Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/oiLCWxbI7C_0lkBM5KACWb2nbxE.roa
File: oiLCWxbI7C_0lkBM5KACWb2nbxE.roa (raw, json)
Hash identifier: baX3FgH3yPlBMjWJs7ia1afjaIH3Snh9fPXfyzy+/cI=
Subject key identifier: A2:22:C2:5B:16:C8:EC:2F:F4:96:40:4C:E4:A0:02:59:BD:A7:6F:11
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01893A21083C7681C4632AB2DA9848AB867B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/oiLCWxbI7C_0lkBM5KACWb2nbxE.roa
Signing time: Sun 09 Jul 2023 10:09:50 +0000
ROA not before: Sun 09 Jul 2023 10:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211421
IP address blocks: 62.60.146.0/23 maxlen: 24
213.176.120.0/23 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.180.0/22 maxlen: 24
213.176.126.0/23 maxlen: 24
62.60.188.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:21:08:3c:76:81:c4:63:2a:b2:da:98:48:ab:86:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 9 10:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a222c25b16c8ec2ff496404ce4a00259bda76f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:8a:53:8d:2a:41:4d:54:b9:7b:d3:43:d8:
a5:87:8c:54:a1:e8:64:59:9b:59:ae:d2:d8:ca:8a:
5e:25:5a:84:69:b3:c6:e1:67:37:32:b8:17:85:a6:
78:4f:80:8c:1a:54:ee:68:74:d2:73:66:37:77:19:
38:da:77:dc:33:b2:a2:c8:c9:1e:2f:2f:40:ca:4b:
18:c6:ac:33:3e:95:82:4e:6c:d8:97:6d:0e:09:e5:
f6:43:d7:b3:9b:1c:f4:e1:56:ae:ef:36:4e:82:60:
61:b7:ec:61:80:26:50:7a:d8:f2:b3:a5:b3:01:74:
8b:b5:6e:23:df:ba:ed:ce:80:d1:d3:91:e0:a4:1a:
e4:25:70:d3:31:fe:6a:e0:47:99:f9:29:36:7e:df:
d1:ad:dc:a7:a7:1b:8c:a0:69:45:e1:e5:6b:a3:dd:
e6:87:24:d6:8e:32:aa:6e:19:38:ab:32:22:9a:80:
91:fc:50:6d:3b:10:04:6e:65:93:d2:e0:14:6c:3c:
e5:fa:44:0f:b4:04:14:9b:d7:03:4f:3c:8f:16:c9:
30:0a:3f:50:3f:f8:62:dc:76:ec:dd:9d:f6:48:6b:
45:3f:20:82:c8:20:35:9e:0f:a0:68:5b:1a:2f:58:
e1:47:5b:6c:8c:0d:14:a4:8c:c4:a1:d2:53:9c:66:
4f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:22:C2:5B:16:C8:EC:2F:F4:96:40:4C:E4:A0:02:59:BD:A7:6F:11
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/oiLCWxbI7C_0lkBM5KACWb2nbxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0/23
62.60.180.0-62.60.199.255
213.176.120.0/23
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:16:69:45:7e:02:8b:e0:ac:3c:a7:f1:fa:e4:06:35:fb:3a:
43:ce:c7:9f:1a:ed:70:f8:a0:f5:16:e3:e6:b5:40:48:73:2e:
4f:5e:a5:20:2a:d6:7b:5a:f4:e3:22:b3:20:53:85:dd:3f:dd:
5f:f0:7d:f3:95:43:c3:0b:01:7e:c4:a2:a9:0a:19:5e:1e:3a:
55:50:0f:28:98:5b:ac:31:a0:14:7f:ab:2d:80:06:ea:ad:da:
45:c5:a8:20:3f:f3:0f:cf:48:f2:cb:be:14:3d:c4:30:6f:a0:
3b:d9:d2:8f:3a:f2:73:65:de:8f:de:27:62:b5:52:e1:fe:4e:
f9:80:2c:4a:b3:91:c7:d0:64:b6:44:41:01:dd:64:36:62:37:
fa:85:38:7c:84:61:d2:98:7d:b3:40:fc:18:d3:f6:d1:f4:86:
bb:46:27:e9:dd:8b:f7:8d:f4:50:c5:a3:c9:50:75:ad:ca:d0:
e4:b4:cb:c8:f9:31:82:56:25:81:ca:28:d4:eb:32:90:07:5a:
21:5b:5a:35:87:53:66:d9:a9:5e:0c:76:ba:cf:5b:93:a3:78:
8a:26:5d:b6:7c:2f:bd:dc:da:7b:8d:fd:13:f7:03:97:da:33:
71:34:4b:e1:51:77:d8:d1:19:c2:25:b2:73:2c:e0:36:6c:d8:
36:cf:69:75
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYk6IQg8doHEYyqy2phIq4Z7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwNzA5MTAwOTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjIyYzI1YjE2YzhlYzJmZjQ5NjQwNGNlNGEwMDI1OWJkYTc2ZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLqKU40qQU1UuXvTQ9ilh4xUoehk
WZtZrtLYyopeJVqEabPG4Wc3MrgXhaZ4T4CMGlTuaHTSc2Y3dxk42nfcM7KiyMke
Ly9AyksYxqwzPpWCTmzYl20OCeX2Q9ezmxz04Vau7zZOgmBht+xhgCZQetjys6Wz
AXSLtW4j37rtzoDR05HgpBrkJXDTMf5q4EeZ+Sk2ft/RrdynpxuMoGlF4eVro93m
hyTWjjKqbhk4qzIimoCR/FBtOxAEbmWT0uAUbDzl+kQPtAQUm9cDTzyPFskwCj9Q
P/hi3Hbs3Z32SGtFPyCCyCA1ng+gaFsaL1jhR1tsjA0UpIzEodJTnGZPAQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFKIiwlsWyOwv9JZATOSgAlm9p28RMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvb2lMQ1d4Ykk3Q18wbGtCTTVLQUNXYjJuYnhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBPjySMAwD
BAI+PLQDBAM+PMADBAHVsHgDBAHVsH4wDQYJKoZIhvcNAQELBQADggEBAMAWaUV+
AovgrDyn8frkBjX7OkPOx58a7XD4oPUW4+a1QEhzLk9epSAq1nta9OMisyBThd0/
3V/wffOVQ8MLAX7EoqkKGV4eOlVQDyiYW6wxoBR/qy2ABuqt2kXFqCA/8w/PSPLL
vhQ9xDBvoDvZ0o868nNl3o/eJ2K1UuH+TvmALEqzkcfQZLZEQQHdZDZiN/qFOHyE
YdKYfbNA/BjT9tH0hrtGJ+ndi/eN9FDFo8lQda3K0OS0y8j5MYJWJYHKKNTrMpAH
WiFbWjWHU2bZqV4MdrrPW5OjeIomXbZ8L73c2nuN/RP3A5faM3E0S+FRd9jRGcIl
snMs4DZs2DbPaXU=
-----END CERTIFICATE-----
Generated at Thu Aug 3 07:42:12 2023 by rpki-client on console-fra.rpki-client.org