Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/0tGNf9QEFjU9jQe_7QLVegb9oz8.roa
File: 0tGNf9QEFjU9jQe_7QLVegb9oz8.roa (raw, json)
Hash identifier: rIh1vOLAvX7EiqRFvzyD/gYRlGr8u6D3jfOEA416PyM=
Subject key identifier: D2:D1:8D:7F:D4:04:16:35:3D:8D:07:BF:ED:02:D5:7A:06:FD:A3:3F
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 01856ECB736F975E1CD273243D462B2F92CF
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/0tGNf9QEFjU9jQe_7QLVegb9oz8.roa
Signing time: Sun 01 Jan 2023 19:25:05 +0000
ROA not before: Sun 01 Jan 2023 19:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5618
IP address blocks: 62.193.16.0/24 maxlen: 24
62.193.17.0/24 maxlen: 24
62.193.12.0/23 maxlen: 23
62.193.13.0/24 maxlen: 24
62.193.14.0/23 maxlen: 23
62.193.14.0/24 maxlen: 24
62.193.15.0/24 maxlen: 24
62.193.18.0/24 maxlen: 24
62.193.20.0/24 maxlen: 24
62.193.21.0/24 maxlen: 24
62.193.3.0/24 maxlen: 24
62.193.4.0/24 maxlen: 24
62.193.5.0/24 maxlen: 24
62.193.6.0/24 maxlen: 24
62.193.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Apr 2023 09:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:73:6f:97:5e:1c:d2:73:24:3d:46:2b:2f:92:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Jan 1 19:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2d18d7fd40416353d8d07bfed02d57a06fda33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:5e:e4:dd:a1:42:bd:49:69:10:ab:ed:3f:
d7:32:ed:ef:58:38:e1:41:ca:ef:f0:50:a3:6c:23:
15:7d:19:7a:19:65:4e:30:69:25:90:57:76:4b:57:
89:ee:e9:2a:6c:86:4a:ff:b0:e0:b5:db:af:c8:20:
a7:e5:38:a7:74:8a:85:48:98:eb:d9:80:48:9b:60:
48:fd:28:73:5d:2e:a7:f9:b2:6c:3b:1e:31:c7:01:
d1:8f:ee:dc:98:3c:a8:b7:91:b6:4e:f3:1f:4b:3a:
08:82:9d:a6:17:10:33:2b:8e:f8:fc:b9:27:68:c2:
72:2d:14:c0:ec:a2:aa:c3:49:0c:92:ee:97:44:4f:
69:82:17:a3:2e:96:04:b4:3f:f2:24:ce:ae:8c:ca:
80:72:99:9e:2c:c9:3f:07:99:73:c6:d7:06:90:8a:
cc:c8:94:0c:17:4a:9f:5e:32:7f:93:26:fa:2a:6a:
fe:26:13:37:f5:50:af:ee:23:3b:3b:f6:56:5a:0d:
2e:75:0b:bf:97:91:3f:e6:d6:ef:19:ec:a6:1e:13:
99:ea:44:3b:2d:e1:44:3e:2d:37:b9:e4:df:e5:07:
9f:f7:b5:10:9e:6e:e7:c1:c3:2b:92:91:a7:bc:cd:
68:ac:99:06:37:fd:0f:87:05:97:70:1a:d4:a6:de:
31:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D1:8D:7F:D4:04:16:35:3D:8D:07:BF:ED:02:D5:7A:06:FD:A3:3F
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/0tGNf9QEFjU9jQe_7QLVegb9oz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.193.3.0-62.193.7.255
62.193.12.0-62.193.18.255
62.193.20.0/23
Signature Algorithm: sha256WithRSAEncryption
47:b8:05:c5:df:5f:3a:c8:7b:5f:69:e3:7f:ff:2d:b9:00:27:
