Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/VHqBTQ5JAm1gnmZ9L99EXrxM_Qo.roa
File: VHqBTQ5JAm1gnmZ9L99EXrxM_Qo.roa (raw, json)
Hash identifier: 2EWnerlTMAcu2pGnyCykHGlHmak4Zp6JkwiKzKcYRD0=
Subject key identifier: 54:7A:81:4D:0E:49:02:6D:60:9E:66:7D:2F:DF:44:5E:BC:4C:FD:0A
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0185D86A797FE7264E265E82ABDA09EF6745
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/VHqBTQ5JAm1gnmZ9L99EXrxM_Qo.roa
Signing time: Sun 22 Jan 2023 07:38:54 +0000
ROA not before: Sun 22 Jan 2023 07:38:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15611
IP address blocks: 213.176.68.0/22 maxlen: 24
213.176.72.0/22 maxlen: 24
213.176.88.0/22 maxlen: 24
213.176.96.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
213.176.20.0/22 maxlen: 24
213.176.24.0/22 maxlen: 24
62.60.128.0/21 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.143.0/24 maxlen: 24
62.60.141.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.152.0/22 maxlen: 24
62.60.146.0/24 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
62.60.220.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.188.0/22 maxlen: 24
62.60.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Feb 2023 06:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d8:6a:79:7f:e7:26:4e:26:5e:82:ab:da:09:ef:67:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 22 07:38:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=547a814d0e49026d609e667d2fdf445ebc4cfd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:0d:84:1c:c6:f9:ca:7c:15:78:b7:ca:57:
85:5c:60:8f:53:8f:d7:32:54:3e:5b:04:04:9a:66:
d2:ba:dd:ac:5a:62:d8:d8:b3:60:5c:03:f4:97:6d:
90:97:f2:b0:c8:6d:ec:ab:b9:02:f0:09:bd:91:1a:
c6:25:d1:bc:50:db:65:7e:d1:a3:35:44:51:c5:02:
de:bd:cd:d4:fe:2b:88:e1:3f:0a:30:d0:c1:b9:b9:
4a:52:df:7a:24:d8:e8:a6:6d:66:9b:9c:a7:b8:23:
b4:dd:59:a7:5b:07:88:42:e4:76:31:cd:bc:c4:26:
4b:fd:56:17:91:69:38:33:f8:44:81:6f:f5:be:7b:
d7:73:b3:37:2f:ee:13:2d:a5:b9:3c:43:2d:88:0e:
89:b0:5d:45:c5:77:d4:3f:b1:90:89:b1:61:5a:03:
87:1c:d1:80:cf:31:98:ae:80:e0:5c:9b:d5:d7:3c:
91:65:29:d2:52:f0:4c:48:89:f1:ed:1f:f3:1d:7e:
b6:f9:e2:88:2f:57:fd:65:74:0c:58:a2:46:5d:e8:
77:fd:77:6a:bb:5b:5b:89:26:07:f8:7f:cb:a1:56:
8d:17:6e:21:99:bc:04:ba:42:2e:43:bb:dd:77:b0:
17:56:21:83:02:b6:7b:17:f2:77:cf:69:61:79:3d:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7A:81:4D:0E:49:02:6D:60:9E:66:7D:2F:DF:44:5E:BC:4C:FD:0A
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/VHqBTQ5JAm1gnmZ9L99EXrxM_Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0-62.60.137.255
