Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/5wf087f2OkpNrJVsA8JkdTcDXME.roa
File: 5wf087f2OkpNrJVsA8JkdTcDXME.roa (raw, json)
Hash identifier: xoDbClAOlZ0AMvxpQ8L8uKhtBr3rjUFVrUTitlcNWrI=
Subject key identifier: E7:07:F4:F3:B7:F6:3A:4A:4D:AC:95:6C:03:C2:64:75:37:03:5C:C1
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01867A086B42639E915EC89703B3ACC3B413
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/5wf087f2OkpNrJVsA8JkdTcDXME.roa
Signing time: Wed 22 Feb 2023 16:50:17 +0000
ROA not before: Wed 22 Feb 2023 16:50:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21700
IP address blocks: 213.176.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Feb 2023 06:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:08:6b:42:63:9e:91:5e:c8:97:03:b3:ac:c3:b4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 22 16:50:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e707f4f3b7f63a4a4dac956c03c2647537035cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:a3:51:55:ce:1e:0c:07:71:d8:59:49:57:
6c:fe:5a:80:78:b5:b1:d7:48:9a:1b:c6:85:dc:e8:
9c:87:e3:cd:6a:5f:8b:17:a5:b2:dc:b0:2f:af:c1:
5a:7d:06:70:5a:15:46:d0:32:2e:2c:c5:05:9b:e1:
7c:47:52:65:0a:06:84:9d:17:25:1e:c2:70:4a:65:
3b:05:55:03:05:e9:c3:91:50:cf:22:1c:23:c1:fc:
31:02:8e:7e:1d:48:1c:7c:ad:32:cf:d4:b7:d7:af:
25:da:9a:3e:4d:77:02:73:1a:1d:fc:ba:dc:94:06:
e6:ff:40:87:5e:56:e4:77:07:c9:7c:9a:3b:89:42:
56:5d:ee:13:90:4b:44:61:a1:16:08:38:c4:65:d9:
eb:83:40:ef:56:b6:93:f0:87:c3:cb:c2:04:64:ae:
8a:77:81:4d:f9:02:18:23:93:17:29:e0:25:3d:ea:
14:96:77:92:fe:59:1b:fb:36:e1:77:a8:dd:4c:de:
3e:3e:fd:6b:84:77:65:25:55:0b:10:fd:7d:aa:a3:
2c:c4:3a:9c:2e:3d:37:51:2d:4d:1c:d4:a7:ec:12:
3f:28:b6:c8:dc:24:39:a5:12:c9:fc:b0:be:63:2b:
f7:18:75:bf:c0:86:1c:a0:06:34:15:f3:27:45:38:
a4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:07:F4:F3:B7:F6:3A:4A:4D:AC:95:6C:03:C2:64:75:37:03:5C:C1
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/5wf087f2OkpNrJVsA8JkdTcDXME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:c8:ca:38:e0:dd:96:2a:cd:5f:8b:10:94:a0:d1:17:67:11:
20:89:dd:5e:af:0d:3f:5c:23:37:8a:73:42:9a:bb:05:e0:81:
0b:9b:90:af:6e:db:72:bb:c4:44:de:df:34:c6:f9:9f:47:fb:
f0:20:e0:e1:e8:05:dc:d0:23:d0:3a:18:e6:ab:0b:60:f4:55:
bf:24:f5:af:e3:3a:94:19:fb:28:b2:3d:fd:5c:15:44:18:4f:
b2:9f:79:08:24:2a:07:82:6c:91:ef:24:9b:08:64:9c:bf:58:
74:45:c1:7f:fc:ca:08:11:f1:dd:df:83:b6:dc:ae:8a:5f:86:
cb:f3:0c:78:f1:0e:c9:d9:ec:e0:d3:1f:81:e7:8f:d4:0a:f5:
8b:3a:07:0e:8d:06:5f:69:56:af:3a:67:a9:64:76:6f:b1:8a:
e4:09:04:8e:bc:63:3e:c6:4e:d1:e1:96:29:3b:d2:a9:0e:3c:
8f:d2:d4:9a:ea:c6:79:0c:c1:43:9d:5a:01:8c:e1:79:3e:78:
01:95:17:cf:b1:6d:a3:ec:c7:19:6c:52:f3:57:ac:33:4c:76:
de:02:6a:90:62:43:b4:94:dc:00:04:64:2e:94:7c:b7:8b:d4:
44:bf:0a:02:8c:26:fa:5d:39:4c:c7:12:fc:ba:72:fb:ab:93:
48:a3:54:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org