Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/BC4jdkuThAu-BU7jOlXN7hcBRzo.roa
File: BC4jdkuThAu-BU7jOlXN7hcBRzo.roa (raw, json)
Hash identifier: ihICLuaV1uIu6cnk7Hkul9+nO+eUb93hPBQUR1jl0Mw=
Subject key identifier: 04:2E:23:76:4B:93:84:0B:BE:05:4E:E3:3A:55:CD:EE:17:01:47:3A
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018AFE2824887A97B44101B35203CF13D513
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/BC4jdkuThAu-BU7jOlXN7hcBRzo.roa
Signing time: Thu 05 Oct 2023 04:45:58 +0000
ROA not before: Thu 05 Oct 2023 04:45:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211421
IP address blocks: 62.60.146.0/23 maxlen: 24
213.176.6.0/23 maxlen: 23
213.176.121.0/24 maxlen: 24
213.176.120.0/23 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Oct 2023 11:14:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:28:24:88:7a:97:b4:41:01:b3:52:03:cf:13:d5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 5 04:45:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=042e23764b93840bbe054ee33a55cdee1701473a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:78:9f:fa:8e:0e:9a:32:dc:c8:96:4c:6c:
72:9a:c6:3c:ad:df:82:0f:65:b8:66:c1:9d:10:89:
a6:f4:4a:58:d0:dd:1c:9f:34:df:91:ba:6a:ae:ba:
d4:d0:45:f9:1d:69:9b:f1:ce:e1:c8:08:a0:1a:0a:
d0:d9:53:fc:53:6e:65:a5:b9:af:07:2b:49:ef:f1:
b6:b6:5f:e4:96:2e:2f:89:b6:57:95:2f:e1:f0:1b:
90:80:d2:8e:56:99:e9:be:1e:f3:fa:7e:d0:59:56:
51:c6:1c:8a:dc:73:a9:c6:60:db:a3:14:42:ac:7a:
a5:2a:98:86:63:fb:8c:19:06:7f:d8:8e:f9:fe:a0:
87:3a:a8:1f:dd:c7:3a:ef:c7:50:f0:56:f7:4b:b1:
65:0f:3a:75:1e:a5:b1:4d:e6:06:f2:d1:4d:b5:8b:
54:e8:ce:f9:fc:62:45:3d:61:09:fa:5e:0d:2a:60:
aa:68:1e:05:94:04:9b:e0:b5:5d:dc:66:41:3c:29:
c1:38:ab:3d:82:ca:09:26:21:b5:ce:e5:db:53:73:
68:36:8d:01:47:a2:a1:5c:10:3f:00:f2:47:05:51:
7b:80:b0:03:10:57:58:62:92:69:3c:24:3d:a2:6b:
d2:ff:6f:39:ec:f5:ed:07:fc:73:c2:ab:81:20:06:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2E:23:76:4B:93:84:0B:BE:05:4E:E3:3A:55:CD:EE:17:01:47:3A
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/BC4jdkuThAu-BU7jOlXN7hcBRzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0/23
62.60.196.0/22
213.176.6.0/23
213.176.120.0/23
Signature Algorithm: sha256WithRSAEncryption
51:07:33:a7:43:b6:0e:63:ed:cb:98:03:cd:d5:7f:05:03:b2:
ca:72:43:84:a4:44:d9:9b:ba:28:02:55:80:a4:c7:92:15:8a:
6c:8e:b2:93:ba:95:32:61:f0:af:db:51:05:75:16:e1:77:ab:
f8:c7:32:1c:31:e8:92:c4:6c:62:72:d8:f1:06:a7:3c:7f:2a:
14:35:79:1e:f0:41:67:5b:92:06:88:95:d0:e2:59:13:12:8d:
86:bc:1e:d3:e9:61:27:b9:1f:45:04:88:7b:01:89:b3:9d:b9:
f9:31:7a:cd:b8:bf:f7:d6:c0:28:28:c5:ea:6f:ed:d7:bd:86:
f3:84:d9:a2:21:74:21:5a:08:95:8b:ae:41:01:a6:b8:17:6a:
1b:11:84:7d:51:d5:cd:f3:bc:6d:75:c4:2a:38:e6:0a:8a:ff:
b1:26:ef:56:df:da:53:5e:bc:00:aa:97:93:05:71:20:c6:8c:
57:6f:e1:74:63:80:ac:12:fc:c4:f2:d7:36:8b:a6:f1:89:67:
d9:b6:33:79:37:4f:f2:e5:bd:1e:d9:6b:ef:ab:a5:ec:69:3d:
0c:7c:ce:c8:24:b7:17:2b:cd:b6:7f:bf:72:7c:c7:56:e0:e7:
72:10:de:4d:5b:1f:66:53:2c:dc:57:f2:f1:de:c1:51:d7:41:
fb:b4:aa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org