Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/xPdKQ6IGcrg5d38aalwJkCa8S2U.roa
File: xPdKQ6IGcrg5d38aalwJkCa8S2U.roa (raw, json)
Hash identifier: 7Ary1dlT9iFEx4wRDyS6wE4O88KJ4xBCRb5xVqrJqLM=
Subject key identifier: C4:F7:4A:43:A2:06:72:B8:39:77:7F:1A:6A:5C:09:90:26:BC:4B:65
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CE6EA606B33B246A01046924B16BBCDE0
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/xPdKQ6IGcrg5d38aalwJkCa8S2U.roa
Signing time: Mon 08 Jan 2024 02:32:48 +0000
ROA not before: Mon 08 Jan 2024 02:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46562
IP address blocks: 62.60.148.0/22 maxlen: 24
62.60.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e6:ea:60:6b:33:b2:46:a0:10:46:92:4b:16:bb:cd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 8 02:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4f74a43a20672b839777f1a6a5c099026bc4b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:8c:e6:24:1f:3a:74:6a:ec:f9:c4:50:68:
2c:01:e3:3e:de:c3:f7:71:de:57:0b:ac:6d:56:bb:
f3:d0:f9:0f:08:70:f3:b9:95:ed:e2:3c:bf:52:46:
41:f1:79:d2:ed:38:a0:8b:65:2d:23:72:14:f0:37:
16:2c:0c:93:5b:0f:0f:c7:e3:93:1a:3d:c1:55:82:
77:af:f5:b5:53:53:8b:11:e4:dd:c5:4a:05:b6:13:
16:07:f5:8c:a5:9c:fe:5b:a1:ea:f5:40:4e:12:9c:
96:76:6e:46:8b:ea:38:0b:49:64:ef:f8:b5:37:be:
02:72:a2:c8:ec:6f:c6:26:1b:3a:c1:ed:12:b6:7d:
27:a1:51:69:fc:9a:a6:5d:51:55:80:67:c7:b6:7a:
f1:94:97:c3:52:5e:ef:d3:50:34:c8:7d:4e:ef:8e:
f1:d2:aa:e6:65:7f:b8:72:1c:f3:03:89:47:fd:53:
ef:de:ae:96:69:23:e5:2e:a7:c7:fa:42:37:cd:02:
a4:bf:35:f3:c1:bb:73:85:9d:df:f1:4a:8e:40:da:
74:10:33:ad:e9:b9:bc:e3:a6:5b:5a:37:c2:6b:cd:
e4:1c:ad:40:8e:e2:ae:9a:3a:0c:8a:49:f3:87:e1:
a0:23:14:17:e5:db:f9:9a:bf:2b:5f:4f:65:b5:59:
7d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F7:4A:43:A2:06:72:B8:39:77:7F:1A:6A:5C:09:90:26:BC:4B:65
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/xPdKQ6IGcrg5d38aalwJkCa8S2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0/22
62.60.188.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:f8:16:e4:51:23:59:b7:43:4f:a2:b9:bb:4d:00:c0:24:65:
97:a2:96:2f:44:77:6a:99:67:8c:6b:fd:31:9d:7b:29:c6:fb:
8b:35:be:77:b2:93:6b:22:1a:e0:68:81:32:9e:87:50:aa:23:
68:7b:17:86:a3:80:dc:18:74:ba:2d:4d:96:c5:0d:b5:3f:70:
1d:cb:4b:2c:d3:b9:b3:90:b6:4b:40:e0:22:15:0b:01:b9:1c:
b3:70:e7:b4:dc:81:dc:4b:27:18:51:00:6d:81:ae:e4:62:26:
ed:da:af:de:c8:da:c2:08:ab:27:5e:ad:68:34:98:e8:8d:50:
1e:09:bc:93:2d:ce:64:ff:56:66:60:1d:70:6e:71:45:90:99:
1c:db:46:63:22:81:3f:49:04:2a:74:e7:58:7e:1d:f2:89:2d:
21:0a:68:6e:44:2e:50:f0:9e:aa:07:d5:ac:8b:5c:42:cb:6b:
e6:2d:da:29:02:24:25:d0:4b:bc:82:fe:23:48:51:9b:fa:20:
85:d6:98:85:d2:c1:96:37:54:28:a1:4a:68:10:4e:7e:c6:55:
ce:f4:8a:d6:d7:36:7e:e9:f7:a1:7f:50:f6:5d:06:a7:8d:54:
c7:d3:49:69:8d:b9:c7:37:9d:03:2b:7d:52:21:5b:03:f6:4e:
37:cc:6a:62
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzm6mBrM7JGoBBGkksWu83gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwMTA4MDIzMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGY3NGE0M2EyMDY3MmI4Mzk3NzdmMWE2YTVjMDk5MDI2YmM0YjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oGM5iQfOnRq7PnEUGgsAeM+3sP3
cd5XC6xtVrvz0PkPCHDzuZXt4jy/UkZB8XnS7Tigi2UtI3IU8DcWLAyTWw8Px+OT
Gj3BVYJ3r/W1U1OLEeTdxUoFthMWB/WMpZz+W6Hq9UBOEpyWdm5Gi+o4C0lk7/i1
N74CcqLI7G/GJhs6we0Stn0noVFp/JqmXVFVgGfHtnrxlJfDUl7v01A0yH1O747x
0qrmZX+4chzzA4lH/VPv3q6WaSPlLqfH+kI3zQKkvzXzwbtzhZ3f8UqOQNp0EDOt
6bm846ZbWjfCa83kHK1AjuKumjoMiknzh+GgIxQX5dv5mr8rX09ltVl9DQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMT3SkOiBnK4OXd/GmpcCZAmvEtlMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEveFBkS1E2SUdjcmc1ZDM4YWFsd0prQ2E4UzJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCPjyUAwQC
Pjy8MA0GCSqGSIb3DQEBCwUAA4IBAQC6+BbkUSNZt0NPorm7TQDAJGWXopYvRHdq
mWeMa/0xnXspxvuLNb53spNrIhrgaIEynodQqiNoexeGo4DcGHS6LU2WxQ21P3Ad
y0ss07mzkLZLQOAiFQsBuRyzcOe03IHcSycYUQBtga7kYibt2q/eyNrCCKsnXq1o
NJjojVAeCbyTLc5k/1ZmYB1wbnFFkJkc20ZjIoE/SQQqdOdYfh3yiS0hCmhuRC5Q
8J6qB9Wsi1xCy2vmLdopAiQl0Eu8gv4jSFGb+iCF1piF0sGWN1QooUpoEE5+xlXO
9IrW1zZ+6fehf1D2XQanjVTH00lpjbnHN50DK31SIVsD9k43zGpi
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org