Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/xRPED2UrkEHf_Dwwe_e76YjLqk0.roa
File: xRPED2UrkEHf_Dwwe_e76YjLqk0.roa (raw, json)
Hash identifier: q0wO4lNXfM4U/duuRiqpgrQZo1yi7ox88NYUjnVAuBE=
Subject key identifier: C5:13:C4:0F:65:2B:90:41:DF:FC:3C:30:7B:F7:BB:E9:88:CB:AA:4D
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0186ACF2DC3607ADAC6BB31E1FDFA03A70B6
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/xRPED2UrkEHf_Dwwe_e76YjLqk0.roa
Signing time: Sat 04 Mar 2023 14:07:22 +0000
ROA not before: Sat 04 Mar 2023 14:07:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61391
IP address blocks: 62.60.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ac:f2:dc:36:07:ad:ac:6b:b3:1e:1f:df:a0:3a:70:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Mar 4 14:07:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c513c40f652b9041dffc3c307bf7bbe988cbaa4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:52:16:d9:4c:32:78:da:b0:74:0c:ec:bf:00:
f6:bb:4c:f4:2f:d9:21:d8:68:19:02:dd:3e:cb:e9:
f0:37:f6:ef:a5:8a:2e:eb:6a:46:97:19:d7:ec:e1:
0f:eb:c4:20:b9:8e:74:42:85:b4:cc:49:2d:64:5b:
92:35:36:ba:f2:ab:d2:44:52:51:7a:0c:d6:0d:4c:
f8:33:c4:3e:73:ac:30:8e:18:12:f0:f9:fc:3e:9e:
93:f4:c6:0f:6a:da:78:7f:a7:1a:95:7b:4b:31:cc:
13:32:35:45:92:b7:4b:72:02:73:5f:bd:6e:ce:de:
1d:43:8b:5a:bc:c1:f4:b1:c7:09:46:52:b2:97:2a:
a9:61:17:e3:a8:ca:13:ba:12:6b:7e:d3:a2:2d:63:
e1:c2:de:bb:35:ea:fc:ca:93:39:81:6a:4d:f0:34:
68:42:ce:83:3f:3f:5a:cc:3b:54:b6:1b:42:ba:9b:
96:92:a1:a6:20:d8:5f:19:ba:69:40:03:f8:16:87:
e9:7b:dc:3b:c9:49:13:68:98:c0:71:fc:f0:b8:bc:
f1:86:00:96:a6:97:9f:7b:13:b6:67:a2:e7:38:b1:
42:b0:41:73:69:5c:fb:00:ac:3d:7f:37:91:6b:d3:
d5:e9:4e:aa:72:35:9f:ac:24:39:31:ae:01:37:ab:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:13:C4:0F:65:2B:90:41:DF:FC:3C:30:7B:F7:BB:E9:88:CB:AA:4D
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/xRPED2UrkEHf_Dwwe_e76YjLqk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.197.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:41:5f:cc:9b:bd:03:38:a9:10:95:59:8f:ac:e3:6f:c8:98:
72:c3:59:83:6e:4c:e2:95:eb:5e:12:7f:96:3f:26:44:d5:cc:
ae:8d:e8:c2:cc:99:2a:92:53:51:aa:e9:b3:65:5d:a1:3e:22:
2d:da:45:f0:6a:03:93:70:8b:85:17:36:e2:91:bf:4e:32:9b:
25:69:60:e2:b5:a7:fd:49:1d:91:56:a3:12:71:36:9a:8a:8b:
cb:0f:58:f2:31:ab:98:c7:f3:82:10:f2:a3:9d:96:f2:65:fb:
67:4b:be:7a:c9:67:8a:b5:fd:b5:05:dc:15:bf:8c:85:2c:b2:
e0:a8:2b:de:7d:1b:dd:cd:20:ee:77:e0:3a:4f:11:c4:3d:1e:
06:92:e3:c0:5f:0f:e0:66:ea:a0:7e:ff:0a:e5:39:aa:8c:b2:
6f:1b:b7:85:bb:66:bd:bf:fd:9d:b9:5c:24:2d:2c:f8:74:b5:
14:e9:4b:f8:ca:c9:a7:42:00:03:36:36:60:5e:91:6b:d8:1d:
49:bd:55:ad:02:af:81:3f:8a:76:1b:7c:48:01:b1:c1:48:87:
c0:ad:86:90:3d:ed:77:c2:56:85:bb:b2:31:b7:02:57:43:0f:
5a:d5:1f:09:26:53:d5:bd:d8:6c:64:c7:d1:30:7d:4d:21:66:
44:c7:76:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYas8tw2B62sa7MeH9+gOnC2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwMzA0MTQwNzIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTEzYzQwZjY1MmI5MDQxZGZmYzNjMzA3YmY3YmJlOTg4Y2JhYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1IW2UwyeNqwdAzsvwD2u0z0L9kh
2GgZAt0+y+nwN/bvpYou62pGlxnX7OEP68QguY50QoW0zEktZFuSNTa68qvSRFJR
egzWDUz4M8Q+c6wwjhgS8Pn8Pp6T9MYPatp4f6calXtLMcwTMjVFkrdLcgJzX71u
zt4dQ4tavMH0sccJRlKylyqpYRfjqMoTuhJrftOiLWPhwt67Ner8ypM5gWpN8DRo
Qs6DPz9azDtUthtCupuWkqGmINhfGbppQAP4Fofpe9w7yUkTaJjAcfzwuLzxhgCW
ppefexO2Z6LnOLFCsEFzaVz7AKw9fzeRa9PV6U6qcjWfrCQ5Ma4BN6sXpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMUTxA9lK5BB3/w8MHv3u+mIy6pNMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEveFJQRUQyVXJrRUhmX0R3d2VfZTc2WWpMcWswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPjzFMA0G
CSqGSIb3DQEBCwUAA4IBAQCxQV/Mm70DOKkQlVmPrONvyJhyw1mDbkzileteEn+W
PyZE1cyujejCzJkqklNRqumzZV2hPiIt2kXwagOTcIuFFzbikb9OMpslaWDitaf9
SR2RVqMScTaaiovLD1jyMauYx/OCEPKjnZbyZftnS756yWeKtf21BdwVv4yFLLLg
qCvefRvdzSDud+A6TxHEPR4GkuPAXw/gZuqgfv8K5TmqjLJvG7eFu2a9v/2duVwk
LSz4dLUU6Uv4ysmnQgADNjZgXpFr2B1JvVWtAq+BP4p2G3xIAbHBSIfArYaQPe13
wlaFu7IxtwJXQw9a1R8JJlPVvdhsZMfRMH1NIWZEx3Yu
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org