Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/coRMfOCP6O6b0h019Z1QT_c-4VQ.roa
File: coRMfOCP6O6b0h019Z1QT_c-4VQ.roa (raw, json)
Hash identifier: /4ejk6pDzHmS1hzh9VVS2cAzLE2VVhGKBoyIkBd9LMQ=
Subject key identifier: 72:84:4C:7C:E0:8F:E8:EE:9B:D2:1D:35:F5:9D:50:4F:F7:3E:E1:54
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018B6B103799A48BCB2C0CF226F6478B5AFD
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/coRMfOCP6O6b0h019Z1QT_c-4VQ.roa
Signing time: Thu 26 Oct 2023 08:18:26 +0000
ROA not before: Thu 26 Oct 2023 08:18:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.216.0/22 maxlen: 24
62.60.220.0/22 maxlen: 24
62.60.224.0/20 maxlen: 24
62.60.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Nov 2023 19:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:10:37:99:a4:8b:cb:2c:0c:f2:26:f6:47:8b:5a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 26 08:18:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72844c7ce08fe8ee9bd21d35f59d504ff73ee154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:2a:8c:3e:1f:11:25:ee:f1:c1:87:34:b2:
35:fd:01:3c:3e:60:9f:02:7a:29:6f:fd:ca:b4:f6:
bc:79:d2:4c:5a:59:2a:e2:18:bc:a8:3f:13:40:7f:
5b:4d:fc:f4:f0:f1:2c:57:fe:20:2b:48:3a:cc:bd:
57:22:61:c8:71:10:12:db:78:37:6e:95:9d:52:43:
4f:25:18:d9:8d:bc:67:5d:a2:ef:e3:24:45:39:45:
1a:3c:68:fb:00:a8:46:b8:e8:0e:d0:f4:42:bd:b4:
4c:ca:df:62:da:61:0e:a2:51:c5:a1:d8:4c:d7:52:
ce:6f:f9:cc:09:95:64:27:b3:6e:7a:59:07:75:1b:
12:c5:43:b4:05:09:06:73:fd:5f:52:14:e5:ea:9e:
a5:a6:87:c8:57:4d:11:c9:d7:9a:e7:b6:63:7b:27:
c3:75:4d:11:c2:38:ed:21:ba:3a:c9:1f:a7:2d:ea:
13:de:77:19:80:14:93:8c:4d:cc:fd:c5:c3:16:f8:
20:3b:d8:b0:0d:08:30:af:e5:35:2f:e6:c7:c0:f0:
af:20:83:fb:fb:16:64:6f:56:37:27:e2:d5:7a:5f:
ae:31:6b:22:33:1b:ce:6f:7d:41:6c:e8:6d:4d:d7:
72:00:a0:97:f0:18:71:32:b9:7e:75:f9:27:b6:ab:
6f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:84:4C:7C:E0:8F:E8:EE:9B:D2:1D:35:F5:9D:50:4F:F7:3E:E1:54
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/coRMfOCP6O6b0h019Z1QT_c-4VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.216.0-62.60.255.255
Signature Algorithm: sha256WithRSAEncryption
94:52:e8:34:cc:ae:64:5b:04:a3:3d:93:8d:b3:c9:bc:0a:43:
86:1a:cc:48:87:85:e6:b3:31:15:48:91:94:93:3b:8e:cc:df:
5c:e2:00:5c:c4:52:d4:a5:1b:72:44:15:16:65:62:64:99:bf:
6d:98:e4:0a:af:e5:e8:fa:ff:04:26:38:b9:09:86:d4:5b:c8:
ec:3d:35:6a:10:f1:f9:30:70:e4:20:ec:5a:63:fb:fb:8e:2c:
00:37:c7:f1:d8:04:f2:0b:19:fd:23:15:35:7a:a0:48:64:0e:
4f:5e:76:e2:96:4f:60:b8:df:cc:87:36:01:c3:3f:fc:f7:71:
c7:68:56:c6:48:f8:34:9d:d8:d3:dc:01:d6:61:7a:c2:7d:1f:
b0:ce:f2:e1:a3:ae:eb:0e:60:cf:10:ea:37:3f:fb:65:43:5b:
be:0a:a3:40:d7:7f:05:52:49:09:c0:91:89:c2:97:04:71:7a:
1a:bb:77:a3:ec:c0:6b:f6:3a:48:48:bb:d1:f2:1b:15:15:17:
63:75:d9:46:75:03:5f:0e:d2:34:4d:f6:d2:cf:8f:de:e6:f6:
04:bc:2e:c7:a5:bb:3e:37:dd:7b:02:25:0f:99:14:1c:a7:fd:
86:31:59:b4:fd:f9:08:ab:df:e3:8a:b6:c8:9d:f3:e7:d9:81:
79:e4:3d:1a
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYtrEDeZpIvLLAzyJvZHi1r9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMxMDI2MDgxODI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Mjg0NGM3Y2UwOGZlOGVlOWJkMjFkMzVmNTlkNTA0ZmY3M2VlMTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFgqjD4fESXu8cGHNLI1/QE8PmCf
Anopb/3KtPa8edJMWlkq4hi8qD8TQH9bTfz08PEsV/4gK0g6zL1XImHIcRAS23g3
bpWdUkNPJRjZjbxnXaLv4yRFOUUaPGj7AKhGuOgO0PRCvbRMyt9i2mEOolHFodhM
11LOb/nMCZVkJ7NuelkHdRsSxUO0BQkGc/1fUhTl6p6lpofIV00Rydea57ZjeyfD
dU0RwjjtIbo6yR+nLeoT3ncZgBSTjE3M/cXDFvggO9iwDQgwr+U1L+bHwPCvIIP7
+xZkb1Y3J+LVel+uMWsiMxvOb31BbOhtTddyAKCX8BhxMrl+dfkntqtvKwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFHKETHzgj+jum9IdNfWdUE/3PuFUMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvY29STWZPQ1A2TzZiMGgwMTlaMVFUX2MtNFZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAM+PNgD
AwA+PDANBgkqhkiG9w0BAQsFAAOCAQEAlFLoNMyuZFsEoz2TjbPJvApDhhrMSIeF
5rMxFUiRlJM7jszfXOIAXMRS1KUbckQVFmViZJm/bZjkCq/l6Pr/BCY4uQmG1FvI
7D01ahDx+TBw5CDsWmP7+44sADfH8dgE8gsZ/SMVNXqgSGQOT1524pZPYLjfzIc2
AcM//Pdxx2hWxkj4NJ3Y09wB1mF6wn0fsM7y4aOu6w5gzxDqNz/7ZUNbvgqjQNd/
BVJJCcCRicKXBHF6Grt3o+zAa/Y6SEi70fIbFRUXY3XZRnUDXw7SNE320s+P3ub2
BLwux6W7PjfdewIlD5kUHKf9hjFZtP35CKvf44q2yJ3z59mBeeQ9Gg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org