Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/vUZsBFnFnzMxZaszTdR6m3sY3lQ.roa
File: vUZsBFnFnzMxZaszTdR6m3sY3lQ.roa (raw, json)
Hash identifier: MnWtkblKxB4MAwlIwx5lf5vJbUVgJLWzq7xOqBBhJgs=
Subject key identifier: BD:46:6C:04:59:C5:9F:33:31:65:AB:33:4D:D4:7A:9B:7B:18:DE:54
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018FD289F633746BB4537A3CB1F54963F002
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/vUZsBFnFnzMxZaszTdR6m3sY3lQ.roa
Signing time: Sat 01 Jun 2024 06:43:27 +0000
ROA not before: Sat 01 Jun 2024 06:43:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44559
IP address blocks: 62.60.156.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jun 2024 06:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d2:89:f6:33:74:6b:b4:53:7a:3c:b1:f5:49:63:f0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 1 06:43:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd466c0459c59f333165ab334dd47a9b7b18de54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:a4:66:6f:9f:44:18:79:6f:0d:a4:2d:d5:
b7:4d:6f:4b:8e:b9:8d:5f:86:41:41:c1:10:38:a2:
f8:e6:98:26:d7:cb:63:29:4c:92:09:04:da:f6:df:
c6:ec:e6:33:6b:44:92:b7:2d:c6:8b:97:97:f0:1a:
cb:74:36:f6:88:b4:90:fc:10:bb:d5:75:82:20:51:
fd:20:10:cf:77:6d:b5:46:19:2e:ec:37:43:19:62:
24:c0:fb:3d:50:3b:6f:3b:c5:76:94:ff:e4:5b:23:
84:49:29:ae:27:ea:b1:4e:87:09:ec:2e:92:5c:12:
c4:2a:ba:d3:3e:d0:86:68:0f:a6:e0:e4:37:57:80:
bd:bd:5b:e1:fb:6a:30:5b:09:5c:c5:e2:fc:07:7e:
f1:6b:84:55:ec:c2:59:51:7b:c9:9d:2e:50:1a:8d:
6b:d4:94:67:28:05:c6:fa:ce:fb:66:da:94:0a:0c:
49:da:8a:9b:74:1b:67:0f:5f:2e:75:9f:b1:21:4c:
ad:f2:03:5e:f6:c8:8a:e5:85:d6:9d:51:35:83:67:
b6:59:82:28:be:26:a8:f4:d6:f4:62:5a:1e:06:eb:
fa:d5:6c:ba:45:46:a6:c3:a3:33:c4:40:06:f8:e9:
d3:a2:f3:ad:3c:21:27:73:a0:d1:64:16:2f:66:3f:
29:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:46:6C:04:59:C5:9F:33:31:65:AB:33:4D:D4:7A:9B:7B:18:DE:54
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/vUZsBFnFnzMxZaszTdR6m3sY3lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.156.0/22
62.60.184.0/22
Signature Algorithm: sha256WithRSAEncryption
04:95:38:d3:79:e2:be:78:c9:be:9d:a8:bb:1a:b8:ac:19:59:
89:27:4c:b8:a7:84:99:04:17:d1:80:7e:a8:d0:2c:24:3c:4b:
86:ce:cf:6e:bd:a5:41:36:ff:22:de:51:7b:c8:9f:d2:f6:75:
67:59:e3:f4:0e:d0:78:2f:52:f8:72:49:16:ab:6e:64:3e:5f:
76:35:dc:af:b1:be:02:92:89:b3:5e:c9:54:81:cc:d9:2e:50:
4c:13:2b:5b:f0:44:0b:ac:67:bc:92:69:bf:c0:4b:65:ab:9d:
66:9f:37:1c:f5:bc:7f:01:3f:c3:17:30:bc:1f:21:9e:2b:1e:
47:59:eb:42:86:d8:9a:c8:82:42:de:84:63:74:f8:f8:93:57:
fb:e6:59:02:f2:67:d4:c9:42:8e:6f:1b:1a:4f:aa:e8:fb:d5:
df:3c:ed:98:ae:a3:99:4f:ef:49:6b:52:04:b9:d8:ef:a4:0b:
74:d5:56:0e:85:62:60:d6:9d:59:a2:7d:73:99:6d:80:28:de:
24:56:dd:4a:02:41:36:0b:fd:cd:64:43:08:1a:7b:d3:86:65:
17:3c:6a:27:d5:24:75:5b:1d:8f:c7:a6:ae:ce:cf:15:fa:2e:
48:d0:c0:2f:53:53:62:aa:dd:10:21:99:ca:5f:71:68:df:70:
87:a6:06:11
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY/SifYzdGu0U3o8sfVJY/ACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwNjAxMDY0MzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDQ2NmMwNDU5YzU5ZjMzMzE2NWFiMzM0ZGQ0N2E5YjdiMThkZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriOkZm+fRBh5bw2kLdW3TW9LjrmN
X4ZBQcEQOKL45pgm18tjKUySCQTa9t/G7OYza0SSty3Gi5eX8BrLdDb2iLSQ/BC7
1XWCIFH9IBDPd221Rhku7DdDGWIkwPs9UDtvO8V2lP/kWyOESSmuJ+qxTocJ7C6S
XBLEKrrTPtCGaA+m4OQ3V4C9vVvh+2owWwlcxeL8B37xa4RV7MJZUXvJnS5QGo1r
1JRnKAXG+s77ZtqUCgxJ2oqbdBtnD18udZ+xIUyt8gNe9siK5YXWnVE1g2e2WYIo
viao9Nb0YloeBuv61Wy6RUamw6MzxEAG+OnTovOtPCEnc6DRZBYvZj8pdwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL1GbARZxZ8zMWWrM03Uept7GN5UMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvdlVac0JGbkZuek14WmFzelRkUjZtM3NZM2xRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCPjycAwQC
Pjy4MA0GCSqGSIb3DQEBCwUAA4IBAQAElTjTeeK+eMm+nai7GrisGVmJJ0y4p4SZ
BBfRgH6o0CwkPEuGzs9uvaVBNv8i3lF7yJ/S9nVnWeP0DtB4L1L4ckkWq25kPl92
Ndyvsb4CkomzXslUgczZLlBMEytb8EQLrGe8kmm/wEtlq51mnzcc9bx/AT/DFzC8
HyGeKx5HWetChtiayIJC3oRjdPj4k1f75lkC8mfUyUKObxsaT6ro+9XfPO2YrqOZ
T+9Ja1IEudjvpAt01VYOhWJg1p1Zon1zmW2AKN4kVt1KAkE2C/3NZEMIGnvThmUX
PGon1SR1Wx2Px6auzs8V+i5I0MAvU1Niqt0QIZnKX3Fo33CHpgYR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org