Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/rNu-9vrOgqGqKL5ppTUH8a2H_vY.roa
File: rNu-9vrOgqGqKL5ppTUH8a2H_vY.roa (raw, json)
Hash identifier: fI0/HB/V19urHCE+3+wYDeefYAbgvRugXr5xAQDQJzM=
Subject key identifier: AC:DB:BE:F6:FA:CE:82:A1:AA:28:BE:69:A5:35:07:F1:AD:87:FE:F6
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019619ED1D91D8B01346A12BC0D41142653A
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/rNu-9vrOgqGqKL5ppTUH8a2H_vY.roa
Signing time: Wed 09 Apr 2025 09:41:32 +0000
ROA not before: Wed 09 Apr 2025 09:41:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59441
IP address blocks: 62.60.128.0/21 maxlen: 24
62.60.164.0/22 maxlen: 24
62.60.200.0/22 maxlen: 24
62.60.204.0/22 maxlen: 24
62.60.212.0/22 maxlen: 24
213.176.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Apr 2025 10:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:ed:1d:91:d8:b0:13:46:a1:2b:c0:d4:11:42:65:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Apr 9 09:41:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acdbbef6face82a1aa28be69a53507f1ad87fef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:81:3d:69:93:f4:a9:3a:e2:1e:3d:99:22:
1a:84:a1:72:13:f4:af:6a:dc:ea:8b:fd:1b:5b:2c:
47:76:22:b7:7d:0c:2b:bf:e6:59:04:b6:c5:96:ae:
76:6a:d6:30:0b:da:57:af:dd:f1:30:9b:21:c7:8b:
9b:dc:8d:57:6d:c4:91:2d:45:ca:e3:b5:9e:b5:26:
27:c1:d5:bf:88:54:11:e1:44:9c:87:ea:60:1c:07:
c1:e7:0d:19:b9:3e:5e:b1:5c:33:ed:7d:9a:2a:55:
66:7a:5e:ed:99:8d:57:43:f8:8f:57:ab:7c:bf:50:
8f:f7:59:91:0b:96:04:15:d4:26:a1:50:48:51:ed:
fe:ba:e1:2c:3c:47:17:6e:5b:dc:0a:24:db:82:e8:
e1:76:e5:a9:50:df:4e:8c:97:e6:97:3c:83:dd:0b:
b6:10:8c:2e:44:70:7f:2c:f6:c0:42:87:9b:7d:bc:
e0:10:3a:37:08:69:57:f7:d5:a2:8c:e5:b4:51:8c:
bc:ed:99:a6:bc:35:6f:ce:f4:15:fd:10:d1:e7:42:
3a:f7:f1:8b:a4:f9:7c:54:b8:9e:19:8f:39:af:c5:
37:30:3d:f6:2e:8b:8b:dc:08:54:65:b8:2e:6e:e0:
1f:c5:36:ca:c9:dd:4b:5c:59:f8:9a:9a:eb:a5:25:
73:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DB:BE:F6:FA:CE:82:A1:AA:28:BE:69:A5:35:07:F1:AD:87:FE:F6
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/rNu-9vrOgqGqKL5ppTUH8a2H_vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0/21
62.60.164.0/22
62.60.200.0/21
62.60.212.0/22
213.176.28.0/22
Signature Algorithm: sha256WithRSAEncryption
94:8e:65:b2:e4:93:5c:e2:fb:28:dd:a4:dc:b7:94:6d:a2:89:
04:8f:7a:8d:76:fe:48:0c:8b:5c:35:73:7f:9b:e7:b3:cc:f3:
68:68:8c:c5:02:17:51:9c:da:b4:51:62:40:5c:54:81:6a:3b:
5e:f1:d4:98:f0:ea:04:76:61:0d:1e:46:8e:0b:e0:7c:7f:31:
ab:2c:e1:23:8e:8f:c3:d4:c7:72:8a:93:fb:d2:70:94:fa:21:
3b:b2:19:48:5c:8e:84:d8:b3:6e:92:b9:96:48:58:bf:dd:84:
35:3f:5e:7f:9b:16:77:0e:b5:46:f8:6b:1b:e4:9f:28:77:ec:
3a:54:cf:03:1e:d7:5a:63:82:94:48:a6:a6:f7:5f:8b:6f:fe:
e8:b1:1a:4e:c4:5f:70:b1:8f:42:b5:83:3f:72:d3:82:ca:ff:
ba:33:f9:01:35:33:8e:0d:55:7f:1d:8f:a7:d6:37:b7:44:68:
f4:e9:6a:77:c4:d0:d6:03:7a:37:3a:4a:8e:08:81:05:e3:2b:
3c:d7:27:59:06:6f:07:9c:38:1e:31:25:40:46:0a:ba:ea:67:
61:27:fd:9b:d3:b0:38:1f:97:67:00:ce:78:0d:0d:97:40:5c:
5a:e5:5e:9a:8c:71:6b:3f:5b:11:8c:69:72:a0:8a:67:28:6f:
54:41:d0:bf
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZYZ7R2R2LATRqErwNQRQmU6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjUwNDA5MDk0MTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2RiYmVmNmZhY2U4MmExYWEyOGJlNjlhNTM1MDdmMWFkODdmZWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKyBPWmT9Kk64h49mSIahKFyE/Sv
atzqi/0bWyxHdiK3fQwrv+ZZBLbFlq52atYwC9pXr93xMJshx4ub3I1XbcSRLUXK
47WetSYnwdW/iFQR4USch+pgHAfB5w0ZuT5esVwz7X2aKlVmel7tmY1XQ/iPV6t8
v1CP91mRC5YEFdQmoVBIUe3+uuEsPEcXblvcCiTbgujhduWpUN9OjJfmlzyD3Qu2
EIwuRHB/LPbAQoebfbzgEDo3CGlX99WijOW0UYy87ZmmvDVvzvQV/RDR50I69/GL
pPl8VLieGY85r8U3MD32LouL3AhUZbgubuAfxTbKyd1LXFn4mprrpSVzUQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKzbvvb6zoKhqii+aaU1B/Gth/72MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvck51LTl2ck9ncUdxS0w1cHBUVUg4YTJIX3ZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDPjyAAwQC
PjykAwQDPjzIAwQCPjzUAwQC1bAcMA0GCSqGSIb3DQEBCwUAA4IBAQCUjmWy5JNc
4vso3aTct5RtookEj3qNdv5IDItcNXN/m+ezzPNoaIzFAhdRnNq0UWJAXFSBajte
8dSY8OoEdmENHkaOC+B8fzGrLOEjjo/D1MdyipP70nCU+iE7shlIXI6E2LNukrmW
SFi/3YQ1P15/mxZ3DrVG+Gsb5J8od+w6VM8DHtdaY4KUSKam91+Lb/7osRpOxF9w
sY9CtYM/ctOCyv+6M/kBNTOODVV/HY+n1je3RGj06Wp3xNDWA3o3OkqOCIEF4ys8
1ydZBm8HnDgeMSVARgq66mdhJ/2b07A4H5dnAM54DQ2XQFxa5V6ajHFrP1sRjGly
oIpnKG9UQdC/
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:03:45 2025 by rpki-client