Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ZM_yZ0WHOT5DuRLkoVN3RK-Iqk4.roa
File: ZM_yZ0WHOT5DuRLkoVN3RK-Iqk4.roa (raw, json)
Hash identifier: Jz0yiEpSdES0cZzIcRbr+die3ZZettU9vtdtIg32bKA=
Subject key identifier: 64:CF:F2:67:45:87:39:3E:43:B9:12:E4:A1:53:77:44:AF:88:AA:4E
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0189B5B7F15C5A81A1579EA4D393A5A07F5A
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ZM_yZ0WHOT5DuRLkoVN3RK-Iqk4.roa
Signing time: Wed 02 Aug 2023 10:07:58 +0000
ROA not before: Wed 02 Aug 2023 10:07:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.220.0/22 maxlen: 24
62.60.147.0/24 maxlen: 24
62.60.148.0/22 maxlen: 24
213.176.121.0/24 maxlen: 24
213.176.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 07:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:b7:f1:5c:5a:81:a1:57:9e:a4:d3:93:a5:a0:7f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 2 10:07:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64cff2674587393e43b912e4a1537744af88aa4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:da:a1:cb:77:9e:3a:32:64:bf:67:45:55:
53:d8:4c:f6:33:12:6a:fd:c9:f8:a5:78:13:96:07:
72:db:45:d1:1a:1b:da:ae:83:fc:fd:a9:b6:d2:32:
e8:fa:c0:83:cc:a4:89:83:9d:6d:33:ab:47:27:86:
b8:09:fc:d8:46:25:0c:f2:a7:40:c7:86:64:33:0f:
c1:9b:05:82:c0:34:78:a5:b5:d6:16:c1:8e:76:52:
8d:71:73:40:58:5d:d8:ff:d5:9f:2e:de:ca:9c:63:
eb:bb:1f:c8:fd:a6:2a:f8:48:7c:82:3d:e9:cd:d7:
04:51:2e:51:b0:7e:b5:b6:4e:b6:00:61:46:9b:f1:
17:6b:ca:9b:99:f5:a8:a7:6f:89:64:29:32:2c:33:
b8:d7:5f:e1:79:66:8f:89:24:12:6f:a0:29:ad:c1:
a2:ba:aa:76:48:60:ff:3d:82:04:92:5e:26:43:75:
2f:f1:fc:1b:60:6a:14:ce:f5:91:1e:c4:09:bb:fc:
7b:bd:47:cd:79:9c:b8:3f:b9:3a:70:df:88:6e:28:
e4:57:19:d0:58:5d:8b:92:55:dd:4a:0e:7d:a1:d2:
bb:9c:e4:aa:a5:22:11:59:9b:ac:75:9d:cb:87:f2:
c4:bd:6b:42:47:45:5c:f7:5b:f5:9f:d0:d8:7e:ba:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CF:F2:67:45:87:39:3E:43:B9:12:E4:A1:53:77:44:AF:88:AA:4E
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ZM_yZ0WHOT5DuRLkoVN3RK-Iqk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.147.0-62.60.151.255
62.60.220.0/22
213.176.121.0/24
213.176.127.0/24
Signature Algorithm: sha256WithRSAEncryption
23:bd:a0:a1:13:b8:32:45:67:65:8e:06:8e:74:fe:8c:cf:23:
a4:fe:e6:af:d1:0f:47:be:88:16:29:df:2e:cd:8a:c1:6e:82:
c5:41:f9:97:3f:a5:63:23:30:9a:aa:2e:51:72:8b:99:47:4c:
cd:b6:81:f0:e8:a9:93:9d:f6:53:57:a5:a6:d9:d3:b0:79:ed:
f2:c2:1b:79:43:83:58:89:b6:80:bd:c9:1c:d7:ae:b5:85:d7:
15:7d:59:81:90:f3:aa:2d:8c:55:99:47:6b:4c:91:0d:e0:76:
45:fe:81:fd:5a:0a:80:1f:df:6b:9c:ee:ac:b7:58:21:cd:9f:
43:af:09:90:53:4f:76:ed:72:a2:ac:8f:ec:1b:f2:81:bd:38:
ad:56:55:0f:9b:5e:b0:18:93:ef:13:38:b3:6d:17:b2:6a:ff:
19:c3:e2:91:ae:86:23:66:04:a9:0a:9e:ff:2e:7f:0b:b9:5a:
87:86:33:dd:cc:a0:df:15:b7:b6:e4:c9:94:4d:da:a7:5b:3c:
e1:83:b4:d9:39:eb:ce:bc:0e:0d:91:09:73:25:2f:29:3f:4c:
9a:92:8d:a0:d0:1c:1f:55:34:a4:6d:c5:06:98:b2:ec:84:28:
91:35:00:31:0b:81:42:24:dc:d1:28:4c:d8:50:d4:8a:04:12:
22:03:2a:54
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYm1t/FcWoGhV56k05OloH9aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwODAyMTAwNzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGNmZjI2NzQ1ODczOTNlNDNiOTEyZTRhMTUzNzc0NGFmODhhYTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDbaoct3njoyZL9nRVVT2Ez2MxJq
/cn4pXgTlgdy20XRGhvaroP8/am20jLo+sCDzKSJg51tM6tHJ4a4CfzYRiUM8qdA
x4ZkMw/BmwWCwDR4pbXWFsGOdlKNcXNAWF3Y/9WfLt7KnGPrux/I/aYq+Eh8gj3p
zdcEUS5RsH61tk62AGFGm/EXa8qbmfWop2+JZCkyLDO411/heWaPiSQSb6AprcGi
uqp2SGD/PYIEkl4mQ3Uv8fwbYGoUzvWRHsQJu/x7vUfNeZy4P7k6cN+IbijkVxnQ
WF2LklXdSg59odK7nOSqpSIRWZusdZ3Lh/LEvWtCR0Vc91v1n9DYfrpaeQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFGTP8mdFhzk+Q7kS5KFTd0SviKpOMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvWk1feVowV0hPVDVEdVJMa29WTjNSSy1JcWs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAA+PJMD
BAM+PJADBAI+PNwDBADVsHkDBADVsH8wDQYJKoZIhvcNAQELBQADggEBACO9oKET
uDJFZ2WOBo50/ozPI6T+5q/RD0e+iBYp3y7NisFugsVB+Zc/pWMjMJqqLlFyi5lH
TM22gfDoqZOd9lNXpabZ07B57fLCG3lDg1iJtoC9yRzXrrWF1xV9WYGQ86otjFWZ
R2tMkQ3gdkX+gf1aCoAf32uc7qy3WCHNn0OvCZBTT3btcqKsj+wb8oG9OK1WVQ+b
XrAYk+8TOLNtF7Jq/xnD4pGuhiNmBKkKnv8ufwu5WoeGM93MoN8Vt7bkyZRN2qdb
POGDtNk56868Dg2RCXMlLyk/TJqSjaDQHB9VNKRtxQaYsuyEKJE1ADELgUIk3NEo
TNhQ1IoEEiIDKlQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org