Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eoWbuEEwCiFnDXybLarmpAjnK_c.roa
File: eoWbuEEwCiFnDXybLarmpAjnK_c.roa (raw, json)
Hash identifier: /3de650K3KPHROwycrdU7NMwDT5Btbt+nQ02WJMp7lM=
Subject key identifier: 7A:85:9B:B8:41:30:0A:21:67:0D:7C:9B:2D:AA:E6:A4:08:E7:2B:F7
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01927F96A7512A77FD6D50CADD07BEA72A32
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eoWbuEEwCiFnDXybLarmpAjnK_c.roa
Signing time: Sat 12 Oct 2024 07:17:12 +0000
ROA not before: Sat 12 Oct 2024 07:17:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 62.60.154.0/23 maxlen: 24
62.60.156.0/22 maxlen: 24
62.60.216.0/23 maxlen: 24
62.60.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 12:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7f:96:a7:51:2a:77:fd:6d:50:ca:dd:07:be:a7:2a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 12 07:17:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a859bb841300a21670d7c9b2daae6a408e72bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:d6:2e:0f:13:78:0b:cc:c7:cc:d5:02:79:
9e:42:92:55:b7:ef:eb:fa:b6:b7:71:c4:4d:08:81:
10:f5:b7:3c:97:4c:c1:01:23:f4:c4:fd:38:ef:a8:
90:c0:b7:a5:a7:0e:69:ab:6c:09:92:92:ce:8c:26:
29:21:f1:bc:68:0b:ac:13:2b:63:06:07:c8:15:11:
08:45:d9:af:05:32:ff:73:a9:a1:31:1b:ac:f0:36:
cd:77:3f:45:49:97:27:85:7b:fd:80:79:b5:53:66:
dc:0d:07:69:55:06:4c:7d:7f:32:fe:d7:34:8b:77:
19:cc:80:31:8d:90:61:1d:11:4c:3b:91:3b:fc:a6:
75:78:1e:c0:77:90:5e:c1:56:8c:aa:f3:aa:9c:8f:
2d:fb:f2:5b:7d:1a:be:1b:31:fb:6b:23:53:cc:62:
91:51:a1:82:98:07:3b:04:b1:e2:72:db:31:d4:74:
6b:d8:1b:08:68:95:f6:ec:df:bf:32:08:e6:88:0c:
aa:f7:8b:98:38:48:cd:6b:c0:5d:2b:f5:bf:df:e9:
7f:83:a1:fe:30:1d:1c:6f:ef:f6:c1:03:37:09:a4:
0b:ee:39:45:25:23:c1:31:5a:fc:2f:77:7d:47:97:
f8:8a:4b:55:19:f3:06:0b:5c:6e:f1:f2:a0:f6:dd:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:85:9B:B8:41:30:0A:21:67:0D:7C:9B:2D:AA:E6:A4:08:E7:2B:F7
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eoWbuEEwCiFnDXybLarmpAjnK_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.154.0-62.60.159.255
62.60.216.0/23
62.60.236.0/22
Signature Algorithm: sha256WithRSAEncryption
72:8e:3d:1a:a8:e6:ce:cf:32:7d:96:0d:a3:95:ac:0a:c7:94:
f7:b9:1b:70:3a:aa:7b:4b:00:f3:79:d7:c3:5b:a8:2a:d7:79:
1c:00:87:96:ec:68:af:e3:0d:98:ef:ef:51:15:27:11:e6:4f:
c0:1a:a8:74:13:45:9b:ee:7a:98:8d:5d:a4:a3:03:81:9f:c5:
b5:e5:94:13:43:ef:b9:12:d3:19:bd:a6:a5:70:28:4f:0d:e3:
06:6a:4c:fe:fc:42:7d:18:3f:a8:9e:2b:30:c1:d4:d4:e5:89:
50:3a:78:0b:b7:e9:4c:cf:08:72:d0:a0:2d:b3:05:84:62:46:
d0:6e:05:b7:ef:05:31:fe:2e:9c:cf:9f:9d:8c:95:e9:4f:cc:
84:a9:25:d1:b0:e8:9e:bf:fb:e3:89:1b:3d:5a:fb:ea:36:65:
c8:aa:e9:a0:41:b2:8d:95:3e:33:8b:e5:a2:ea:41:60:56:f9:
5b:72:9b:6d:3f:68:cc:47:65:03:5b:cf:a4:85:33:25:e8:e9:
c2:76:6f:1d:49:22:4f:5e:06:c2:91:d1:8c:ca:d2:46:f3:88:
13:f8:45:ac:93:08:6b:ca:f0:70:48:87:1f:1f:62:0d:ad:84:
0e:12:a5:60:36:7d:d0:af:e3:e4:f3:11:22:e7:4e:25:df:e1:
ce:bf:c2:8d
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZJ/lqdRKnf9bVDK3Qe+pyoyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQxMDEyMDcxNzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTg1OWJiODQxMzAwYTIxNjcwZDdjOWIyZGFhZTZhNDA4ZTcyYmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrfWLg8TeAvMx8zVAnmeQpJVt+/r
+ra3ccRNCIEQ9bc8l0zBASP0xP0476iQwLelpw5pq2wJkpLOjCYpIfG8aAusEytj
BgfIFREIRdmvBTL/c6mhMRus8DbNdz9FSZcnhXv9gHm1U2bcDQdpVQZMfX8y/tc0
i3cZzIAxjZBhHRFMO5E7/KZ1eB7Ad5BewVaMqvOqnI8t+/JbfRq+GzH7ayNTzGKR
UaGCmAc7BLHictsx1HRr2BsIaJX27N+/MgjmiAyq94uYOEjNa8BdK/W/3+l/g6H+
MB0cb+/2wQM3CaQL7jlFJSPBMVr8L3d9R5f4iktVGfMGC1xu8fKg9t0CjwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFHqFm7hBMAohZw18my2q5qQI5yv3MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvZW9XYnVFRXdDaUZuRFh5Ykxhcm1wQWpuS19jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAE+PJoD
BAU+PIADBAE+PNgDBAI+POwwDQYJKoZIhvcNAQELBQADggEBAHKOPRqo5s7PMn2W
DaOVrArHlPe5G3A6qntLAPN518NbqCrXeRwAh5bsaK/jDZjv71EVJxHmT8AaqHQT
RZvuepiNXaSjA4GfxbXllBND77kS0xm9pqVwKE8N4wZqTP78Qn0YP6ieKzDB1NTl
iVA6eAu36UzPCHLQoC2zBYRiRtBuBbfvBTH+LpzPn52MlelPzISpJdGw6J6/++OJ
Gz1a++o2Zciq6aBBso2VPjOL5aLqQWBW+Vtym20/aMxHZQNbz6SFMyXo6cJ2bx1J
Ik9eBsKR0YzK0kbziBP4RayTCGvK8HBIhx8fYg2thA4SpWA2fdCv4+TzESLnTiXf
4c6/wo0=
-----END CERTIFICATE-----
Generated at Sat Nov 9 17:00:39 2024 by rpki-client on console-fra.rpki-client.org