Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/3TCtKKZWaQnSXMwfkHxp3zdt54E.roa
File: 3TCtKKZWaQnSXMwfkHxp3zdt54E.roa (raw, json)
Hash identifier: W8YSq4k6UI+BrHdBi5eWUn6pe4ws04zqIL5e8OyMynQ=
Subject key identifier: DD:30:AD:28:A6:56:69:09:D2:5C:CC:1F:90:7C:69:DF:37:6D:E7:81
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 018CA05A3F9001246B01A5697DC2B20368CC
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/3TCtKKZWaQnSXMwfkHxp3zdt54E.roa
Signing time: Mon 25 Dec 2023 09:41:58 +0000
ROA not before: Mon 25 Dec 2023 09:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 62.182.172.0/24 maxlen: 24
62.182.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a0:5a:3f:90:01:24:6b:01:a5:69:7d:c2:b2:03:68:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Dec 25 09:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd30ad28a6566909d25ccc1f907c69df376de781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:1f:5b:f1:89:88:9f:98:9b:dd:cc:b1:57:
4e:f3:5d:48:97:eb:70:ba:49:ae:cf:a4:51:79:f6:
fb:5a:d9:02:b3:d7:77:a3:57:c8:a5:00:4b:7e:45:
42:7b:ba:c0:3a:a5:02:07:01:65:7c:cd:35:e8:da:
e8:6a:ee:7f:cc:d5:ad:3e:bc:c8:19:94:2a:8e:d6:
de:cb:91:57:68:0e:c2:3e:4b:47:b8:56:3d:82:d1:
8a:3b:4f:68:d4:6c:9c:9c:69:57:da:f6:03:15:df:
b5:e5:62:bf:79:67:a5:ed:c1:79:0a:13:53:21:27:
b3:1e:e3:5b:b8:6d:28:ab:cc:1a:19:41:6f:b5:29:
f3:29:66:ef:80:7f:9e:55:78:96:24:b9:7d:94:29:
3d:d2:57:7f:f0:e6:b6:6d:90:c6:87:3a:f8:b0:b3:
3e:ea:e8:30:1f:9f:9d:e2:d0:fc:09:1a:24:1f:75:
8b:33:5f:af:fa:9d:17:74:f6:e6:b0:79:7f:8e:8a:
a2:64:24:04:42:f7:85:44:a9:e7:0f:fb:c0:3c:6b:
ff:c3:ff:97:c6:fd:6c:9f:e2:68:80:a0:1b:5a:da:
73:62:ec:5b:e9:c9:5c:e6:d5:65:bb:71:73:12:ec:
f1:7c:4c:d3:c6:ad:2d:4b:4f:c9:2c:a7:c2:79:0d:
4f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:30:AD:28:A6:56:69:09:D2:5C:CC:1F:90:7C:69:DF:37:6D:E7:81
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/3TCtKKZWaQnSXMwfkHxp3zdt54E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.172.0/24
62.182.175.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ae:f8:83:6a:b9:76:85:ba:ec:4a:11:fc:2b:96:5b:23:ec:
f7:c3:ea:70:83:41:c4:d2:49:32:b2:a7:56:29:46:3a:01:90:
b2:e3:7a:98:8e:c7:4a:93:37:44:dc:20:0b:22:ac:93:e6:00:
6d:7f:53:50:59:f3:de:5d:da:10:18:30:24:19:ca:a7:8e:04:
bf:a2:bd:45:31:93:d2:2c:a0:e1:aa:d9:ac:c4:46:19:06:d8:
95:27:ba:53:c6:f7:d6:f6:ca:39:ac:e0:4c:12:03:d5:31:28:
99:72:ca:13:02:09:8b:9e:2a:38:83:38:05:a1:94:c5:ed:f9:
46:d6:45:0c:6e:6f:f2:8a:37:2f:70:d7:39:e9:20:14:d3:54:
08:6f:f2:79:c7:1d:91:6b:7b:68:74:0c:5d:a7:cd:0c:95:fe:
e3:cc:60:cf:8c:af:bf:dd:c8:3b:a8:7b:f2:0c:89:d3:c3:00:
be:a0:80:37:34:ed:38:1e:b3:c7:38:da:2a:b9:cb:52:da:d4:
08:51:63:58:70:9f:5b:c4:ac:31:19:8c:42:03:37:52:b2:7c:
e5:db:31:07:21:c3:50:2d:55:65:2d:04:0b:13:15:bf:38:59:
07:43:2c:9e:ae:d1:f8:b2:79:6f:ce:2e:a6:4f:a0:6e:d5:10:
f4:4f:32:08
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYygWj+QASRrAaVpfcKyA2jMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNGVkOTQyZTVjNzQyZTc3YmZiOWJlYjk1NGY4NzI1MzRm
NTI4NDgwHhcNMjMxMjI1MDk0MTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDMwYWQyOGE2NTY2OTA5ZDI1Y2NjMWY5MDdjNjlkZjM3NmRlNzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YcfW/GJiJ+Ym93MsVdO811Il+tw
ukmuz6RRefb7WtkCs9d3o1fIpQBLfkVCe7rAOqUCBwFlfM016Nroau5/zNWtPrzI
GZQqjtbey5FXaA7CPktHuFY9gtGKO09o1GycnGlX2vYDFd+15WK/eWel7cF5ChNT
ISezHuNbuG0oq8waGUFvtSnzKWbvgH+eVXiWJLl9lCk90ld/8Oa2bZDGhzr4sLM+
6ugwH5+d4tD8CRokH3WLM1+v+p0XdPbmsHl/joqiZCQEQveFRKnnD/vAPGv/w/+X
xv1sn+JogKAbWtpzYuxb6clc5tVlu3FzEuzxfEzTxq0tS0/JLKfCeQ1P4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN0wrSimVmkJ0lzMH5B8ad83beeBMB8GA1UdIwQY
MBaAFDxO2ULlx0Lne/ub65VPhyU09ShIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2Et
NzczNDRiY2M5MTkxLzEvM1RDdEtLWldhUW5TWE13ZmtIeHAzemR0NTRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2EtNzczNDRiY2M5MTkx
LzEvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPrasAwQA
PravMA0GCSqGSIb3DQEBCwUAA4IBAQA3rviDarl2hbrsShH8K5ZbI+z3w+pwg0HE
0kkysqdWKUY6AZCy43qYjsdKkzdE3CALIqyT5gBtf1NQWfPeXdoQGDAkGcqnjgS/
or1FMZPSLKDhqtmsxEYZBtiVJ7pTxvfW9so5rOBMEgPVMSiZcsoTAgmLnio4gzgF
oZTF7flG1kUMbm/yijcvcNc56SAU01QIb/J5xx2Ra3todAxdp80Mlf7jzGDPjK+/
3cg7qHvyDInTwwC+oIA3NO04HrPHONoquctS2tQIUWNYcJ9bxKwxGYxCAzdSsnzl
2zEHIcNQLVVlLQQLExW/OFkHQyyertH4snlvzi6mT6Bu1RD0TzII
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:13 2024 by rpki-client on console-ams.rpki-client.org