm3GcNRHHeHBGmyA1lpzEoohklmPtiIINmnhkCuq3RHoMX6yjmZCw3sEwim6D7u
y4ODIdLPn9n/zj0nSqnMF7rYvHPlBGE9beJLq7ouBnzlDrGHSBvtcDffj2gc4sVr
o64QyLqao8kAGBcRmPuRL6pHdJqE0wXjh2BW4VWpXRuBPrBf9YxYU9lp0WJKfzeA
5CsYDtF1EYxf+kTTQ+V03R1AUaCDxOtLIBIhBbhrolnvw2kfT/cz3T1KwQI82dZp
19W52xg4LZlMKmv4r6K/acgUq2goqdxXHBDdpZj5utKk19YryOC9Gmqj7wIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFFEUtbRrXU3wUJSedp6Kbmmk5C8yMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvVVJTMXRHdGRUZkJRbEo1Mm5vcHVhYVRrTHpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCPjycAwQC
Pjy4AwQCPjzAAwQCPjzcAwQC1bBAAwQC1bBcMA0GCSqGSIb3DQEBCwUAA4IBAQB6
0mSiaGKmPnopA+LjEBo3rW5xZHcQN49aXH+dzMcH5V/We/Nl2mH6rDpMQ7TJn3oh
u90ZjFtWTn0OlrWkw8wcu2DqCj0FyG7i/bp3ilOMobb0W8hiUcd2grUUS4pAI09/
mg0xVOyUUzVpE9h493VGKPR2SLMggD22kNnnUbGK/poSXQAh1Rz3XcBqdUAEMnXr
Gwl1l4ZP8udO5MWND4lUGRVC7BrkJ9/WL49eBAwALLHbDBPkLMb3e3lZzqIzQvGY
wCgNAe9H7M/1dCV1VqjDu/3GdUyjSqy93CXZMLYQCB/Y21wwPTUuCeIIFCYSnuYV
/ThxoxYqV4oKqCCsOhqK
-----END CERTIFICATE-----
Generated at Wed Jun 26 10:21:00 2024 by rpki-client on console-ams.rpki-client.org