62.60.139.0-62.60.143.255
62.60.145.0-62.60.146.255
62.60.152.0/22
62.60.184.0/21
62.60.208.0/22
62.60.220.0/22
213.176.4.0/23
213.176.20.0-213.176.27.255
213.176.68.0-213.176.75.255
213.176.88.0/22
213.176.96.0/24
213.176.122.0-213.176.125.255
Signature Algorithm: sha256WithRSAEncryption
1b:d9:0d:e4:26:62:58:18:b5:47:5b:18:49:ad:3f:00:be:53:
6b:d4:cb:4c:18:12:10:ba:99:57:f5:5c:ca:e5:d4:48:54:0b:
3d:40:95:a1:f2:2d:4e:d7:3c:bb:2b:0a:88:cd:19:2b:ae:e0:
d2:72:cb:d9:80:cc:87:75:84:a4:29:86:5d:80:60:57:6c:82:
9b:cd:91:a6:43:09:ff:35:ae:b6:2f:76:a0:a7:52:e1:ef:ca:
a3:f2:bc:a5:69:76:18:42:c5:1f:44:36:00:74:82:0b:09:fe:
bc:08:09:ec:d4:d4:bf:65:03:ec:d9:31:42:3b:23:65:83:de:
00:28:2e:89:80:91:66:46:e2:de:df:e5:c9:4d:8e:d2:72:cd:
a6:38:51:6f:81:80:1e:a9:67:b2:b4:62:eb:92:bf:24:8b:df:
65:be:01:20:ab:38:3b:06:cb:d6:1d:af:d6:1c:f8:74:b4:6f:
78:e5:45:08:97:a2:fc:09:62:3e:3e:9f:18:e0:68:42:48:f0:
c0:4e:57:18:03:b9:06:21:09:e5:af:e0:f8:1d:67:be:83:18:
a2:99:1f:83:ba:4a:b4:78:18:17:0f:cc:e5:1d:8d:6a:ec:2a:
50:de:92:4f:69:64:4c:47:1a:13:85:5a:ba:65:f0:ea:37:0b:
43:e6:85:4f
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAYXYanl/5yZOJl6Cq9oJ72dFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwMTIyMDczODU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDdhODE0ZDBlNDkwMjZkNjA5ZTY2N2QyZmRmNDQ1ZWJjNGNmZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/4NhBzG+cp8FXi3yleFXGCPU4/X
MlQ+WwQEmmbSut2sWmLY2LNgXAP0l22Ql/KwyG3sq7kC8Am9kRrGJdG8UNtlftGj
NURRxQLevc3U/iuI4T8KMNDBublKUt96JNjopm1mm5ynuCO03VmnWweIQuR2Mc28
xCZL/VYXkWk4M/hEgW/1vnvXc7M3L+4TLaW5PEMtiA6JsF1FxXfUP7GQibFhWgOH
HNGAzzGYroDgXJvV1zyRZSnSUvBMSInx7R/zHX62+eKIL1f9ZXQMWKJGXeh3/Xdq
u1tbiSYH+H/LoVaNF24hmbwEukIuQ7vdd7AXViGDArZ7F/J3z2lheT33NQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFFR6gU0OSQJtYJ5mfS/fRF68TP0KMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvVkhxQlRRNUpBbTFnbm1aOUw5OUVYcnhNX1FvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfjAMAwQH
PjyAAwQBPjyIMAwDBAA+PIsDBAQ+PIAwDAMEAD48kQMEAD48kgMEAj48mAMEAz48
uAMEAj480AMEAj483AMEAdWwBDAMAwQC1bAUAwQC1bAYMAwDBALVsEQDBALVsEgD
BALVsFgDBADVsGAwDAMEAdWwegMEAdWwfDANBgkqhkiG9w0BAQsFAAOCAQEAG9kN
5CZiWBi1R1sYSa0/AL5Ta9TLTBgSELqZV/VcyuXUSFQLPUCVofItTtc8uysKiM0Z
K67g0nLL2YDMh3WEpCmGXYBgV2yCm82RpkMJ/zWuti92oKdS4e/Ko/K8pWl2GELF
H0Q2AHSCCwn+vAgJ7NTUv2UD7NkxQjsjZYPeACguiYCRZkbi3t/lyU2O0nLNpjhR
b4GAHqlnsrRi65K/JIvfZb4BIKs4OwbL1h2v1hz4dLRveOVFCJei/AliPj6fGOBo
QkjwwE5XGAO5BiEJ5a/g+B1nvoMYopkfg7pKtHgYFw/M5R2NauwqUN6ST2lkTEca
E4VaumXw6jcLQ+aFTw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org