Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wvljhPkdKn8iGAyEBzXU_s3pc_8.roa
File: wvljhPkdKn8iGAyEBzXU_s3pc_8.roa (raw, json)
Hash identifier: iar5rvoxpBac4cA4EdVrI/CHiIwaqdIOQ2K84KZ596w=
Subject key identifier: C2:F9:63:84:F9:1D:2A:7F:22:18:0C:84:07:35:D4:FE:CD:E9:73:FF
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018DD7193040BF11164140E907889C732E60
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wvljhPkdKn8iGAyEBzXU_s3pc_8.roa
Signing time: Fri 23 Feb 2024 17:52:48 +0000
ROA not before: Fri 23 Feb 2024 17:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 62.60.216.0/22 maxlen: 24
62.60.224.0/19 maxlen: 24
213.176.64.0/22 maxlen: 24
213.176.120.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 12:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d7:19:30:40:bf:11:16:41:40:e9:07:88:9c:73:2e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 23 17:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2f96384f91d2a7f22180c840735d4fecde973ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:b9:16:e0:8f:ad:ed:fb:d2:cf:cf:b6:07:
96:a5:69:a0:8a:74:55:e5:36:90:4b:6e:ae:d0:fd:
c7:bb:a0:c0:5b:0a:cb:c1:2f:ca:12:e7:ea:da:71:
24:62:c2:94:f8:c8:e8:84:c4:dc:cc:54:da:d2:f9:
f4:04:25:6e:89:e7:57:f5:a2:1e:e1:35:e3:40:ab:
0b:bf:16:7b:d8:a3:f2:e2:c7:68:de:26:c9:29:f0:
43:7c:28:5e:d0:92:6d:19:6e:36:05:18:07:18:95:
ef:85:fb:8c:5c:df:1a:62:e1:19:6b:c4:6d:cb:ee:
bf:01:77:56:e8:7e:ae:44:c0:07:15:27:2c:fd:ed:
f3:d3:d3:e5:ec:f8:fa:16:8a:24:4d:6c:19:ff:53:
98:8f:cb:63:93:a8:e4:1e:99:ff:ac:a1:da:9b:a9:
b9:c0:6f:e4:86:2b:f1:cc:d8:39:b1:dc:3e:c0:1b:
1d:a1:ed:37:b6:15:37:15:87:e9:98:55:91:63:ff:
35:85:78:88:1c:a2:04:d3:b5:27:b3:dd:95:df:9e:
0c:c7:e2:fe:4c:63:40:3b:9f:f9:4d:11:33:91:52:
4f:db:88:11:26:86:0d:0c:27:a2:1f:d6:fb:37:1e:
64:fe:85:f0:69:f5:85:01:e4:b3:e8:1f:ad:1a:53:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F9:63:84:F9:1D:2A:7F:22:18:0C:84:07:35:D4:FE:CD:E9:73:FF
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wvljhPkdKn8iGAyEBzXU_s3pc_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.216.0/22
62.60.224.0/19
213.176.64.0/22
213.176.120.0/23
Signature Algorithm: sha256WithRSAEncryption
77:3b:fe:eb:9b:5d:0c:1f:98:99:71:64:c6:b9:c5:18:31:b5:
7a:d1:c4:65:a8:a7:93:00:77:6b:f0:22:6e:e3:4a:d5:c5:5f:
aa:1e:27:5d:0e:57:40:28:c5:ce:d5:f0:d6:ac:2e:7c:21:d1:
87:52:78:56:bd:4f:46:43:7f:85:64:bb:7f:5a:73:a4:c0:e2:
3e:be:f7:cc:07:29:30:61:59:ed:1c:38:72:ad:ec:dd:96:b5:
d1:3e:26:a1:a1:20:07:4a:f6:63:ea:e1:2a:cf:db:01:03:48:
88:86:64:20:f9:9a:b7:72:82:c7:93:d9:ef:a1:ff:d5:c2:ce:
28:7d:8b:c6:23:91:d7:fb:a1:54:4c:26:b8:51:4f:fe:a5:0f:
a0:38:f3:04:76:f3:d1:3e:ea:bd:12:cf:3c:e5:f7:92:6c:87:
37:40:2b:1a:10:de:05:3c:a9:23:db:bf:21:63:75:bf:8f:35:
84:e6:60:67:f7:65:06:e3:19:b2:1d:83:2b:6d:18:ae:30:81:
4e:d9:7a:98:6c:c3:39:a6:82:d5:12:04:7f:9f:c9:5c:91:99:
85:94:54:1f:ec:5d:5b:b7:54:bf:c7:55:3d:c3:40:c7:75:59:
9b:ea:02:9f:2d:3b:de:1f:9a:6a:af:1b:a2:fa:d6:ec:cb:74:
64:b1:e1:83
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY3XGTBAvxEWQUDpB4iccy5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwMjIzMTc1MjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmY5NjM4NGY5MWQyYTdmMjIxODBjODQwNzM1ZDRmZWNkZTk3M2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmze5FuCPre370s/PtgeWpWmginRV
5TaQS26u0P3Hu6DAWwrLwS/KEufq2nEkYsKU+MjohMTczFTa0vn0BCVuiedX9aIe
4TXjQKsLvxZ72KPy4sdo3ibJKfBDfChe0JJtGW42BRgHGJXvhfuMXN8aYuEZa8Rt
y+6/AXdW6H6uRMAHFScs/e3z09Pl7Pj6FookTWwZ/1OYj8tjk6jkHpn/rKHam6m5
wG/khivxzNg5sdw+wBsdoe03thU3FYfpmFWRY/81hXiIHKIE07Uns92V354Mx+L+
TGNAO5/5TREzkVJP24gRJoYNDCeiH9b7Nx5k/oXwafWFAeSz6B+tGlN2BwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFML5Y4T5HSp/IhgMhAc11P7N6XP/MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvd3ZsamhQa2RLbjhpR0F5RUJ6WFVfczNwY184LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCPjzYAwQF
PjzgAwQC1bBAAwQB1bB4MA0GCSqGSIb3DQEBCwUAA4IBAQB3O/7rm10MH5iZcWTG
ucUYMbV60cRlqKeTAHdr8CJu40rVxV+qHiddDldAKMXO1fDWrC58IdGHUnhWvU9G
Q3+FZLt/WnOkwOI+vvfMBykwYVntHDhyrezdlrXRPiahoSAHSvZj6uEqz9sBA0iI
hmQg+Zq3coLHk9nvof/Vws4ofYvGI5HX+6FUTCa4UU/+pQ+gOPMEdvPRPuq9Es88
5feSbIc3QCsaEN4FPKkj278hY3W/jzWE5mBn92UG4xmyHYMrbRiuMIFO2XqYbMM5
poLVEgR/n8lckZmFlFQf7F1bt1S/x1U9w0DHdVmb6gKfLTveH5pqrxui+tbsy3Rk
seGD
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org