Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ifLT-qWSC7cUaxWQWJ5b-SNn1fI.roa
File: ifLT-qWSC7cUaxWQWJ5b-SNn1fI.roa (raw, json)
Hash identifier: AIbOyXeVKobbPxdV8asSPhvTKVeUcjc00VNcsh7NmcI=
Subject key identifier: 89:F2:D3:FA:A5:92:0B:B7:14:6B:15:90:58:9E:5B:F9:23:67:D5:F2
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018AFE25648670F976B3F45359FA65FCA9CA
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ifLT-qWSC7cUaxWQWJ5b-SNn1fI.roa
Signing time: Thu 05 Oct 2023 04:42:57 +0000
ROA not before: Thu 05 Oct 2023 04:42:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 62.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Dec 2023 08:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:25:64:86:70:f9:76:b3:f4:53:59:fa:65:fc:a9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 5 04:42:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89f2d3faa5920bb7146b1590589e5bf92367d5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:2e:02:9b:22:30:be:e0:7f:6e:17:64:fd:
d7:30:93:b0:f8:43:bf:81:d1:eb:73:66:22:7f:d7:
d4:12:f6:92:6d:f3:60:48:a9:7c:fd:a3:b2:6d:95:
17:64:bb:8c:dc:25:d2:77:8e:29:51:e2:c3:cc:fa:
ea:5e:e8:93:d5:40:45:9a:e0:a9:52:eb:fe:e3:6d:
a1:81:2e:e3:a1:81:bc:c3:21:96:04:05:4f:26:a6:
12:ce:c4:af:c8:fb:15:65:b8:7f:44:32:3a:56:68:
ec:c3:bc:cc:5c:2b:15:ba:af:80:94:cc:08:d9:a4:
84:e6:0e:13:85:7c:e0:86:ae:f3:ff:14:6c:44:35:
f2:26:5f:82:73:cc:db:fa:da:ea:ae:f6:04:23:1c:
1e:12:e0:8e:c8:a3:4b:19:b5:cb:a1:0d:a7:a3:f4:
11:38:eb:08:5d:b8:b1:57:6c:5b:61:da:ce:8d:54:
38:ee:07:12:86:8f:28:4c:bc:90:cb:c2:18:e5:31:
e3:1e:61:7c:1d:0f:a6:e6:15:27:07:30:43:75:de:
f9:ae:93:d9:82:31:56:21:92:99:e6:08:e1:40:34:
b7:49:77:b8:6e:63:15:f8:a4:02:88:ca:f3:c7:ca:
ab:37:db:c4:75:87:29:7e:00:02:6b:a8:b5:dc:77:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F2:D3:FA:A5:92:0B:B7:14:6B:15:90:58:9E:5B:F9:23:67:D5:F2
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ifLT-qWSC7cUaxWQWJ5b-SNn1fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.192.0/22
Signature Algorithm: sha256WithRSAEncryption
90:51:9f:75:17:ba:15:fc:34:46:71:cd:82:76:f5:29:73:c4:
db:05:df:1a:99:59:84:de:31:99:01:9f:1d:59:57:b1:e7:ae:
f8:2b:0a:80:fb:b7:ea:5a:23:ea:3d:d8:0a:05:66:7e:6f:7f:
75:cd:36:e7:41:1d:76:f9:bd:96:d1:1b:a3:63:c7:5e:d7:b6:
e1:a6:78:80:10:78:1f:da:ad:5c:a4:e4:5e:f6:e3:03:78:32:
19:f5:71:37:7a:79:c1:e8:12:d6:e2:fa:c2:13:8e:24:6e:8d:
74:c9:74:a5:90:c7:b6:6e:f4:62:e1:08:49:f5:71:7e:2b:12:
d1:4a:ea:76:a1:44:f4:29:28:53:fb:0a:f3:31:a4:fd:81:9b:
2e:ad:8b:a8:a3:4b:82:45:32:71:20:f5:48:eb:b6:e6:66:d3:
f5:eb:c0:69:fc:1d:83:4b:49:6b:3d:45:83:a5:84:4d:b0:80:
42:46:90:d9:70:99:3c:9d:f5:eb:df:77:12:c1:32:ef:64:df:
6a:be:fd:16:24:86:18:c7:e5:a5:62:bf:eb:26:6c:31:c2:17:
96:5f:0c:2c:37:aa:47:83:ae:78:be:4a:4e:85:26:51:3f:9f:
62:19:54:9d:f2:c7:b5:ce:45:59:76:1b:6f:67:3f:41:67:1a:
ed:55:54:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYr+JWSGcPl2s/RTWfpl/KnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMxMDA1MDQ0MjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWYyZDNmYWE1OTIwYmI3MTQ2YjE1OTA1ODllNWJmOTIzNjdkNWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM0uApsiML7gf24XZP3XMJOw+EO/
gdHrc2Yif9fUEvaSbfNgSKl8/aOybZUXZLuM3CXSd44pUeLDzPrqXuiT1UBFmuCp
Uuv+422hgS7joYG8wyGWBAVPJqYSzsSvyPsVZbh/RDI6Vmjsw7zMXCsVuq+AlMwI
2aSE5g4ThXzghq7z/xRsRDXyJl+Cc8zb+trqrvYEIxweEuCOyKNLGbXLoQ2no/QR
OOsIXbixV2xbYdrOjVQ47gcSho8oTLyQy8IY5THjHmF8HQ+m5hUnBzBDdd75rpPZ
gjFWIZKZ5gjhQDS3SXe4bmMV+KQCiMrzx8qrN9vEdYcpfgACa6i13HdyEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIny0/qlkgu3FGsVkFieW/kjZ9XyMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvaWZMVC1xV1NDN2NVYXhXUVdKNWItU05uMWZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPjzAMA0G
CSqGSIb3DQEBCwUAA4IBAQCQUZ91F7oV/DRGcc2CdvUpc8TbBd8amVmE3jGZAZ8d
WVex5674KwqA+7fqWiPqPdgKBWZ+b391zTbnQR12+b2W0RujY8de17bhpniAEHgf
2q1cpORe9uMDeDIZ9XE3ennB6BLW4vrCE44kbo10yXSlkMe2bvRi4QhJ9XF+KxLR
Sup2oUT0KShT+wrzMaT9gZsurYuoo0uCRTJxIPVI67bmZtP168Bp/B2DS0lrPUWD
pYRNsIBCRpDZcJk8nfXr33cSwTLvZN9qvv0WJIYYx+WlYr/rJmwxwheWXwwsN6pH
g654vkpOhSZRP59iGVSd8se1zkVZdhtvZz9BZxrtVVR9
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org