Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/30FRyH71m45X9evdusVi91C6R04.roa
File: 30FRyH71m45X9evdusVi91C6R04.roa (raw, json)
Hash identifier: OoBB++Te7fl9fgKWt/gpCs+328j5Xw7Gyrw7PN+cIeM=
Subject key identifier: DF:41:51:C8:7E:F5:9B:8E:57:F5:EB:DD:BA:C5:62:F7:50:BA:47:4E
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01866FCA5A34493EE4D1F0DA52BD3B563D1C
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/30FRyH71m45X9evdusVi91C6R04.roa
Signing time: Mon 20 Feb 2023 17:06:17 +0000
ROA not before: Mon 20 Feb 2023 17:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206065
IP address blocks: 213.176.68.0/22 maxlen: 24
213.176.88.0/22 maxlen: 24
213.176.112.0/21 maxlen: 24
213.176.20.0/22 maxlen: 24
213.176.24.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Feb 2023 14:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:ca:5a:34:49:3e:e4:d1:f0:da:52:bd:3b:56:3d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 20 17:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df4151c87ef59b8e57f5ebddbac562f750ba474e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:81:18:84:4e:6f:b3:59:1b:b1:43:fe:64:
73:e1:24:08:c2:a4:e0:fd:5a:08:74:80:40:e2:71:
94:c8:a2:fb:1c:98:5c:8c:01:47:f0:de:24:6a:ea:
ed:c9:44:c0:87:b4:d3:5c:c3:12:9a:a2:ad:00:d3:
fc:f2:00:98:b0:74:40:11:cb:9e:47:81:13:49:47:
15:a4:fe:af:6f:3e:6a:53:63:7c:8f:ea:ee:31:c3:
d3:05:e7:55:e8:09:55:53:bf:19:72:2c:10:2c:82:
63:58:1b:ca:ef:91:d5:09:09:5e:88:8a:f6:9b:0d:
84:98:7f:02:e8:df:5b:92:22:ae:df:f7:e3:7b:39:
b5:25:11:ba:2a:67:81:10:60:32:c9:f1:29:0a:45:
b9:4f:ab:a4:56:18:26:39:0d:51:bf:99:d0:39:5c:
7c:e0:7f:39:cf:3d:ea:fd:03:f0:66:81:5c:54:97:
bc:6f:45:03:74:b3:9b:96:d0:aa:8c:fe:a2:38:cc:
da:29:ea:e6:0c:50:cd:46:71:60:58:8e:93:a2:45:
bd:1a:fc:32:91:9e:a9:aa:ad:61:14:74:7b:88:52:
97:fe:02:ae:10:ff:34:b6:b6:ee:f1:f0:8a:54:92:
29:ef:b8:74:ee:d7:9e:9a:fb:94:c9:71:75:18:bc:
bc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:41:51:C8:7E:F5:9B:8E:57:F5:EB:DD:BA:C5:62:F7:50:BA:47:4E
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/30FRyH71m45X9evdusVi91C6R04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.20.0-213.176.27.255
213.176.68.0/22
213.176.88.0/22
213.176.112.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:4f:4f:d1:41:59:c5:7e:04:13:bd:f7:0e:d8:23:51:b2:35:
5d:c5:bb:4e:9b:2d:8a:ab:79:a6:d1:bd:cb:89:b7:1e:28:c7:
23:96:44:24:1e:1a:41:78:51:67:e3:7a:98:88:28:6e:42:ad:
28:bc:ba:39:ae:c1:25:df:f2:ea:91:6a:73:a0:30:4c:7b:8b:
b7:5e:01:c1:ea:49:af:1b:c9:cb:63:62:4c:e1:8e:ea:da:e6:
8a:10:12:bb:d3:6e:00:7e:13:a6:af:ef:08:17:c5:6b:af:bc:
0f:d0:d7:20:d8:a1:de:be:2d:b5:eb:07:77:e7:c0:37:ee:25:
cc:1b:40:16:6d:02:c2:49:f5:57:74:3d:3a:07:ae:5d:ae:7c:
3b:62:76:01:cd:7d:09:45:d7:47:70:6e:02:01:4a:54:95:c7:
c4:84:c8:57:0c:a1:89:cc:6c:2f:ab:6e:48:73:6c:ee:e3:9a:
9d:8f:75:66:12:71:79:90:97:a4:c4:36:58:48:62:14:16:b6:
2f:c3:14:3c:e0:f1:5f:8c:be:54:41:e7:56:0c:da:e8:70:af:
60:9d:5f:e9:42:09:8a:da:55:bf:1b:19:69:42:93:24:aa:75:
d9:17:b6:51:b1:d9:16:b5:c2:86:61:7b:d6:67:a1:77:69:7f:
8a:45:d9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org