Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eVcmDjxtYc5uR3wIHUU45S16nCA.roa
File: eVcmDjxtYc5uR3wIHUU45S16nCA.roa (raw, json)
Hash identifier: VgNAwzBpmTqhRD4GJGNKEtglF8qp/pwchvhYnGLgpp8=
Subject key identifier: 79:57:26:0E:3C:6D:61:CE:6E:47:7C:08:1D:45:38:E5:2D:7A:9C:20
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0186217CC21A70204510E245B3C959B0C1C2
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eVcmDjxtYc5uR3wIHUU45S16nCA.roa
Signing time: Sun 05 Feb 2023 12:11:09 +0000
ROA not before: Sun 05 Feb 2023 12:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15611
IP address blocks: 213.176.96.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
213.176.24.0/22 maxlen: 24
62.60.128.0/21 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.143.0/24 maxlen: 24
62.60.141.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.152.0/22 maxlen: 24
62.60.146.0/24 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
62.60.220.0/22 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.172.0/22 maxlen: 24
62.60.176.0/22 maxlen: 24
62.60.180.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.188.0/22 maxlen: 24
62.60.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Feb 2023 17:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:21:7c:c2:1a:70:20:45:10:e2:45:b3:c9:59:b0:c1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 5 12:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7957260e3c6d61ce6e477c081d4538e52d7a9c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:22:95:66:fd:3b:57:56:7b:f9:2e:44:23:8b:
96:b6:49:dd:cc:c3:e3:60:52:42:36:2d:02:1a:19:
9e:89:19:41:71:25:41:48:24:ef:c7:e6:05:2f:40:
32:d7:d3:70:86:84:a7:9e:c3:93:23:69:30:59:31:
d3:55:a2:29:a9:58:9f:bd:0b:24:60:90:08:e6:0d:
11:99:86:1a:a8:9c:f8:b0:3c:19:5c:7d:f6:6d:50:
54:03:c7:f0:7b:7f:6b:ce:e6:31:e4:68:46:f2:f4:
f1:35:dc:5e:03:5f:b4:be:fc:87:58:7c:4b:97:74:
df:79:7d:ff:c1:11:82:cd:9d:80:18:6a:c4:1f:9d:
8e:d7:88:c9:d4:76:73:4c:c0:ef:f1:ec:7c:95:6e:
f7:d5:1e:7b:7a:be:88:49:0f:75:48:38:4b:ba:c9:
8e:01:34:6e:f7:8b:9d:de:1b:9c:20:e7:19:27:6b:
af:25:79:a0:45:c9:ac:58:6c:df:53:dc:6e:50:97:
7e:9b:a2:f9:53:1f:42:72:50:13:b7:49:5b:4a:d4:
29:54:7d:9a:d7:f1:18:19:d9:ac:78:62:c7:b1:4a:
7f:7f:2e:c6:7a:94:5d:a0:df:8a:00:5d:23:b7:46:
15:b8:9c:de:5e:69:a9:9c:26:b6:bd:f9:71:3b:f3:
c4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:57:26:0E:3C:6D:61:CE:6E:47:7C:08:1D:45:38:E5:2D:7A:9C:20
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eVcmDjxtYc5uR3wIHUU45S16nCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0-62.60.137.255
