Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/AYzd_v3uf4p7dvHiMHFkpmo7a9I.roa
File: AYzd_v3uf4p7dvHiMHFkpmo7a9I.roa (raw, json)
Hash identifier: Uz9M1eBZ3CqmZqcAabjxwsmUeKWbzPGaanmPscgiPck=
Subject key identifier: 01:8C:DD:FE:FD:EE:7F:8A:7B:76:F1:E2:30:71:64:A6:6A:3B:6B:D2
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0188B39AC02E7D09C9CA7D996E6FD6AF67E2
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/AYzd_v3uf4p7dvHiMHFkpmo7a9I.roa
Signing time: Tue 13 Jun 2023 07:14:03 +0000
ROA not before: Tue 13 Jun 2023 07:14:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15611
IP address blocks: 213.176.96.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.188.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.196.0/24 maxlen: 24
62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.141.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.152.0/22 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Jun 2023 05:42:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:9a:c0:2e:7d:09:c9:ca:7d:99:6e:6f:d6:af:67:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 13 07:14:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=018cddfefdee7f8a7b76f1e2307164a66a3b6bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f3:18:56:9a:c8:4e:41:27:ea:94:4f:a2:8d:
6f:01:7d:06:ad:5e:5e:7f:5c:e0:01:6b:ab:d8:e2:
3d:bb:16:17:06:d1:09:e6:e8:14:25:06:d6:6a:ba:
a3:9e:c9:a1:d5:b9:bb:21:8e:11:bf:5c:65:d3:a8:
5d:0f:27:29:67:9b:ca:96:ce:e8:d3:ab:9b:bf:82:
0e:64:93:08:75:e1:7d:3b:20:f7:39:42:10:9a:d8:
b5:a5:e0:b0:9d:70:98:f1:64:31:f2:83:a4:ce:f3:
2a:6b:22:5a:c8:64:53:96:59:87:a6:8d:89:83:fe:
35:05:f7:a6:67:47:0a:a7:6e:8f:31:44:cc:41:b5:
53:ec:0b:50:ab:3e:19:8e:2f:93:92:1f:76:c4:df:
9e:1e:2f:4a:db:10:f0:0e:fa:58:38:bc:5f:7f:df:
54:c2:b4:74:48:c1:86:07:59:9f:49:61:75:cc:b5:
43:c5:55:74:46:bd:bc:82:2b:fb:62:47:90:db:ee:
fd:66:fc:2e:0b:4a:a5:ab:80:5d:6a:6c:30:45:75:
54:66:d3:37:8c:a1:86:38:39:3f:30:1c:18:7d:10:
1d:78:61:92:2b:54:35:61:66:9f:88:fa:90:f8:a2:
57:0e:8e:28:79:2b:af:88:6c:5d:6d:f3:2e:90:06:
23:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8C:DD:FE:FD:EE:7F:8A:7B:76:F1:E2:30:71:64:A6:6A:3B:6B:D2
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/AYzd_v3uf4p7dvHiMHFkpmo7a9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.142.255
62.60.145.0/24
62.60.152.0/22
62.60.184.0-62.60.196.255
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
Signature Algorithm: sha256WithRSAEncryption
41:a6:42:f8:9b:c5:25:3f:4e:a4:e4:9b:ba:8f:ee:d1:67:1e:
72:31:fa:65:4d:b3:f2:ab:7b:3c:32:a8:a2:16:82:69:a8:e3:
fb:72:6b:75:ac:4c:f9:3e:f9:98:71:2d:f5:71:49:1a:e9:e1:
aa:0d:76:70:9e:1d:44:19:fe:ad:5f:91:4c:e0:14:87:84:08:
5d:bc:e6:27:0c:0d:93:29:0d:71:cc:40:63:3a:74:2c:47:37:
ce:a1:97:fd:06:81:01:b0:fc:6d:c8:fc:91:aa:80:86:4e:52:
e9:75:0c:33:4b:39:8b:1f:31:ab:66:bf:b3:d2:32:88:d7:94:
16:7b:fc:85:cd:86:94:20:5f:55:31:eb:64:cb:de:f0:81:55:
ee:be:ca:84:8d:04:a2:66:85:0d:c8:94:90:3a:0a:ed:61:55:
2c:a8:0f:c6:9c:03:31:33:8c:9b:19:b0:fd:8c:a8:41:10:f9:
e6:0f:c0:79:c6:65:38:77:97:21:88:b8:06:d6:00:82:ed:5c:
df:5b:e3:6b:83:4c:90:2d:80:89:64:16:8b:26:9c:57:da:cd:
5a:ae:64:f6:04:f8:ea:90:a4:7c:85:7c:90:43:e2:7b:5a:21:
fc:d8:45:da:8f:c8:a5:67:19:4a:a6:7f:5a:c9:9c:8a:cc:31:
8b:17:af:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org