Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/g9d7m_WiV2sYDuFLRv-3UXeyS5c.roa
File: g9d7m_WiV2sYDuFLRv-3UXeyS5c.roa (raw, json)
Hash identifier: vr1BDV+jYh5+X3B2WIJ1sdhGjysiOje3TcbmVW0AJOg=
Subject key identifier: 83:D7:7B:9B:F5:A2:57:6B:18:0E:E1:4B:46:FF:B7:51:77:B2:4B:97
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01893A1F34BF3D3F9DB823B9B3A25152193C
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/g9d7m_WiV2sYDuFLRv-3UXeyS5c.roa
Signing time: Sun 09 Jul 2023 10:07:50 +0000
ROA not before: Sun 09 Jul 2023 10:07:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15611
IP address blocks: 213.176.96.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.141.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.152.0/22 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Aug 2023 03:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:1f:34:bf:3d:3f:9d:b8:23:b9:b3:a2:51:52:19:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 9 10:07:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83d77b9bf5a2576b180ee14b46ffb75177b24b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:e2:1e:23:e6:b4:19:10:a3:eb:dd:39:34:
62:00:f5:f4:e1:2d:8d:e2:3e:1e:d4:9d:45:32:f4:
a7:ef:8c:9d:54:65:fb:df:8c:97:65:cc:ca:2e:e0:
7f:7f:50:d9:d4:c1:47:0e:65:ee:c9:d7:74:49:64:
84:c6:a8:b9:ca:cf:33:50:0f:a9:11:83:34:c5:b5:
ca:25:b0:00:da:09:c2:45:8f:cd:6f:6d:c0:19:c8:
d7:d6:b1:72:64:1e:81:5e:4f:f6:bc:f2:bf:a1:e3:
56:3d:7a:e1:58:a1:fa:16:bc:cd:3f:62:1e:64:40:
6f:4a:12:d1:9f:fb:fb:cc:a4:1e:53:a6:5e:9e:0a:
60:08:38:c5:09:6c:82:97:72:60:12:59:0a:9c:8a:
2c:6b:d6:47:d0:3b:97:d5:d1:68:d0:c3:ec:3c:d0:
10:b7:a6:d3:8f:91:f9:81:0d:b0:b8:7b:1a:80:f7:
4d:bc:ac:c8:7a:53:73:72:0b:1d:12:76:9e:ec:ee:
fd:8c:9c:85:87:0a:48:8d:c4:6d:1a:cb:06:96:a2:
6b:0d:1b:8c:7c:3c:b9:ec:92:c4:44:1b:15:67:ca:
45:b8:84:96:4e:92:4b:af:9f:bb:a2:a7:3e:53:04:
fa:6c:d7:ac:aa:e4:8d:89:10:45:0e:70:55:e3:b4:
c7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D7:7B:9B:F5:A2:57:6B:18:0E:E1:4B:46:FF:B7:51:77:B2:4B:97
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/g9d7m_WiV2sYDuFLRv-3UXeyS5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.142.255
62.60.145.0/24
62.60.152.0/22
62.60.168.0/21
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
Signature Algorithm: sha256WithRSAEncryption
27:1a:93:3c:d4:83:0b:38:d9:b2:f6:49:16:f5:fd:02:41:da:
06:b6:b7:cb:78:5e:74:9a:60:4f:b6:01:6a:03:11:cc:f4:3d:
ec:ae:55:ca:63:53:93:c8:b7:3b:76:14:56:48:9a:85:34:44:
8e:76:3e:00:15:b8:63:3d:80:47:b8:13:d7:05:73:96:ba:aa:
f4:48:43:ed:31:9d:e3:7b:3d:ea:33:0d:40:c6:3d:c1:5e:96:
37:8b:90:04:72:f2:96:ca:4f:34:05:60:b7:e0:05:75:f6:d1:
37:d0:b9:33:cb:73:e6:a3:21:10:d0:e5:eb:d9:50:10:96:58:
20:67:3e:cd:10:87:2c:8e:0d:eb:e2:df:da:2f:e4:7d:01:42:
13:fe:76:af:0e:4c:2e:26:b3:6a:20:44:d3:c5:4e:81:7c:a1:
dd:45:62:50:2d:7a:3f:8f:b7:04:be:3e:c7:e5:17:e6:67:2b:
d6:5f:6b:5a:4a:f5:fd:3a:bf:ba:a5:ed:34:96:7b:95:87:77:
35:d4:e0:f9:39:6b:3f:75:b6:10:2b:38:d2:8e:a0:8b:d2:9f:
f3:b4:f6:8f:2d:f6:c0:bc:c8:38:e0:30:19:c4:b8:d7:a7:ab:
6a:a7:0e:d2:09:07:a7:36:5a:9e:33:81:a7:6d:5a:58:d4:bb:
1b:e1:b7:9e
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAYk6HzS/PT+duCO5s6JRUhk8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwNzA5MTAwNzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2Q3N2I5YmY1YTI1NzZiMTgwZWUxNGI0NmZmYjc1MTc3YjI0Yjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqfiHiPmtBkQo+vdOTRiAPX04S2N
4j4e1J1FMvSn74ydVGX734yXZczKLuB/f1DZ1MFHDmXuydd0SWSExqi5ys8zUA+p
EYM0xbXKJbAA2gnCRY/Nb23AGcjX1rFyZB6BXk/2vPK/oeNWPXrhWKH6FrzNP2Ie
ZEBvShLRn/v7zKQeU6ZengpgCDjFCWyCl3JgElkKnIosa9ZH0DuX1dFo0MPsPNAQ
t6bTj5H5gQ2wuHsagPdNvKzIelNzcgsdEnae7O79jJyFhwpIjcRtGssGlqJrDRuM
fDy57JLERBsVZ8pFuISWTpJLr5+7oqc+UwT6bNesquSNiRBFDnBV47TH4QIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFIPXe5v1oldrGA7hS0b/t1F3skuXMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvZzlkN21fV2lWMnNZRHVGTFJ2LTNVWGV5UzVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIMAwDBAI+PIQD
BAE+PIgwDAMEAD48iwMEAD48jgMEAD48kQMEAj48mAMEAz48qAMEAdWwBAMEANWw
YDAMAwQB1bB6AwQB1bB8MA0GCSqGSIb3DQEBCwUAA4IBAQAnGpM81IMLONmy9kkW
9f0CQdoGtrfLeF50mmBPtgFqAxHM9D3srlXKY1OTyLc7dhRWSJqFNESOdj4AFbhj
PYBHuBPXBXOWuqr0SEPtMZ3jez3qMw1Axj3BXpY3i5AEcvKWyk80BWC34AV19tE3
0Lkzy3PmoyEQ0OXr2VAQllggZz7NEIcsjg3r4t/aL+R9AUIT/navDkwuJrNqIETT
xU6BfKHdRWJQLXo/j7cEvj7H5RfmZyvWX2taSvX9Or+6pe00lnuVh3c11OD5OWs/
dbYQKzjSjqCL0p/ztPaPLfbAvMg44DAZxLjXp6tqpw7SCQenNlqeM4GnbVpY1Lsb
4bee
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org