Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/xtMfAd0rKM0pIkxkdniTgf_LmdA.roa
File: xtMfAd0rKM0pIkxkdniTgf_LmdA.roa (raw, json)
Hash identifier: FyShZz9ahaESgHS+2JZkpiGuFMWid3pLgBB0ufYXxzc=
Subject key identifier: C6:D3:1F:01:DD:2B:28:CD:29:22:4C:64:76:78:93:81:FF:CB:99:D0
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018570B06E22004543CF3C3C888180881A20
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/xtMfAd0rKM0pIkxkdniTgf_LmdA.roa
Signing time: Mon 02 Jan 2023 04:14:48 +0000
ROA not before: Mon 02 Jan 2023 04:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16200
IP address blocks: 62.60.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:6e:22:00:45:43:cf:3c:3c:88:81:80:88:1a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 04:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6d31f01dd2b28cd29224c6476789381ffcb99d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:78:6a:60:02:d2:75:87:a1:00:48:e9:9e:d2:
21:cd:c9:29:9e:18:f5:00:11:c3:ad:53:59:2f:75:
79:da:9f:91:80:7f:43:4a:ab:ca:7d:08:4c:13:0a:
de:d3:42:53:45:b6:69:25:8b:51:6e:a8:d1:ac:6e:
f4:40:ac:0c:f4:a9:fb:46:f0:10:26:bd:16:74:8f:
0b:93:83:f4:b5:70:f6:d4:52:c6:47:c2:ed:6a:63:
ed:79:fc:c8:4a:24:d9:9e:d6:6e:06:1d:48:71:cb:
f4:0b:08:24:0b:03:d3:1c:37:54:f4:d9:8c:00:0e:
cc:d2:24:33:5f:48:94:f9:86:2a:c7:02:94:cf:59:
fc:89:70:9e:f2:f7:10:8c:ac:be:c1:93:32:19:0d:
4d:43:23:ee:68:9e:97:0d:2a:a0:56:f5:5e:51:23:
ad:bc:b3:53:b7:e1:3c:99:d8:fb:6c:85:33:49:74:
18:de:28:ff:b7:51:b6:bd:69:ef:40:19:15:4b:9f:
be:7e:fe:a0:9f:05:f0:e6:aa:1e:02:27:f5:dd:ca:
d2:11:46:92:98:e4:dc:16:16:6f:ca:a1:7a:a1:e3:
3e:5c:0b:17:fd:2a:b5:28:a4:f5:3c:8b:ce:ef:f5:
46:cd:a8:78:12:9d:94:ec:d4:fd:a0:5a:39:01:92:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D3:1F:01:DD:2B:28:CD:29:22:4C:64:76:78:93:81:FF:CB:99:D0
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/xtMfAd0rKM0pIkxkdniTgf_LmdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.163.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ce:d4:66:4d:ff:4f:0a:58:33:33:36:16:0e:97:fc:c4:54:
a8:05:02:42:59:55:39:18:47:01:3e:37:00:2c:4f:e6:b1:8c:
39:4f:49:66:c5:2c:a6:0b:37:fc:a4:da:9c:24:34:55:14:6e:
52:ea:cf:70:4f:32:c2:61:5f:cd:e3:91:69:52:25:ff:4c:dc:
b7:bf:e6:54:fe:a1:74:c8:07:fb:a3:26:04:0b:e1:b5:ef:90:
c7:8f:d3:72:15:10:c4:47:f4:96:ac:cc:d7:25:7b:aa:5d:4b:
9f:4f:1f:1f:a9:47:5d:57:d0:b5:53:87:54:c9:a2:07:37:3d:
92:63:93:fb:44:52:d1:98:82:43:92:44:93:0a:a5:c4:6e:78:
a7:1a:48:26:21:3a:2e:63:4a:8e:c3:67:9d:25:83:08:b2:11:
07:85:74:7e:66:78:e7:ed:ce:1b:8f:cf:91:3a:76:c8:6c:d7:
d3:12:3a:ef:1e:c5:04:7f:bc:df:e3:36:63:59:27:ab:0c:cd:
14:bc:cd:c8:b3:11:cd:f5:d6:61:7c:b6:63:4b:c2:67:fa:1e:
17:90:1d:10:83:6c:86:e9:c7:b9:e5:67:44:bc:2e:36:d4:39:
67:57:4f:7e:7c:73:75:fc:bf:8f:c2:7a:4e:36:28:37:0a:e2:
e8:4b:a1:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwsG4iAEVDzzw8iIGAiBogMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwMTAyMDQxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmQzMWYwMWRkMmIyOGNkMjkyMjRjNjQ3Njc4OTM4MWZmY2I5OWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3hqYALSdYehAEjpntIhzckpnhj1
ABHDrVNZL3V52p+RgH9DSqvKfQhMEwre00JTRbZpJYtRbqjRrG70QKwM9Kn7RvAQ
Jr0WdI8Lk4P0tXD21FLGR8LtamPtefzISiTZntZuBh1Iccv0CwgkCwPTHDdU9NmM
AA7M0iQzX0iU+YYqxwKUz1n8iXCe8vcQjKy+wZMyGQ1NQyPuaJ6XDSqgVvVeUSOt
vLNTt+E8mdj7bIUzSXQY3ij/t1G2vWnvQBkVS5++fv6gnwXw5qoeAif13crSEUaS
mOTcFhZvyqF6oeM+XAsX/Sq1KKT1PIvO7/VGzah4Ep2U7NT9oFo5AZLG2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMbTHwHdKyjNKSJMZHZ4k4H/y5nQMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEveHRNZkFkMHJLTTBwSWt4a2RuaVRnZl9MbWRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPjyjMA0G
CSqGSIb3DQEBCwUAA4IBAQBKztRmTf9PClgzMzYWDpf8xFSoBQJCWVU5GEcBPjcA
LE/msYw5T0lmxSymCzf8pNqcJDRVFG5S6s9wTzLCYV/N45FpUiX/TNy3v+ZU/qF0
yAf7oyYEC+G175DHj9NyFRDER/SWrMzXJXuqXUufTx8fqUddV9C1U4dUyaIHNz2S
Y5P7RFLRmIJDkkSTCqXEbninGkgmITouY0qOw2edJYMIshEHhXR+Znjn7c4bj8+R
OnbIbNfTEjrvHsUEf7zf4zZjWSerDM0UvM3IsxHN9dZhfLZjS8Jn+h4XkB0Qg2yG
6ce55WdEvC421DlnV09+fHN1/L+PwnpONig3CuLoS6Gr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org