Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/61va-q8_3XcwC256fDAgk4hi81Q.roa
File: 61va-q8_3XcwC256fDAgk4hi81Q.roa (raw, json)
Hash identifier: MnfKnVXhy9igl8lPclJmsaPHRC+H9WpXI+JLTbqTgJM=
Subject key identifier: EB:5B:DA:FA:AF:3F:DD:77:30:0B:6E:7A:7C:30:20:93:88:62:F3:54
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01883DD22E743E691ABA03690B3860A8EE10
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/61va-q8_3XcwC256fDAgk4hi81Q.roa
Signing time: Sun 21 May 2023 10:19:24 +0000
ROA not before: Sun 21 May 2023 10:19:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15611
IP address blocks: 213.176.96.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
62.60.128.0/22 maxlen: 24
62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.143.0/24 maxlen: 24
62.60.141.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 May 2023 11:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3d:d2:2e:74:3e:69:1a:ba:03:69:0b:38:60:a8:ee:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 21 10:19:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb5bdafaaf3fdd77300b6e7a7c3020938862f354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:44:de:75:d0:01:4d:b2:5a:83:e5:d6:9e:
9b:0c:b3:f9:b6:7b:fa:d4:22:ac:9c:62:bd:d0:20:
7e:95:30:0a:94:3a:8b:95:c9:83:64:56:e6:8b:95:
f8:2b:19:ec:3f:d2:cd:92:e7:51:3e:01:ad:d7:5d:
83:be:6c:05:58:97:bf:6b:84:78:c7:2c:11:98:c0:
b0:0d:f7:2b:d8:bb:40:8f:82:55:cd:93:53:29:3b:
b2:d4:3c:d0:52:02:33:1f:cd:de:05:39:80:41:35:
bb:b4:e8:9c:0e:27:dd:fa:4c:77:8b:bf:db:14:1f:
81:3a:e2:f1:03:64:e8:c9:66:5f:46:b9:ae:b1:ee:
4c:b7:63:96:78:13:37:89:88:79:51:32:b3:1a:ee:
c2:15:25:94:90:db:72:38:b7:47:23:30:31:e7:88:
e0:37:f8:79:07:3d:3f:fa:f2:7e:e2:d2:13:72:54:
db:8e:ed:a1:64:18:33:16:3d:63:18:fc:d3:c0:83:
32:37:0e:34:e8:eb:f6:ec:53:9f:e9:97:de:c4:03:
58:75:3f:d8:ec:5e:fc:12:1d:e8:bb:52:df:0d:c8:
3c:e4:15:07:12:6d:bb:3b:45:d3:62:e7:79:af:25:
ef:4d:2f:12:6b:94:87:41:c7:8d:2a:f9:7a:e7:00:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5B:DA:FA:AF:3F:DD:77:30:0B:6E:7A:7C:30:20:93:88:62:F3:54
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/61va-q8_3XcwC256fDAgk4hi81Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0-62.60.137.255
62.60.139.0-62.60.143.255
62.60.145.0/24
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
Signature Algorithm: sha256WithRSAEncryption
58:e8:67:da:b4:bc:8b:66:ca:f8:4e:1d:11:f1:53:e5:97:1b:
35:8b:0c:8c:d5:f4:e3:f1:4c:2f:ac:3c:01:fb:9b:80:e5:00:
85:fa:fa:8e:84:f7:95:b2:df:9f:44:69:e7:e4:60:6d:de:6a:
00:e9:75:f0:b6:20:32:39:48:25:9d:0d:98:7c:a9:e9:90:5a:
a5:ba:22:8d:61:5e:41:f8:eb:3e:a4:1c:0c:09:41:e4:cb:78:
0c:83:68:f0:4c:36:15:a1:da:b3:ad:f9:b1:65:ba:a4:fa:f3:
38:60:30:61:96:49:ef:d1:4b:e9:24:ef:ce:e1:37:33:59:e1:
10:7f:f2:3f:e8:d0:c6:8a:2f:db:09:1c:16:19:c4:a5:84:6c:
6c:3d:b7:f3:b0:b6:6b:c4:ac:6f:25:78:5e:57:ae:6a:6d:7b:
00:91:bf:f7:46:c8:64:b2:b7:9b:5c:0e:a3:35:fd:f1:2b:15:
8a:3d:7b:1f:3e:cd:79:c3:4b:3d:fa:bc:35:c1:bb:61:ed:4f:
92:45:bd:92:89:37:f5:fc:28:03:50:fa:7e:72:01:8c:96:26:
4f:fb:35:6b:73:17:42:17:3f:da:32:a1:aa:39:35:e1:0e:5c:
2d:a9:0b:bd:a7:c9:56:6d:bd:4e:25:f4:b3:b5:a4:f9:45:b3:
ab:9c:01:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org