Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/kiSQ1fdNMVa1Z3K8Rj-cZ6M37d0.roa
File: kiSQ1fdNMVa1Z3K8Rj-cZ6M37d0.roa (raw, json)
Hash identifier: 8kUQ5Fy75TunBRtfFDiUzKubuu0Shsh1Oq+fKN3RR2s=
Subject key identifier: 92:24:90:D5:F7:4D:31:56:B5:67:72:BC:46:3F:9C:67:A3:37:ED:DD
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01925221F09A4DFA50E753DD441D3F14BEAD
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/kiSQ1fdNMVa1Z3K8Rj-cZ6M37d0.roa
Signing time: Thu 03 Oct 2024 11:26:48 +0000
ROA not before: Thu 03 Oct 2024 11:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208388
IP address blocks: 62.60.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 05:14:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:21:f0:9a:4d:fa:50:e7:53:dd:44:1d:3f:14:be:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 3 11:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=922490d5f74d3156b56772bc463f9c67a337eddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:ac:0e:d6:38:b2:11:40:fe:b7:87:3f:72:
56:8b:8b:2b:9d:80:61:7b:e5:60:76:eb:8a:e6:71:
ee:44:21:20:c3:97:b2:c1:dd:61:16:3b:d4:20:99:
dd:e6:e0:e1:d4:cc:d7:a3:52:94:a9:8c:78:1e:1a:
4c:69:88:58:70:58:17:74:26:36:56:d1:d6:6a:23:
57:34:f7:36:85:c3:ae:d6:1e:51:f4:ea:b3:a7:d7:
f9:3d:29:47:a1:58:fb:f3:2e:7b:80:d6:31:a0:82:
5f:0c:61:e4:74:bb:f9:c0:dc:40:3a:65:cc:be:c8:
5d:11:64:29:d6:ca:ad:a0:a5:3f:cb:bc:a0:5e:a0:
6c:c1:0e:e9:2c:b9:7e:f3:6c:53:40:f5:47:e3:b4:
c3:fb:bf:e4:95:78:de:a3:5f:8e:20:b7:94:39:c5:
ab:df:17:1d:e6:2a:ab:d2:1c:de:03:6e:9d:ad:3b:
4f:a7:ff:5a:55:9b:14:40:ed:3d:d0:f3:dd:eb:08:
28:d5:b2:e5:1b:7b:9e:4a:e0:5a:dd:cc:6d:4d:16:
e2:15:8d:cc:83:74:0b:41:c3:4b:2c:f4:d6:3b:25:
57:b6:19:b6:31:8b:24:10:29:76:6f:34:d2:3b:85:
7f:d6:9f:c6:c8:63:37:56:e2:67:fa:86:b5:94:fc:
5e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:24:90:D5:F7:4D:31:56:B5:67:72:BC:46:3F:9C:67:A3:37:ED:DD
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/kiSQ1fdNMVa1Z3K8Rj-cZ6M37d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:7d:9e:30:47:33:1a:d0:ad:42:2f:11:07:ad:2d:dc:71:d5:
95:6e:f8:e7:64:06:85:bf:d7:3e:8c:87:ce:6a:62:b6:d3:8f:
7f:c5:5b:e7:08:f3:fc:46:06:74:93:a1:1a:2b:26:24:11:3f:
ba:6d:66:79:e7:b4:1c:1e:6a:2d:e0:7f:5f:93:18:e7:ad:22:
38:10:d1:3e:1c:a7:46:d9:b9:51:92:a3:9a:ec:95:81:b7:aa:
22:c1:8b:57:38:bc:7c:0e:06:c3:8f:97:15:b1:d9:41:fc:58:
d4:0c:a2:2f:56:26:02:7e:09:94:96:76:ff:4c:5e:2f:9e:4a:
a3:36:07:ee:7c:60:e1:ae:21:e5:de:e3:78:6b:c5:83:a1:d0:
4c:23:0a:84:29:ea:9b:ac:ad:45:79:64:9a:0c:c1:a2:eb:e1:
eb:05:6d:db:f8:38:55:67:54:37:aa:75:b6:bc:d2:b7:1b:67:
e4:51:93:b6:0d:1c:04:16:2f:65:04:83:f9:87:1e:4d:df:1f:
b0:7b:4e:64:1e:a4:72:89:0b:c9:8f:f8:ae:c5:4c:e6:b2:ea:
e9:55:1e:4f:e5:ce:2a:37:dc:e0:67:7e:a9:8d:76:15:f3:f7:
dc:8a:72:80:fd:62:49:61:b0:f7:03:bc:99:f1:ac:04:b7:b5:
24:c1:11:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJSIfCaTfpQ51PdRB0/FL6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQxMDAzMTEyNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjI0OTBkNWY3NGQzMTU2YjU2NzcyYmM0NjNmOWM2N2EzMzdlZGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkmsDtY4shFA/reHP3JWi4srnYBh
e+VgduuK5nHuRCEgw5eywd1hFjvUIJnd5uDh1MzXo1KUqYx4HhpMaYhYcFgXdCY2
VtHWaiNXNPc2hcOu1h5R9Oqzp9f5PSlHoVj78y57gNYxoIJfDGHkdLv5wNxAOmXM
vshdEWQp1sqtoKU/y7ygXqBswQ7pLLl+82xTQPVH47TD+7/klXjeo1+OILeUOcWr
3xcd5iqr0hzeA26drTtPp/9aVZsUQO090PPd6wgo1bLlG3ueSuBa3cxtTRbiFY3M
g3QLQcNLLPTWOyVXthm2MYskECl2bzTSO4V/1p/GyGM3VuJn+oa1lPxeiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJIkkNX3TTFWtWdyvEY/nGejN+3dMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEva2lTUTFmZE5NVmExWjNLOFJqLWNaNk0zN2QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPjyUMA0G
CSqGSIb3DQEBCwUAA4IBAQBLfZ4wRzMa0K1CLxEHrS3ccdWVbvjnZAaFv9c+jIfO
amK2049/xVvnCPP8RgZ0k6EaKyYkET+6bWZ557QcHmot4H9fkxjnrSI4ENE+HKdG
2blRkqOa7JWBt6oiwYtXOLx8DgbDj5cVsdlB/FjUDKIvViYCfgmUlnb/TF4vnkqj
NgfufGDhriHl3uN4a8WDodBMIwqEKeqbrK1FeWSaDMGi6+HrBW3b+DhVZ1Q3qnW2
vNK3G2fkUZO2DRwEFi9lBIP5hx5N3x+we05kHqRyiQvJj/iuxUzmsurpVR5P5c4q
N9zgZ36pjXYV8/fcinKA/WJJYbD3A7yZ8awEt7UkwRFz
-----END CERTIFICATE-----
Generated at Sat Oct 5 08:16:16 2024 by rpki-client on console-fra.rpki-client.org