Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/RnOgAoCIWQ9jS0LpB_d3Hso5fWo.roa
File: RnOgAoCIWQ9jS0LpB_d3Hso5fWo.roa (raw, json)
Hash identifier: t/KR2k13jyMeNN7lv+cQwsHYBODq/bod2bvPgo7cvkc=
Subject key identifier: 46:73:A0:02:80:88:59:0F:63:4B:42:E9:07:F7:77:1E:CA:39:7D:6A
Certificate issuer: /CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Certificate serial: 018C7CF1BB9685AAE6B31486342226A17844
Authority key identifier: 64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/RnOgAoCIWQ9jS0LpB_d3Hso5fWo.roa
Signing time: Mon 18 Dec 2023 12:41:06 +0000
ROA not before: Mon 18 Dec 2023 12:41:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 62.3.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:f1:bb:96:85:aa:e6:b3:14:86:34:22:26:a1:78:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Validity
Not Before: Dec 18 12:41:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4673a0028088590f634b42e907f7771eca397d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:2b:8d:33:c9:de:e3:70:e1:17:d2:5b:60:
c9:99:3e:f1:a9:8a:a3:86:a4:c4:61:c2:54:2a:68:
c1:ed:25:55:2f:f8:e7:4e:81:a2:f3:26:86:ca:1b:
77:83:1f:5d:66:f2:e6:ca:9d:ea:dc:1f:da:91:56:
12:82:88:26:8a:2b:c6:74:82:2a:1b:31:d6:b9:d5:
6d:0a:d9:9f:a4:82:0d:d0:61:ee:8e:28:28:0e:64:
c9:63:45:e8:67:6d:90:e8:7e:28:1d:d4:85:6b:97:
c0:92:b0:51:7b:b8:5d:84:3f:52:2d:67:83:7b:b0:
8a:a7:b9:30:ba:7b:e4:7b:18:a9:53:e2:dc:d0:18:
09:f3:ff:99:5e:d5:de:4a:70:cb:97:38:bd:0d:d0:
09:7e:8c:41:9b:fd:b6:23:76:5e:59:06:23:20:86:
c5:06:a9:46:40:fb:17:df:65:53:b1:df:26:5d:63:
03:8b:7c:e6:ca:d1:f4:f9:18:1e:f8:dd:9f:81:e1:
be:bc:ec:c7:25:8e:b6:8e:e6:fe:8c:21:09:73:fa:
27:18:c6:02:0e:02:f5:fb:53:ec:e0:50:28:51:ae:
56:98:4f:37:8d:0a:6b:d6:8f:05:95:55:a6:e5:3d:
2a:08:be:d5:8c:a7:0e:f8:b1:1f:f6:5b:be:7d:c6:
3c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:73:A0:02:80:88:59:0F:63:4B:42:E9:07:F7:77:1E:CA:39:7D:6A
X509v3 Authority Key Identifier:
keyid:64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/RnOgAoCIWQ9jS0LpB_d3Hso5fWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.61.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ad:f1:2e:a1:cb:00:c7:3d:9e:42:95:25:b1:dc:1d:f9:93:
55:fe:98:d7:97:b5:11:c5:28:4b:6d:48:d1:86:6c:13:db:67:
1d:fc:bc:23:2c:ea:da:ef:83:a7:77:27:16:da:2f:d0:4a:97:
c7:ed:70:a2:3a:80:d7:04:5f:46:c1:15:c3:6c:c0:a9:5c:eb:
2c:88:0c:e1:73:8c:91:88:36:32:39:5d:74:26:3a:a4:17:80:
0f:6b:35:1c:ea:0e:a0:17:52:8f:25:a0:5f:94:84:e6:8b:79:
1e:9a:32:b3:cd:87:ed:1f:b1:2f:6c:85:f8:43:d2:43:0f:27:
73:07:0b:04:eb:37:73:3f:c8:32:4c:f3:7c:70:a1:d0:d3:7b:
61:00:d4:b7:64:06:29:ec:70:ff:e3:32:c9:f0:b5:a7:4c:65:
b1:8c:d1:06:64:60:6e:fb:92:eb:96:2a:aa:19:76:dc:ea:5c:
fb:12:65:25:08:d3:0e:64:ed:b9:13:e8:a6:7d:c1:c3:e0:1f:
23:f1:39:0a:b7:26:1b:4e:b9:fe:1b:fa:b3:b9:ca:7f:31:55:
1d:0f:81:3c:40:c1:a6:99:b1:db:63:39:59:a8:2c:2b:54:4c:
7c:cb:be:ce:4f:2e:39:ec:3c:b2:f8:a0:a5:ea:2e:b1:ec:c5:
53:47:cc:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYx88buWharmsxSGNCImoXhEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZWUwNDg5MTU4ZmU5NWUxOTkxZmQ1Y2U3MjVlYTA2N2Ux
MWExZmIwHhcNMjMxMjE4MTI0MTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjczYTAwMjgwODg1OTBmNjM0YjQyZTkwN2Y3NzcxZWNhMzk3ZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkkrjTPJ3uNw4RfSW2DJmT7xqYqj
hqTEYcJUKmjB7SVVL/jnToGi8yaGyht3gx9dZvLmyp3q3B/akVYSgogmiivGdIIq
GzHWudVtCtmfpIIN0GHujigoDmTJY0XoZ22Q6H4oHdSFa5fAkrBRe7hdhD9SLWeD
e7CKp7kwunvkexipU+Lc0BgJ8/+ZXtXeSnDLlzi9DdAJfoxBm/22I3ZeWQYjIIbF
BqlGQPsX32VTsd8mXWMDi3zmytH0+Rge+N2fgeG+vOzHJY62jub+jCEJc/onGMYC
DgL1+1Ps4FAoUa5WmE83jQpr1o8FlVWm5T0qCL7VjKcO+LEf9lu+fcY82QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEZzoAKAiFkPY0tC6Qf3dx7KOX1qMB8GA1UdIwQY
MBaAFGTuBIkVj+leGZH9XOcl6gZ+EaH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk80RWlSV1A2VjRaa2YxYzV5WHFCbjRSb2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xOGFlMDItZTcyZC00NDMwLTg1ZDgt
NDczYzViYTU1MzYyLzEvUm5PZ0FvQ0lXUTlqUzBMcEJfZDNIc281ZldvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8xOGFlMDItZTcyZC00NDMwLTg1ZDgtNDczYzViYTU1MzYy
LzEvWk80RWlSV1A2VjRaa2YxYzV5WHFCbjRSb2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgM9MA0G
CSqGSIb3DQEBCwUAA4IBAQAwrfEuocsAxz2eQpUlsdwd+ZNV/pjXl7URxShLbUjR
hmwT22cd/LwjLOra74OndycW2i/QSpfH7XCiOoDXBF9GwRXDbMCpXOssiAzhc4yR
iDYyOV10JjqkF4APazUc6g6gF1KPJaBflITmi3kemjKzzYftH7EvbIX4Q9JDDydz
BwsE6zdzP8gyTPN8cKHQ03thANS3ZAYp7HD/4zLJ8LWnTGWxjNEGZGBu+5Lrliqq
GXbc6lz7EmUlCNMOZO25E+imfcHD4B8j8TkKtyYbTrn+G/qzucp/MVUdD4E8QMGm
mbHbYzlZqCwrVEx8y77OTy457Dyy+KCl6i6x7MVTR8xT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:28 2024 by rpki-client on console-fra.rpki-client.org