Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/gZcY_lJlGvSriBHcD7j1dNkGFyE.roa
File: gZcY_lJlGvSriBHcD7j1dNkGFyE.roa (raw, json)
Hash identifier: YmMJgNzRY58J1QNKH1ufqBwlg+vnsZ3lA/JZAahvpWQ=
Subject key identifier: 81:97:18:FE:52:65:1A:F4:AB:88:11:DC:0F:B8:F5:74:D9:06:17:21
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018DE9C43C6007831A2172FCF15BECD2DC9F
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/gZcY_lJlGvSriBHcD7j1dNkGFyE.roa
Signing time: Tue 27 Feb 2024 08:52:48 +0000
ROA not before: Tue 27 Feb 2024 08:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 62.133.61.0/24 maxlen: 24
141.98.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 08:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e9:c4:3c:60:07:83:1a:21:72:fc:f1:5b:ec:d2:dc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Feb 27 08:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=819718fe52651af4ab8811dc0fb8f574d9061721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:50:be:2f:19:d2:63:8b:3c:ee:77:ec:50:5c:
e7:00:b0:90:94:a9:dc:22:c9:89:d2:e1:8c:df:26:
d1:14:ba:6e:b9:d8:41:78:86:05:5c:6e:ea:8a:6a:
a8:c3:d5:f4:08:02:2a:62:16:d5:9e:22:e5:ac:b0:
77:69:fa:f5:26:d3:12:7f:a6:7d:42:83:6c:88:1d:
38:63:3a:4b:32:24:91:fd:bd:7a:8d:ec:bc:ab:32:
4e:99:e5:c3:be:36:d5:06:28:aa:60:b0:0e:b9:7e:
af:aa:81:06:cb:7d:da:a0:00:1a:77:17:7b:e8:b0:
4b:ab:40:27:18:91:ad:65:40:9f:5b:14:54:de:09:
20:17:a6:5e:04:87:dd:05:6f:f3:ba:68:13:9a:5b:
cb:89:33:bd:4c:8f:ba:27:4a:fe:43:b3:82:26:cf:
a9:e2:b1:64:5f:b0:de:05:2f:f4:70:43:f1:51:a8:
0c:c0:24:78:40:f6:70:2d:85:e9:a0:0b:96:c4:2e:
4f:5e:7f:21:d6:67:7e:92:e5:83:46:6e:b0:ec:81:
8b:73:29:aa:9f:58:39:49:74:53:44:e0:49:87:81:
de:7f:83:c4:46:dd:ad:b3:ea:ce:c2:9b:0b:77:0b:
0d:5a:13:99:13:af:35:ee:fa:e5:9c:f9:b3:15:0e:
a1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:97:18:FE:52:65:1A:F4:AB:88:11:DC:0F:B8:F5:74:D9:06:17:21
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/gZcY_lJlGvSriBHcD7j1dNkGFyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.133.61.0/24
141.98.171.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:f0:23:de:1c:ce:ed:65:1d:6f:bb:ad:22:81:eb:77:17:aa:
65:73:9e:18:9c:a2:0c:b9:3f:47:e5:f7:51:93:c3:ba:e5:03:
64:94:9a:d7:0a:d5:74:cc:53:64:a1:ba:7d:00:86:12:4b:c2:
ea:a4:aa:dd:f7:69:2f:75:7b:fd:52:40:50:10:71:89:63:87:
ad:aa:9e:ba:c3:21:9d:44:5a:83:01:70:85:3d:07:b7:a3:50:
c5:25:0c:3f:3b:fd:24:86:e3:cd:e4:0d:89:8d:e6:fb:e9:cf:
16:9d:0c:3c:b9:9f:e8:4c:f5:e4:0b:55:ec:29:85:f2:4a:78:
7a:9f:f5:a0:0e:40:43:98:53:9c:69:39:ef:ae:16:a5:64:1f:
db:1f:d2:55:d5:35:86:3b:c6:17:b4:70:25:a0:d6:fa:e1:2b:
d5:98:40:fb:32:7b:29:a4:96:4d:61:f5:95:66:42:07:65:89:
66:8f:ca:e4:28:7f:05:f0:7e:78:28:cc:5f:85:9c:71:5a:f0:
19:49:bc:3e:bb:9a:be:c5:bf:3f:af:cc:72:78:f5:08:06:2c:
46:5d:9b:ce:67:19:a5:ab:d9:23:41:2e:97:e8:4d:6f:cd:2c:
eb:b0:fa:5c:fd:14:81:66:6b:c2:14:b2:aa:e7:66:42:b7:8d:
d2:f8:5d:ab
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY3pxDxgB4MaIXL88Vvs0tyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjQwMjI3MDg1MjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTk3MThmZTUyNjUxYWY0YWI4ODExZGMwZmI4ZjU3NGQ5MDYxNzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVC+LxnSY4s87nfsUFznALCQlKnc
IsmJ0uGM3ybRFLpuudhBeIYFXG7qimqow9X0CAIqYhbVniLlrLB3afr1JtMSf6Z9
QoNsiB04YzpLMiSR/b16jey8qzJOmeXDvjbVBiiqYLAOuX6vqoEGy33aoAAadxd7
6LBLq0AnGJGtZUCfWxRU3gkgF6ZeBIfdBW/zumgTmlvLiTO9TI+6J0r+Q7OCJs+p
4rFkX7DeBS/0cEPxUagMwCR4QPZwLYXpoAuWxC5PXn8h1md+kuWDRm6w7IGLcymq
n1g5SXRTROBJh4Hef4PERt2ts+rOwpsLdwsNWhOZE6817vrlnPmzFQ6hFwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIGXGP5SZRr0q4gR3A+49XTZBhchMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvZ1pjWV9sSmxHdlNyaUJIY0Q3ajFkTmtHRnlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPoU9AwQA
jWKrMA0GCSqGSIb3DQEBCwUAA4IBAQCn8CPeHM7tZR1vu60iget3F6plc54YnKIM
uT9H5fdRk8O65QNklJrXCtV0zFNkobp9AIYSS8LqpKrd92kvdXv9UkBQEHGJY4et
qp66wyGdRFqDAXCFPQe3o1DFJQw/O/0khuPN5A2Jjeb76c8WnQw8uZ/oTPXkC1Xs
KYXySnh6n/WgDkBDmFOcaTnvrhalZB/bH9JV1TWGO8YXtHAloNb64SvVmED7Mnsp
pJZNYfWVZkIHZYlmj8rkKH8F8H54KMxfhZxxWvAZSbw+u5q+xb8/r8xyePUIBixG
XZvOZxmlq9kjQS6X6E1vzSzrsPpc/RSBZmvCFLKq52ZCt43S+F2r
-----END CERTIFICATE-----
Generated at Mon Mar 18 11:50:11 2024 by rpki-client on console-fra.rpki-client.org