Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ZQdvp3kH2hwDM-KoL6c4gN8tRWw.roa
File: ZQdvp3kH2hwDM-KoL6c4gN8tRWw.roa (raw, json)
Hash identifier: VhN8+ktTOnpVe+HXviniSxI8tEpO79B2pTgxwmDjUEI=
Subject key identifier: 65:07:6F:A7:79:07:DA:1C:03:33:E2:A8:2F:A7:38:80:DF:2D:45:6C
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019049075147A94F0C8E1C66A544327E8BFA
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ZQdvp3kH2hwDM-KoL6c4gN8tRWw.roa
Signing time: Mon 24 Jun 2024 06:55:34 +0000
ROA not before: Mon 24 Jun 2024 06:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55933
IP address blocks: 62.60.216.0/23 maxlen: 24
213.176.72.0/23 maxlen: 24
213.176.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 06:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:07:51:47:a9:4f:0c:8e:1c:66:a5:44:32:7e:8b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 24 06:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65076fa77907da1c0333e2a82fa73880df2d456c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:bd:c7:03:12:01:6c:59:d0:36:08:06:db:
fb:ae:0d:e8:a7:e6:d2:2f:9e:f1:6d:c4:39:8f:a0:
64:ad:15:3d:e1:dd:c1:17:6a:f1:c2:21:4b:10:9f:
bb:3d:cf:09:68:7d:a0:f4:6b:fc:21:f9:ce:4b:83:
5f:f7:88:49:a3:75:20:0b:58:7d:01:7c:c1:94:37:
f7:ed:de:c2:d4:fb:7d:06:a1:b5:9d:0b:fe:36:d9:
3c:38:9b:3a:7f:b4:f4:6c:91:4b:76:96:5a:1b:ea:
c9:06:5b:d8:aa:1f:60:a7:1d:a0:48:70:93:50:eb:
b3:02:50:bb:0d:3a:26:f1:8b:ed:73:f3:56:25:b9:
3d:c8:3c:22:3c:f8:1d:39:78:ee:1a:a2:fa:04:17:
fb:a5:07:b3:81:b4:7d:62:9a:e0:c5:1f:1b:d6:0c:
8a:ab:ce:66:f6:f5:53:60:f2:24:61:88:fa:41:07:
12:85:b4:c5:ba:90:88:dd:7d:df:f6:93:97:e8:c6:
a5:de:2a:30:15:cd:41:c5:33:9d:a6:01:2c:51:5d:
82:38:93:68:de:ec:5f:9f:6d:44:34:f9:94:23:04:
3a:bd:03:d9:15:07:f7:c7:b5:c2:ca:35:78:e1:95:
31:5f:80:d0:90:dc:40:d9:24:c9:10:8e:6b:9c:52:
58:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:07:6F:A7:79:07:DA:1C:03:33:E2:A8:2F:A7:38:80:DF:2D:45:6C
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ZQdvp3kH2hwDM-KoL6c4gN8tRWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.216.0/23
213.176.72.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:f3:92:e8:3c:fd:c4:d0:d0:d2:17:ac:ac:ef:f5:83:34:0d:
8b:da:fc:43:b3:68:9d:60:13:dd:d8:fa:42:1d:78:9e:4a:41:
fb:69:0a:11:10:b1:72:17:d4:9e:69:06:b3:ca:59:b8:13:67:
86:70:ee:30:b9:90:18:3c:b0:74:2e:5b:6a:ff:7f:47:fe:ad:
7c:77:fd:ce:1d:18:cc:3c:eb:c7:1e:d9:ea:d5:a4:42:b2:86:
14:5c:46:20:f1:f7:ff:1d:f1:4a:f0:5f:0d:59:e0:73:e8:3b:
66:4b:e2:cb:bb:a7:4d:f3:2a:31:6b:9e:ec:45:1a:85:a6:31:
8b:e3:c2:75:cc:27:f8:c8:06:d7:9f:28:60:35:b4:6d:77:cd:
17:5f:e6:3c:8f:34:c0:51:21:41:67:ef:f0:5d:6f:dc:d2:90:
36:d6:05:c6:8d:00:c0:39:e8:0d:7e:6e:a5:a5:22:8a:a2:aa:
f6:44:69:e8:c2:e0:08:fa:a3:b6:bd:db:6e:55:c5:31:64:84:
a8:da:96:de:a2:e0:19:57:b9:e9:7e:70:bf:ca:20:a1:90:fa:
51:17:9c:6d:e0:cb:06:11:c2:a3:04:5e:73:f7:19:16:11:5f:
68:a8:cb:c5:52:4b:55:be:7a:1c:2f:fc:a3:aa:d4:55:5b:bc:
ac:a9:41:ce
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZBJB1FHqU8MjhxmpUQyfov6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwNjI0MDY1NTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTA3NmZhNzc5MDdkYTFjMDMzM2UyYTgyZmE3Mzg4MGRmMmQ0NTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopm9xwMSAWxZ0DYIBtv7rg3op+bS
L57xbcQ5j6BkrRU94d3BF2rxwiFLEJ+7Pc8JaH2g9Gv8IfnOS4Nf94hJo3UgC1h9
AXzBlDf37d7C1Pt9BqG1nQv+Ntk8OJs6f7T0bJFLdpZaG+rJBlvYqh9gpx2gSHCT
UOuzAlC7DTom8Yvtc/NWJbk9yDwiPPgdOXjuGqL6BBf7pQezgbR9YprgxR8b1gyK
q85m9vVTYPIkYYj6QQcShbTFupCI3X3f9pOX6Mal3iowFc1BxTOdpgEsUV2COJNo
3uxfn21ENPmUIwQ6vQPZFQf3x7XCyjV44ZUxX4DQkNxA2STJEI5rnFJYEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGUHb6d5B9ocAzPiqC+nOIDfLUVsMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvWlFkdnAza0gyaHdETS1Lb0w2YzRnTjh0Uld3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBPjzYAwQB
1bBIMA0GCSqGSIb3DQEBCwUAA4IBAQDN85LoPP3E0NDSF6ys7/WDNA2L2vxDs2id
YBPd2PpCHXieSkH7aQoRELFyF9SeaQazylm4E2eGcO4wuZAYPLB0Lltq/39H/q18
d/3OHRjMPOvHHtnq1aRCsoYUXEYg8ff/HfFK8F8NWeBz6DtmS+LLu6dN8yoxa57s
RRqFpjGL48J1zCf4yAbXnyhgNbRtd80XX+Y8jzTAUSFBZ+/wXW/c0pA21gXGjQDA
OegNfm6lpSKKoqr2RGnowuAI+qO2vdtuVcUxZISo2pbeouAZV7npfnC/yiChkPpR
F5xt4MsGEcKjBF5z9xkWEV9oqMvFUktVvnocL/yjqtRVW7ysqUHO
-----END CERTIFICATE-----
Generated at Tue Jun 25 09:54:33 2024 by rpki-client on console-ams.rpki-client.org