Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/z0zr8NAs9QXl31YzBLHR4U2Su3A.roa
File: z0zr8NAs9QXl31YzBLHR4U2Su3A.roa (raw, json)
Hash identifier: g5n6eV/FnAiRBEbt+4T4YLw+UZwhqWhSTP1tLx1JlOM=
Subject key identifier: CF:4C:EB:F0:D0:2C:F5:05:E5:DF:56:33:04:B1:D1:E1:4D:92:BB:70
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01904E239AEC85C8522795D5187EF59FE5B0
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/z0zr8NAs9QXl31YzBLHR4U2Su3A.roa
Signing time: Tue 25 Jun 2024 06:44:34 +0000
ROA not before: Tue 25 Jun 2024 06:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208324
IP address blocks: 62.60.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 29 Jun 2024 08:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:23:9a:ec:85:c8:52:27:95:d5:18:7e:f5:9f:e5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 25 06:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf4cebf0d02cf505e5df563304b1d1e14d92bb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:2a:6a:27:5b:a5:57:79:cb:73:0f:89:30:
98:87:54:d0:a5:e5:df:63:7f:ef:cb:11:fb:bd:fa:
df:c5:99:3e:fe:2c:b2:15:f0:d0:18:3b:c7:69:0f:
af:fb:b0:e9:fc:d7:2f:f4:b6:41:ec:04:65:54:a0:
69:37:e2:75:54:54:a0:69:24:2b:14:3c:55:03:81:
29:6b:38:e8:b1:af:88:f2:21:ba:b7:44:6e:f1:aa:
9e:49:d9:29:cd:27:8e:45:a3:5f:0b:fd:dd:a3:16:
66:31:10:5c:83:52:19:f7:d5:b2:09:cf:da:72:8b:
2c:c2:16:09:f7:b4:d8:83:bd:e3:8a:fb:e3:fe:91:
1a:fc:6f:a4:4a:a6:9d:f2:6e:aa:c1:bf:59:63:63:
31:77:4f:a3:40:7a:ca:bb:b2:78:ee:5f:8c:58:5f:
03:25:0d:b4:b6:39:08:15:37:8c:da:a7:36:ac:af:
d9:36:a1:eb:78:5c:99:68:78:86:db:b6:bb:97:03:
53:5f:18:e2:29:fb:c2:b7:9a:10:e9:a8:59:8f:e1:
82:97:50:71:f1:bf:e8:99:8d:e9:fc:f7:c7:a6:e4:
b7:8c:2b:b6:d3:62:48:67:3a:59:e9:5a:f3:d6:90:
64:7a:11:d7:2a:4e:68:46:ed:ec:c1:7e:b6:8e:a2:
46:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4C:EB:F0:D0:2C:F5:05:E5:DF:56:33:04:B1:D1:E1:4D:92:BB:70
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/z0zr8NAs9QXl31YzBLHR4U2Su3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.152.0/22
Signature Algorithm: sha256WithRSAEncryption
84:8f:37:e8:82:ab:dd:5f:98:40:3e:be:d0:45:fe:44:ac:2c:
d7:e3:24:ed:03:fb:cb:31:66:38:2a:6b:ce:3f:e0:88:2a:a3:
10:d7:e5:b3:19:53:0c:e5:09:08:26:ac:0a:a8:74:39:a8:20:
e0:a1:b0:c6:64:79:90:07:47:2b:ce:66:d5:56:90:81:63:45:
f8:d9:57:fc:b0:d0:ec:fb:dc:ed:66:eb:93:ae:49:b3:e7:73:
a2:a3:7d:ac:ad:86:9f:0e:24:0e:49:84:08:bd:20:cc:d6:fe:
8a:12:85:18:2d:03:08:8e:75:fc:eb:f9:42:1a:18:72:2b:9e:
1c:ec:92:29:46:ac:ad:23:fa:5d:28:ab:69:dd:5c:b9:a5:09:
0e:08:3b:6d:70:43:a2:45:3e:a0:f2:5d:4f:ef:85:8d:cc:81:
6e:2f:40:32:69:47:98:34:09:9e:bd:58:1f:f5:ac:68:a8:db:
4b:a5:d6:15:9b:21:92:b7:63:20:1a:47:1b:99:df:dd:5f:e9:
b8:ee:85:36:53:87:00:c5:b8:a9:d2:fd:31:75:bf:25:93:0c:
8a:b1:57:12:77:b5:4c:ba:ed:8a:b1:51:ac:3c:9c:ce:56:84:
7f:55:a5:26:71:21:96:0a:2f:c9:7f:79:f9:0f:3f:a9:11:c5:
ce:50:06:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBOI5rshchSJ5XVGH71n+WwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwNjI1MDY0NDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjRjZWJmMGQwMmNmNTA1ZTVkZjU2MzMwNGIxZDFlMTRkOTJiYjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSsqaidbpVd5y3MPiTCYh1TQpeXf
Y3/vyxH7vfrfxZk+/iyyFfDQGDvHaQ+v+7Dp/Ncv9LZB7ARlVKBpN+J1VFSgaSQr
FDxVA4Epazjosa+I8iG6t0Ru8aqeSdkpzSeORaNfC/3doxZmMRBcg1IZ99WyCc/a
cosswhYJ97TYg73jivvj/pEa/G+kSqad8m6qwb9ZY2Mxd0+jQHrKu7J47l+MWF8D
JQ20tjkIFTeM2qc2rK/ZNqHreFyZaHiG27a7lwNTXxjiKfvCt5oQ6ahZj+GCl1Bx
8b/omY3p/PfHpuS3jCu202JIZzpZ6Vrz1pBkehHXKk5oRu3swX62jqJGiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM9M6/DQLPUF5d9WMwSx0eFNkrtwMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvejB6cjhOQXM5UVhsMzFZekJMSFI0VTJTdTNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPjyYMA0G
CSqGSIb3DQEBCwUAA4IBAQCEjzfogqvdX5hAPr7QRf5ErCzX4yTtA/vLMWY4KmvO
P+CIKqMQ1+WzGVMM5QkIJqwKqHQ5qCDgobDGZHmQB0crzmbVVpCBY0X42Vf8sNDs
+9ztZuuTrkmz53Oio32srYafDiQOSYQIvSDM1v6KEoUYLQMIjnX86/lCGhhyK54c
7JIpRqytI/pdKKtp3Vy5pQkOCDttcEOiRT6g8l1P74WNzIFuL0AyaUeYNAmevVgf
9axoqNtLpdYVmyGSt2MgGkcbmd/dX+m47oU2U4cAxbip0v0xdb8lkwyKsVcSd7VM
uu2KsVGsPJzOVoR/VaUmcSGWCi/Jf3n5Dz+pEcXOUAbV
-----END CERTIFICATE-----
Generated at Sat Jun 29 10:59:25 2024 by rpki-client on console-ams.rpki-client.org