62.60.139.0-62.60.143.255
62.60.145.0-62.60.146.255
62.60.152.0/22
62.60.168.0-62.60.191.255
62.60.208.0/22
62.60.220.0/22
213.176.4.0/23
213.176.24.0/22
213.176.96.0/24
213.176.122.0-213.176.125.255
Signature Algorithm: sha256WithRSAEncryption
c8:be:d9:da:7b:4a:c7:18:e9:49:83:cb:9c:b8:dd:de:5d:19:
4b:ca:cb:ab:4b:a0:7c:e9:cb:6b:37:2d:ca:c7:b1:35:c4:68:
a8:b2:dc:cb:67:d2:e8:87:7a:42:9a:61:66:78:34:cc:c4:2f:
41:05:73:9d:02:68:8a:53:66:6e:4e:da:7f:51:bf:25:36:4a:
f0:6f:e0:4f:88:39:69:6b:18:89:5d:b9:3d:32:c9:96:40:bf:
c3:94:82:c2:17:85:85:e9:e0:a7:14:ab:9c:00:a5:0e:3e:01:
43:4f:20:0b:5a:ec:82:50:f9:ca:c6:13:58:d0:67:72:48:1d:
0c:a9:90:88:af:ee:96:d2:c6:74:6c:22:2b:ba:b2:a8:8a:f1:
85:e0:bc:b3:8e:d8:f5:b2:09:17:c4:f2:53:26:aa:49:ad:2a:
22:7d:a7:66:8d:b6:81:5c:bf:62:d4:74:58:c9:4a:2a:cc:4e:
8f:a7:86:49:a1:35:c1:d2:1e:85:45:55:90:e8:03:46:b7:ab:
80:40:2a:a9:4c:6b:90:66:59:9d:f7:2a:31:f7:3f:d8:5b:b1:
94:a6:ad:fd:80:1b:d3:75:87:ab:71:61:47:94:bf:c3:44:0d:
da:d1:c1:7f:28:a3:78:a6:c7:77:05:20:ae:c6:8b:b7:d6:42:
4c:7b:47:09
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAYYhfMIacCBFEOJFs8lZsMHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwMjA1MTIxMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTU3MjYwZTNjNmQ2MWNlNmU0NzdjMDgxZDQ1MzhlNTJkN2E5YzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiKVZv07V1Z7+S5EI4uWtkndzMPj
YFJCNi0CGhmeiRlBcSVBSCTvx+YFL0Ay19NwhoSnnsOTI2kwWTHTVaIpqVifvQsk
YJAI5g0RmYYaqJz4sDwZXH32bVBUA8fwe39rzuYx5GhG8vTxNdxeA1+0vvyHWHxL
l3TfeX3/wRGCzZ2AGGrEH52O14jJ1HZzTMDv8ex8lW731R57er6ISQ91SDhLusmO
ATRu94ud3hucIOcZJ2uvJXmgRcmsWGzfU9xuUJd+m6L5Ux9CclATt0lbStQpVH2a
1/EYGdmseGLHsUp/fy7GepRdoN+KAF0jt0YVuJzeXmmpnCa2vflxO/PEkwIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFHlXJg48bWHObkd8CB1FOOUtepwgMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvZVZjbURqeHRZYzV1UjN3SUhVVTQ1UzE2bkNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwajAMAwQHPjyA
AwQBPjyIMAwDBAA+PIsDBAQ+PIAwDAMEAD48kQMEAD48kgMEAj48mDAMAwQDPjyo
AwQGPjyAAwQCPjzQAwQCPjzcAwQB1bAEAwQC1bAYAwQA1bBgMAwDBAHVsHoDBAHV
sHwwDQYJKoZIhvcNAQELBQADggEBAMi+2dp7SscY6UmDy5y43d5dGUvKy6tLoHzp
y2s3LcrHsTXEaKiy3Mtn0uiHekKaYWZ4NMzEL0EFc50CaIpTZm5O2n9RvyU2SvBv
4E+IOWlrGIlduT0yyZZAv8OUgsIXhYXp4KcUq5wApQ4+AUNPIAta7IJQ+crGE1jQ
Z3JIHQypkIiv7pbSxnRsIiu6sqiK8YXgvLOO2PWyCRfE8lMmqkmtKiJ9p2aNtoFc
v2LUdFjJSirMTo+nhkmhNcHSHoVFVZDoA0a3q4BAKqlMa5BmWZ33KjH3P9hbsZSm
rf2AG9N1h6txYUeUv8NEDdrRwX8oo3imx3cFIK7Gi7fWQkx7Rwk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org