44:72:da:ee:46:03:db:c0:06:de:dc:df:ad:e9:86:ae:d5:60:
57:7c:dc:c3:28:df:12:91:69:03:96:b5:7b:f2:ea:f4:87:5e:
61:ab:bf:1e:b1:0c:3a:10:4e:53:e0:8f:fd:40:93:71:99:d3:
c4:6a:e1:3c:08:5f:67:ce:e2:c8:5a:37:3c:45:10:17:67:84:
c3:71:28:5d:c5:6f:30:a5:cd:16:f8:8d:92:da:c2:86:e8:de:
7a:ea:92:ce:9a:01:dd:a9:55:b2:af:ff:1c:97:fa:b5:72:d2:
fb:33:d3:21:32:15:cf:82:c2:05:79:4e:aa:ed:98:6e:17:ae:
04:e8:9b:1a:f3:7d:1d:64:ce:20:60:1e:46:b7:61:21:c9:2d:
0b:9d:5b:8e:40:78:94:35:a1:84:f8:66:d5:62:e0:40:ab:37:
32:16:be:46:29:7b:0c:b9:d8:df:c5:bf:45:0b:0a:9e:ee:d7:
c0:74:4d:6e:5c:57:5d:bd:4a:02:5c:7c:ad:66:11:f9:bd:5c:
fb:46:7e:6e:b3:7e:b0:70:69:2f:ff:38:05:07:40:f8:2c:40:
0c:6c:6f:c2:85:29:e7:05:17:29:0d:2b:17:7f:d1:dd:03:41:
78:15:e1:03
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYVuy3Nvl14c0nMkPUYrL5LPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MThkZWMzMjU3ODQwMTA3NzQ4MjAwOTBlOGUwYTA4M2Rk
ZGRiZGMwHhcNMjMwMTAxMTkyNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmQxOGQ3ZmQ0MDQxNjM1M2Q4ZDA3YmZlZDAyZDU3YTA2ZmRhMzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLFe5N2hQr1JaRCr7T/XMu3vWDjh
Qcrv8FCjbCMVfRl6GWVOMGklkFd2S1eJ7ukqbIZK/7DgtduvyCCn5TindIqFSJjr
2YBIm2BI/ShzXS6n+bJsOx4xxwHRj+7cmDyot5G2TvMfSzoIgp2mFxAzK474/Lkn
aMJyLRTA7KKqw0kMku6XRE9pghejLpYEtD/yJM6ujMqAcpmeLMk/B5lzxtcGkIrM
yJQMF0qfXjJ/kyb6Kmr+JhM39VCv7iM7O/ZWWg0udQu/l5E/5tbvGeymHhOZ6kQ7
LeFEPi03ueTf5Qef97UQnm7nwcMrkpGnvM1orJkGN/0PhwWXcBrUpt4xbwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFNLRjX/UBBY1PY0Hv+0C1XoG/aM/MB8GA1UdIwQY
MBaAFPgY3sMleEAQd0ggCQ6OCgg93dvcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CamV3eVY0UUJCM1NDQUpEbzRLQ0QzZDI5dy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvMjk1OWZiLTg4ZjYtNDliNS1iYjAw
LTgzYTBkOWVmZWMyZC8xLzB0R05mOVFFRmpVOWpRZV83UUxWZWdiOW96OC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjkvMjk1OWZiLTg4ZjYtNDliNS1iYjAwLTgzYTBkOWVmZWMy
ZC8xLzEtQmpld3lWNFFCQjNTQ0FKRG80S0NEM2QyOXcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwOwYIKwYBBQUHAQcBAf8ELDAqMCgEAgABMCIwDAMEAD7B
AwMEAz7BADAMAwQCPsEMAwQAPsESAwQBPsEUMA0GCSqGSIb3DQEBCwUAA4IBAQBH
uAXF3186yHtfaeN//y25ACdEctruRgPbwAbe3N+t6Yau1WBXfNzDKN8SkWkDlrV7
8ur0h15hq78esQw6EE5T4I/9QJNxmdPEauE8CF9nzuLIWjc8RRAXZ4TDcShdxW8w
pc0W+I2S2sKG6N566pLOmgHdqVWyr/8cl/q1ctL7M9MhMhXPgsIFeU6q7ZhuF64E
6Jsa830dZM4gYB5Gt2EhyS0LnVuOQHiUNaGE+GbVYuBAqzcyFr5GKXsMudjfxb9F
Cwqe7tfAdE1uXFddvUoCXHytZhH5vVz7Rn5us36wcGkv/zgFB0D4LEAMbG/ChSnn
BRcpDSsXf9HdA0F4FeED
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:48 2024 by rpki-client on console-ams.rpki-client.org