Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6NmgJol3elVqXx7bBeNYdmDErNs.roa
File: 6NmgJol3elVqXx7bBeNYdmDErNs.roa (raw, json)
Hash identifier: VmmrF+DEfXMnOuGBgNpMyFJgr3sqmH8iKYwUM+DnBWM=
Subject key identifier: E8:D9:A0:26:89:77:7A:55:6A:5F:1E:DB:05:E3:58:76:60:C4:AC:DB
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CCA29C03A9433CD4AB4BECC95D0097B15
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6NmgJol3elVqXx7bBeNYdmDErNs.roa
Signing time: Tue 02 Jan 2024 12:33:02 +0000
ROA not before: Tue 02 Jan 2024 12:33:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15611
IP address blocks: 213.176.96.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.147.0/24 maxlen: 24
62.60.148.0/23 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
213.176.127.0/24 maxlen: 24
2001:790::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 08 Jan 2024 02:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c0:3a:94:33:cd:4a:b4:be:cc:95:d0:09:7b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 12:33:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8d9a02689777a556a5f1edb05e3587660c4acdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:34:b9:32:1d:67:3a:1f:5d:3e:28:a5:4e:9b:
55:c1:8e:d9:c9:fc:15:b7:cd:c2:f6:86:15:cb:41:
06:fe:ab:7b:85:03:80:94:72:b5:ff:a9:b6:00:3b:
b3:66:af:2c:c6:96:77:4c:3a:6b:ed:2f:c0:22:57:
96:d1:cd:53:72:8c:94:5c:18:64:fc:6b:57:c5:c7:
43:05:d2:dc:5a:e5:fb:0d:2c:20:42:b7:b7:a4:75:
90:9b:8a:c6:fa:c9:6a:40:19:78:d7:ae:5a:bc:0b:
1d:e4:57:75:bb:4c:3a:3d:26:2e:33:8c:05:87:4a:
99:0b:c8:f0:c0:18:e9:26:d0:cb:63:97:96:2a:c1:
23:89:44:67:52:aa:9f:8d:ac:8f:08:93:78:b9:0c:
a2:45:c3:d9:54:29:d9:ce:e7:b8:9e:fd:08:e1:22:
c0:b3:ae:55:10:93:af:bf:d0:b4:67:1f:af:2c:6a:
43:06:1c:7c:fb:71:ac:cd:c8:e7:c6:c7:87:57:dc:
2f:2e:84:1d:52:74:05:08:96:11:3d:67:5d:ed:71:
0b:dc:3c:06:05:76:70:8e:ca:32:03:6c:89:fc:35:
89:65:72:30:9e:cb:63:f6:81:49:b4:bc:04:57:68:
1b:bf:c0:6a:df:9b:1e:7c:02:91:1d:cf:1b:83:be:
cd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D9:A0:26:89:77:7A:55:6A:5F:1E:DB:05:E3:58:76:60:C4:AC:DB
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6NmgJol3elVqXx7bBeNYdmDErNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.140.255
62.60.142.0/24
62.60.145.0/24
62.60.147.0-62.60.149.255
62.60.168.0/21
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
213.176.127.0/24
IPv6:
2001:790::/32
Signature Algorithm: sha256WithRSAEncryption
5f:73:51:a3:62:77:a4:8c:4f:e9:c1:a7:df:23:f2:1e:dc:d6:
12:95:b6:4a:cc:ce:d8:14:7e:29:ed:18:ef:71:59:4d:69:1f:
62:d6:7b:56:0b:d9:ea:54:d1:fe:23:a6:4d:3c:68:30:9a:e6:
d5:9d:77:79:3a:89:72:ef:f5:9a:66:9a:f1:34:89:8c:bd:51:
57:e0:7c:59:42:4b:42:4c:81:a4:bd:8a:ca:44:c6:27:a0:f3:
45:20:f4:15:0d:ac:82:6a:c0:62:8e:8f:47:4c:3f:3a:e8:77:
34:1a:eb:7c:ac:65:6e:de:6d:01:e4:94:47:b1:cc:e3:52:ee:
cf:9a:0b:1a:11:13:09:51:b4:b7:92:a4:92:35:42:8f:27:d1:
9b:45:5d:20:ef:23:09:00:8b:7d:55:fb:58:ef:88:00:86:23:
45:84:cd:ea:70:71:0e:83:a8:60:94:7f:a2:26:bc:ff:36:55:
d9:f7:8d:6a:a8:92:85:c4:0e:e1:37:73:42:1a:4c:a0:bf:f2:
3f:45:af:95:5b:c2:e7:d7:ec:03:25:1f:8c:ef:7c:47:99:aa:
ea:e6:08:d1:44:ba:3c:a9:0d:4e:dd:f5:2a:5b:93:ef:5d:0a:
d1:7c:87:78:d3:3c:78:3b:59:47:53:dc:66:92:00:12:0d:8a:
89:a5:55:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org