Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/m7SkTdERvuZxD2J2z9QZWG9lJtw.roa
File: m7SkTdERvuZxD2J2z9QZWG9lJtw.roa (raw, json)
Hash identifier: czdaq3P9NOsq2/NcyvRqc4nVyGBAtlUm8o5Te+HZF80=
Subject key identifier: 9B:B4:A4:4D:D1:11:BE:E6:71:0F:62:76:CF:D4:19:58:6F:65:26:DC
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0186ACF2DBB4A7CE70F468C8B5C4EDE33234
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/m7SkTdERvuZxD2J2z9QZWG9lJtw.roa
Signing time: Sat 04 Mar 2023 14:07:22 +0000
ROA not before: Sat 04 Mar 2023 14:07:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.132.0/22 maxlen: 24
62.60.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 May 2023 07:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ac:f2:db:b4:a7:ce:70:f4:68:c8:b5:c4:ed:e3:32:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Mar 4 14:07:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bb4a44dd111bee6710f6276cfd419586f6526dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:29:07:f9:fe:e5:18:08:e8:d1:16:98:00:
25:4e:3e:f8:65:c7:d4:c5:04:47:17:2a:3b:06:2b:
41:39:7f:c4:1d:f4:a3:5a:73:c4:d5:70:a6:ab:ae:
c1:d7:96:da:55:62:98:ee:5e:f6:c2:10:d5:2a:bd:
90:d5:34:bd:e7:21:84:2d:72:26:ed:ef:48:0e:78:
69:3a:4c:02:cf:62:5d:55:81:a6:a9:75:f0:8c:a2:
df:10:74:e6:06:08:18:5b:92:5e:26:b4:6c:8b:fd:
14:8b:64:b7:a7:04:a4:4e:83:77:5d:20:7b:25:3c:
de:d1:bd:8d:95:c8:ea:7a:55:09:4d:8e:d5:12:cf:
c2:76:aa:f2:6b:ed:25:93:04:08:84:48:30:40:be:
73:78:19:4e:60:87:01:9c:36:62:ae:62:3f:d4:15:
87:2d:77:82:d6:5c:0a:3b:85:cd:1c:f2:b6:7e:7e:
49:81:57:26:15:1b:78:8c:37:58:ca:41:89:ed:7a:
ab:90:3c:97:d5:57:fc:df:57:ac:50:8a:8d:12:5f:
a6:02:26:63:33:0e:dc:d0:c2:9c:38:27:51:44:0a:
f1:08:46:53:52:8c:c1:4f:b1:69:45:85:3e:34:41:
1b:5b:7c:31:72:3f:4f:1c:3e:ea:54:b6:29:d6:af:
a6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B4:A4:4D:D1:11:BE:E6:71:0F:62:76:CF:D4:19:58:6F:65:26:DC
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/m7SkTdERvuZxD2J2z9QZWG9lJtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0/22
62.60.148.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:9b:bc:93:54:ef:f0:f9:9b:47:f2:16:6f:e6:35:6d:c1:30:
c7:79:8f:b5:80:89:35:0d:65:6c:46:33:d8:f1:23:c6:62:a4:
42:bc:29:83:27:b4:da:bb:18:90:bd:2a:51:6d:d2:e8:03:d3:
b6:6d:93:90:1f:99:7a:db:be:36:15:ec:a2:90:a2:d3:cb:5a:
99:9f:d9:27:e6:2b:6a:72:c7:f0:dc:69:bf:e7:d4:f3:5a:df:
91:a5:ac:0d:e5:dc:c3:fb:bb:c3:d6:49:7f:82:85:20:b3:26:
95:d8:81:b7:37:c5:fd:9d:45:b1:e9:92:40:a9:e6:fc:23:64:
16:88:6f:d0:1f:39:92:c4:27:96:6a:54:55:f2:e1:af:4f:e4:
a9:4b:19:b3:11:7c:dc:8b:2e:b1:18:41:2a:da:65:d8:2b:b3:
5c:d6:6a:75:12:cc:89:72:78:07:c3:1c:17:c2:d6:08:f2:5e:
be:80:5b:8d:2e:a9:67:78:ca:f1:29:1c:fe:4a:52:16:20:d8:
65:81:b8:32:a1:a6:ee:64:83:7f:66:11:43:e9:cf:39:ec:e8:
0d:cd:34:fa:9a:c0:35:61:33:e6:be:97:7c:94:9f:ac:f3:ff:
7b:b2:77:0b:8c:bd:06:33:e0:d0:cd:90:11:c7:31:50:5d:1f:
72:be:41:cd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYas8tu0p85w9GjItcTt4zI0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwMzA0MTQwNzIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmI0YTQ0ZGQxMTFiZWU2NzEwZjYyNzZjZmQ0MTk1ODZmNjUyNmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUcpB/n+5RgI6NEWmAAlTj74ZcfU
xQRHFyo7BitBOX/EHfSjWnPE1XCmq67B15baVWKY7l72whDVKr2Q1TS95yGELXIm
7e9IDnhpOkwCz2JdVYGmqXXwjKLfEHTmBggYW5JeJrRsi/0Ui2S3pwSkToN3XSB7
JTze0b2NlcjqelUJTY7VEs/Cdqrya+0lkwQIhEgwQL5zeBlOYIcBnDZirmI/1BWH
LXeC1lwKO4XNHPK2fn5JgVcmFRt4jDdYykGJ7XqrkDyX1Vf831esUIqNEl+mAiZj
Mw7c0MKcOCdRRArxCEZTUozBT7FpRYU+NEEbW3wxcj9PHD7qVLYp1q+msQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJu0pE3REb7mcQ9ids/UGVhvZSbcMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvbTdTa1RkRVJ2dVp4RDJKMno5UVpXRzlsSnR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCPjyEAwQC
PjyUMA0GCSqGSIb3DQEBCwUAA4IBAQC8m7yTVO/w+ZtH8hZv5jVtwTDHeY+1gIk1
DWVsRjPY8SPGYqRCvCmDJ7TauxiQvSpRbdLoA9O2bZOQH5l62742FeyikKLTy1qZ
n9kn5itqcsfw3Gm/59TzWt+RpawN5dzD+7vD1kl/goUgsyaV2IG3N8X9nUWx6ZJA
qeb8I2QWiG/QHzmSxCeWalRV8uGvT+SpSxmzEXzciy6xGEEq2mXYK7Nc1mp1EsyJ
cngHwxwXwtYI8l6+gFuNLqlneMrxKRz+SlIWINhlgbgyoabuZIN/ZhFD6c857OgN
zTT6msA1YTPmvpd8lJ+s8/97sncLjL0GM+DQzZARxzFQXR9yvkHN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org