Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1Z-qkgybUhTgvWsGv70gdXzYamA.roa
File: 1Z-qkgybUhTgvWsGv70gdXzYamA.roa (raw, json)
Hash identifier: ze/Jg0790YVbbWQd/rxzs4K2cmrqLvKjKvyveoHZUKA=
Subject key identifier: D5:9F:AA:92:0C:9B:52:14:E0:BD:6B:06:BF:BD:20:75:7C:D8:6A:60
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CCA29C4278484FCBCF87589FD1A391F13
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1Z-qkgybUhTgvWsGv70gdXzYamA.roa
Signing time: Tue 02 Jan 2024 12:33:03 +0000
ROA not before: Tue 02 Jan 2024 12:33:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 213.176.2.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 06:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c4:27:84:84:fc:bc:f8:75:89:fd:1a:39:1f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 12:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d59faa920c9b5214e0bd6b06bfbd20757cd86a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:23:3e:1d:de:30:66:b8:6d:00:fd:20:67:
aa:96:32:fd:da:b8:0e:d2:16:3e:18:bf:4e:42:61:
5a:f1:cc:00:d0:3b:53:98:3c:ef:01:df:78:73:ab:
c3:72:7d:b3:64:aa:ff:91:58:bb:ea:62:e8:b8:f2:
d5:ce:a7:4e:6c:37:a2:37:ac:41:d4:66:5f:96:35:
ac:af:20:d5:6d:60:b9:7e:56:e2:60:bc:25:1c:7d:
4f:8d:eb:f1:a7:11:c2:f7:b4:93:1f:1e:72:7e:be:
50:95:b3:8d:75:eb:16:40:8a:25:a5:70:c0:0d:a1:
83:4d:b7:3c:12:13:8f:05:ef:d0:96:97:a3:69:b2:
b6:aa:44:da:99:c6:ef:f1:9f:85:77:25:56:fa:76:
95:17:ab:cd:be:95:e1:ec:ce:55:71:bd:71:e8:b0:
68:23:cf:67:e0:57:e8:22:5c:0c:f5:3b:f0:4a:b7:
d1:df:46:8f:e2:0e:6f:4c:46:d3:e0:80:f7:41:7a:
45:3b:5b:82:49:eb:af:a7:91:00:db:d5:ac:e2:5a:
c9:cf:63:1e:46:63:e8:c0:19:72:46:fb:59:b0:1e:
31:4e:34:6b:b9:ab:c6:65:fe:d4:b8:d6:ec:1f:aa:
a1:08:34:d7:be:51:ca:e1:6f:b9:3b:9e:d0:58:40:
17:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9F:AA:92:0C:9B:52:14:E0:BD:6B:06:BF:BD:20:75:7C:D8:6A:60
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1Z-qkgybUhTgvWsGv70gdXzYamA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.2.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:bd:3a:c2:18:8f:c5:99:4d:64:09:9e:98:64:f1:8c:bc:e7:
73:3d:4f:b4:43:12:a3:a7:f2:83:ed:6b:df:d6:96:5b:1e:21:
29:b4:50:3a:64:c2:49:39:cb:1a:95:22:d6:d1:e5:70:60:1b:
ca:c8:b1:60:ea:3d:9d:63:b7:bb:23:fc:43:6f:bf:39:fd:ce:
52:28:47:e1:fe:eb:a2:52:d3:7c:3b:d7:96:6d:90:b5:1e:14:
9b:8e:82:5a:9a:87:8f:cf:09:f7:46:45:ec:c4:ed:1a:fd:33:
c1:bf:1a:01:07:3f:d5:8c:7d:b4:04:83:be:2f:54:86:db:f8:
b8:59:9d:a5:1c:d0:00:1a:ce:87:c8:d9:d3:e6:33:ac:e3:9e:
c3:77:a3:b3:6f:c4:32:8d:77:b0:2a:c5:0f:0a:6a:21:f1:4e:
d9:47:56:fd:55:67:9e:47:84:e8:1e:c9:cf:dc:c9:1a:b4:22:
d6:ed:c4:0c:a7:6f:cf:0c:c4:3d:10:c9:a4:29:79:ee:8e:62:
b5:11:cf:75:09:8b:46:a1:e9:c3:25:a8:68:87:0c:c8:c2:02:
ea:06:a4:85:81:dc:2d:ab:46:e8:f9:ca:61:ee:b1:0a:ec:20:
39:00:cc:a0:4b:4b:86:4a:da:0e:68:5e:5d:ad:4a:2e:51:d8:
66:b8:6c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 07:25:59 2024 by rpki-client on console-fra.rpki-client.org