Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/88ULmBznDKu-fHPAgy_kSGdRZzA.roa
File: 88ULmBznDKu-fHPAgy_kSGdRZzA.roa (raw, json)
Hash identifier: nPu7FqzCpLL8XHi/6IFiceUDMPAHNZdFxPEdL0wTBJ8=
Subject key identifier: F3:C5:0B:98:1C:E7:0C:AB:BE:7C:73:C0:83:2F:E4:48:67:51:67:30
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018C5D154E401A0B39075C2A0D798A53B1CE
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/88ULmBznDKu-fHPAgy_kSGdRZzA.roa
Signing time: Tue 12 Dec 2023 08:12:06 +0000
ROA not before: Tue 12 Dec 2023 08:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15611
IP address blocks: 213.176.96.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
213.176.7.0/24 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.147.0/24 maxlen: 24
62.60.148.0/23 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
213.176.127.0/24 maxlen: 24
2001:790::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 14 Dec 2023 12:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:15:4e:40:1a:0b:39:07:5c:2a:0d:79:8a:53:b1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Dec 12 08:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3c50b981ce70cabbe7c73c0832fe44867516730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:fa:2e:97:09:0b:00:bb:33:00:75:6d:06:
03:8a:18:df:74:e5:49:d6:2e:55:3d:ed:f9:96:af:
14:b6:ea:88:83:e4:9e:06:9a:bc:30:43:66:ca:06:
f8:01:38:3e:d9:5c:be:6d:e7:bf:6a:39:4e:72:20:
0b:13:20:d8:92:cb:cf:fa:6b:ec:bd:f9:b8:8d:c6:
dc:23:9e:b9:ae:cf:f0:39:ef:7b:6c:44:0a:45:6b:
92:5d:13:df:3c:22:0a:26:b6:d3:70:1b:23:6e:53:
28:bc:dd:d1:79:a9:4b:8f:1a:c3:50:06:6e:31:a1:
18:0a:c0:58:00:23:a0:ad:29:a5:b1:82:c6:db:69:
0e:fe:1d:bc:ed:73:70:9d:23:f6:a4:03:6f:40:9a:
77:d1:e3:ca:98:4f:96:27:f4:14:7a:24:c2:4b:27:
26:e2:d0:b6:c1:70:3a:c2:5f:25:86:57:85:25:95:
ef:7c:3f:5f:6e:50:13:17:a1:c4:51:5b:e9:ab:e4:
88:32:e9:ea:22:a3:2d:4d:ee:b7:8a:95:6f:3c:89:
d7:2f:fd:60:0d:54:27:02:4e:cb:17:79:14:8e:b7:
a4:fe:67:ed:bb:9d:df:a0:84:d3:da:3a:6f:03:b2:
f4:91:07:aa:4d:04:86:04:f2:ad:ff:21:f7:31:2a:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C5:0B:98:1C:E7:0C:AB:BE:7C:73:C0:83:2F:E4:48:67:51:67:30
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/88ULmBznDKu-fHPAgy_kSGdRZzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.140.255
62.60.142.0/24
62.60.145.0/24
62.60.147.0-62.60.149.255
62.60.168.0/21
213.176.4.0/23
213.176.7.0/24
213.176.96.0/24
213.176.122.0-213.176.125.255
213.176.127.0/24
IPv6:
2001:790::/32
Signature Algorithm: sha256WithRSAEncryption
9a:06:ae:2a:bf:95:9c:34:4d:aa:4c:02:ab:50:a1:e6:db:ff:
7e:68:62:a4:f9:de:40:fc:23:c4:e8:6a:17:de:a2:97:e9:68:
4f:da:ad:2c:be:32:e8:63:c2:0d:ae:88:ac:c8:31:e7:a4:6d:
57:29:01:30:a6:70:7b:1c:2a:5b:9c:5f:29:24:8c:8b:cb:dd:
4b:39:62:ef:be:2b:63:0e:3a:e4:6d:b4:02:a0:cb:9a:d8:b7:
af:21:ad:57:11:71:ae:0f:23:5a:e8:cb:a9:4b:ad:91:2e:a0:
36:6d:ef:72:83:a9:cb:29:93:fe:be:57:22:8e:ff:60:68:63:
99:3b:26:4d:6c:f7:be:61:ce:bd:2f:55:2b:7b:9e:87:a0:74:
2e:1d:fd:37:4f:28:43:a8:75:52:09:62:8c:d6:ab:8c:c2:0b:
20:f3:f1:57:01:c2:f1:26:45:a7:14:ee:eb:fc:82:0f:ac:50:
f5:36:e9:7b:c6:ea:c3:a8:a5:c7:3d:ec:ae:64:35:8c:63:77:
11:e7:c9:95:24:53:be:05:d9:45:56:93:c8:9d:50:d3:b0:d7:
78:ee:ee:f1:82:ab:7b:04:0b:11:0b:c1:32:94:ba:2c:4c:76:
45:2e:5f:73:00:4b:9b:78:7a:cb:f2:8c:a0:67:75:9d:60:86:
8c:b6:c4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org