Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/wIrKUcn9okrGbIPTx0owJs8eq5g.roa
File: wIrKUcn9okrGbIPTx0owJs8eq5g.roa (raw, json)
Hash identifier: xi/JiemSJJt3O7Rx11krc+uQ0I2n06MqRUUTfpluzXE=
Subject key identifier: C0:8A:CA:51:C9:FD:A2:4A:C6:6C:83:D3:C7:4A:30:26:CF:1E:AB:98
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 018573C3E0DB5CD397EC8CFF9D0F3ABCF299
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/wIrKUcn9okrGbIPTx0owJs8eq5g.roa
Signing time: Mon 02 Jan 2023 18:34:54 +0000
ROA not before: Mon 02 Jan 2023 18:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34265
IP address blocks: 193.138.187.0/24 maxlen: 24
176.106.1.0/24 maxlen: 24
176.106.0.0/21 maxlen: 21
176.106.0.0/24 maxlen: 24
176.112.120.0/24 maxlen: 24
176.112.121.0/24 maxlen: 24
176.112.120.0/21 maxlen: 21
176.112.127.0/24 maxlen: 24
213.108.72.0/21 maxlen: 21
213.108.78.0/24 maxlen: 24
213.108.75.0/24 maxlen: 24
193.138.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:c3:e0:db:5c:d3:97:ec:8c:ff:9d:0f:3a:bc:f2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Jan 2 18:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c08aca51c9fda24ac66c83d3c74a3026cf1eab98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:43:2b:5e:7c:94:4b:44:f3:cb:f0:b3:5a:b6:
44:34:98:e6:e3:01:61:f6:c5:05:d4:01:ae:8b:a3:
c8:73:e9:70:73:ca:b6:ee:28:a6:a6:9f:58:25:15:
d3:9b:4a:86:4b:12:cb:89:7b:9e:6b:4d:ec:51:58:
ef:c1:b2:96:b4:6c:48:b3:a1:ac:8d:c8:54:03:0e:
34:59:09:14:93:6f:a0:3b:e7:f0:b1:de:bf:a4:1f:
3d:ac:25:1e:88:99:98:db:e0:3a:df:92:59:b3:bc:
a9:e7:01:fa:1a:f7:57:b2:19:48:66:9a:6b:08:04:
4b:1d:0b:41:9e:19:a7:dd:cb:ab:73:d3:6a:88:35:
ac:66:0c:f0:cf:c8:b9:87:a8:73:67:15:a2:d7:3d:
b2:38:80:bb:a2:18:88:6d:6b:d7:51:94:6f:96:dd:
99:9f:96:a4:b0:f8:a3:8b:b3:62:de:eb:fb:53:2f:
b1:a6:87:a1:cd:9d:c5:7d:c4:c1:78:2c:78:0a:ed:
4a:d1:66:45:11:f7:24:44:dd:ec:78:40:64:2e:f8:
8f:74:c9:2f:9f:9a:0f:94:49:b0:4c:fd:56:a2:bf:
a6:2c:e0:33:74:df:75:d9:07:e5:77:c0:02:34:8a:
7b:83:99:54:31:52:16:c0:34:88:54:03:2a:6a:cb:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8A:CA:51:C9:FD:A2:4A:C6:6C:83:D3:C7:4A:30:26:CF:1E:AB:98
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/wIrKUcn9okrGbIPTx0owJs8eq5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.106.0.0/21
176.112.120.0/21
193.138.184.0/22
213.108.72.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:a7:f0:7b:51:a4:8f:fc:fa:8f:5d:28:fb:8d:46:9d:ad:eb:
03:a2:bc:1f:e2:04:99:ef:d6:f0:42:0f:34:1a:d7:90:c4:24:
d4:2c:09:5e:3c:4d:8a:63:69:52:2e:c9:aa:23:f7:31:fc:ed:
ae:d0:e4:45:61:29:2a:8a:0e:e6:d1:06:5b:8c:21:51:54:90:
85:67:43:e2:f0:f5:66:e4:92:23:b6:b3:dc:78:d9:54:99:cf:
98:ee:7c:ec:87:40:af:3c:fb:d7:b9:14:de:5c:12:71:d7:3c:
d4:a4:5c:7e:66:66:d8:cd:57:9d:54:e6:a2:a3:77:9c:11:d3:
0b:37:8c:aa:19:56:4d:31:18:7e:f4:7d:c8:89:a9:6b:23:67:
92:a7:a3:76:3e:02:76:e6:c6:72:12:37:79:a4:9a:d3:ba:c3:
37:78:f3:ac:e3:44:60:4f:d7:81:48:3d:29:89:40:e2:c4:81:
0b:f4:a4:ea:3a:40:3e:31:1e:83:ff:25:3f:07:a5:bb:bd:48:
98:ee:cd:ad:76:47:c7:78:e9:43:66:c9:76:dc:20:dc:f6:1d:
e6:bc:b0:a1:fb:eb:b5:2b:c2:c2:65:45:76:cc:a6:45:c4:b2:
25:c9:aa:0c:37:4e:33:29:8f:d6:ff:a7:61:41:db:74:8e:33:
e3:42:5d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:42 2024 by rpki-client on console-fra.rpki-client.org