Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9Zlp99qZXKoOqamz2ewZ5Bl5rRc.roa
File: 9Zlp99qZXKoOqamz2ewZ5Bl5rRc.roa (raw, json)
Hash identifier: 3jSI3FKKh+2MzJ8GF+txjA9GSLnpTULp91PNbq3Na1w=
Subject key identifier: F5:99:69:F7:DA:99:5C:AA:0E:A9:A9:B3:D9:EC:19:E4:19:79:AD:17
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01886B30905232AAABF634D9468FF5C5E969
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9Zlp99qZXKoOqamz2ewZ5Bl5rRc.roa
Signing time: Tue 30 May 2023 05:45:24 +0000
ROA not before: Tue 30 May 2023 05:45:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15611
IP address blocks: 213.176.96.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
62.60.164.0/22 maxlen: 24
213.176.5.0/24 maxlen: 24
62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.143.0/24 maxlen: 24
62.60.141.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Jun 2023 07:26:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:30:90:52:32:aa:ab:f6:34:d9:46:8f:f5:c5:e9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 30 05:45:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f59969f7da995caa0ea9a9b3d9ec19e41979ad17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:d5:73:b2:fc:f8:de:eb:4f:cf:e9:17:02:
67:93:42:2a:16:af:2d:3c:a3:4c:ef:0a:f9:f4:9b:
3d:35:e4:11:b0:e0:0a:a3:15:26:46:8a:0c:e1:41:
ee:f1:f9:98:9d:c1:8a:57:b3:02:24:84:4e:e7:59:
91:1d:3e:30:24:36:ad:7b:68:c5:56:dd:4e:03:d2:
79:88:95:cd:d7:81:9d:8b:a0:8b:63:ec:a2:d5:52:
25:26:66:a4:3e:74:d6:05:79:a4:b3:64:85:25:1a:
86:9d:4d:73:0f:d0:c0:6f:45:b1:c3:80:5a:2d:3e:
07:31:a4:a4:22:62:4b:1f:89:66:8e:52:39:26:04:
75:71:2d:a2:02:4b:7f:8b:01:d9:65:41:dc:d6:65:
3d:c0:67:24:18:72:2b:a3:0d:50:9d:a9:02:8d:6a:
e3:40:18:07:f0:dc:90:9a:65:fc:5a:c7:d9:fa:4f:
bd:00:5e:a9:81:34:07:3c:0e:cf:36:d0:5c:ee:0f:
5c:68:4b:8f:a1:94:31:e0:bc:f0:f4:54:f4:f2:70:
fe:2d:84:00:f1:47:bb:56:bd:c4:82:b2:ca:96:49:
de:e3:50:f0:a1:fe:14:ec:0d:b3:10:1d:81:7f:ff:
1e:50:a2:8a:96:0e:79:c1:23:9d:53:7d:f9:f5:0d:
ee:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:99:69:F7:DA:99:5C:AA:0E:A9:A9:B3:D9:EC:19:E4:19:79:AD:17
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9Zlp99qZXKoOqamz2ewZ5Bl5rRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.143.255
62.60.145.0/24
62.60.164.0/22
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
Signature Algorithm: sha256WithRSAEncryption
20:9d:5c:a5:59:ff:36:db:24:32:b0:59:43:93:8d:78:d9:ab:
9e:16:90:a3:ed:22:28:78:50:06:14:2b:de:74:ef:7d:c4:4b:
93:48:27:36:46:e4:d9:0b:bd:8f:a3:71:47:fa:67:f4:3b:bd:
bf:ab:87:81:6c:3f:68:ce:e4:ab:c9:19:c4:7a:13:a0:da:20:
d2:14:08:4f:8b:54:15:91:d2:94:0d:e0:7e:29:fe:c8:04:4f:
8e:f5:b5:dd:e2:1e:da:dc:7b:05:05:54:b2:5f:6d:39:76:20:
c7:15:ce:3a:db:bb:32:f4:96:b0:77:cc:82:0e:65:78:51:60:
f7:fc:7f:62:ba:66:60:db:bb:e2:ff:c7:8f:88:5d:33:f2:56:
7a:17:4d:3c:90:31:b2:00:d8:f3:b2:40:61:2f:90:f1:02:dc:
df:4c:8d:1b:e1:2c:38:27:d3:6a:c8:a6:93:b4:ca:c9:28:c5:
de:48:6d:fd:f6:8c:6e:17:a2:b6:e4:e5:23:bb:9b:90:a1:0d:
50:48:c6:15:88:ff:19:a8:83:62:eb:91:5a:33:54:43:44:b5:
11:28:d9:bf:f8:3a:15:14:ca:db:59:3e:a8:2b:92:eb:ae:b2:
8e:d1:a1:8d:5e:8a:c8:85:87:88:40:39:64:3c:b2:78:73:03:
f2:82:4d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org