Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Dii33uCZTdCSGcaWXZvvTQ4vbCU.roa
File: Dii33uCZTdCSGcaWXZvvTQ4vbCU.roa (raw, json)
Hash identifier: L6Z0xg7x8TZvbdPyCDOSYcD3D+P9x8OFFxRi8NBe+6o=
Subject key identifier: 0E:28:B7:DE:E0:99:4D:D0:92:19:C6:96:5D:9B:EF:4D:0E:2F:6C:25
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018C5D154EBEFDA26560189D94E2E63A0AD0
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Dii33uCZTdCSGcaWXZvvTQ4vbCU.roa
Signing time: Tue 12 Dec 2023 08:12:06 +0000
ROA not before: Tue 12 Dec 2023 08:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211421
IP address blocks: 213.176.121.0/24 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:15:4e:be:fd:a2:65:60:18:9d:94:e2:e6:3a:0a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Dec 12 08:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e28b7dee0994dd09219c6965d9bef4d0e2f6c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0b:a4:5b:5e:68:51:07:96:5d:de:69:c7:bc:
6a:ab:6c:9d:9e:c4:24:cc:00:db:3a:c7:41:f0:a5:
cf:9e:c4:fa:6c:a6:97:7f:f6:e8:d2:26:c3:8e:04:
d9:82:f6:9b:14:d3:6c:be:b2:c0:06:cd:00:a2:68:
42:f7:83:09:cb:f9:e8:29:be:fc:03:f4:58:ce:02:
88:90:c2:4d:85:3e:7c:6e:0b:dd:b4:58:27:92:9d:
a0:05:84:3a:ae:cc:55:ab:9f:4a:fc:0c:b9:2c:37:
ba:f3:b7:5d:1b:90:73:cf:6b:d5:f0:c9:8b:7c:f8:
71:c1:33:88:b8:b2:49:f1:14:1d:ec:99:eb:99:c5:
ed:62:94:01:4d:76:07:dc:88:85:43:d3:2b:71:02:
60:72:5b:b7:89:6a:16:aa:5e:1e:56:f1:19:29:7e:
d4:ff:6d:34:66:88:e2:2f:5e:2b:15:2a:bd:8a:c5:
86:83:32:d3:09:ac:9c:66:44:64:0b:35:cd:82:35:
73:5a:a8:ee:73:49:91:99:d6:f7:a8:e8:2f:9c:9b:
59:78:39:67:d6:03:9c:67:f3:bc:7b:9f:fe:77:1e:
45:11:91:ee:94:0d:31:37:e9:6f:b3:f7:73:b6:84:
70:11:b2:db:69:3a:38:32:25:1b:1c:e0:47:8a:a3:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:28:B7:DE:E0:99:4D:D0:92:19:C6:96:5D:9B:EF:4D:0E:2F:6C:25
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Dii33uCZTdCSGcaWXZvvTQ4vbCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.196.0/22
213.176.121.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:95:0e:55:0d:f5:ff:c7:77:41:58:e3:c8:b0:c5:72:4d:06:
f6:ac:e3:f4:d6:10:03:a8:01:7c:68:28:ea:51:6b:ad:2f:b1:
b9:73:f4:8e:bf:cd:43:65:3c:e9:08:69:49:3d:f1:8d:41:fa:
70:a7:70:e6:6f:19:e2:cb:56:c2:79:2a:ec:ff:a2:0e:4a:b8:
dd:6b:3e:55:60:0a:5f:c9:d4:31:90:63:83:53:da:11:fb:a2:
92:13:9b:42:00:27:4c:b1:d5:b1:18:92:f6:80:02:24:76:f9:
5e:ee:8e:5b:8e:2a:9e:ae:f6:e6:72:99:b4:05:68:d3:65:a2:
42:d4:f5:09:b1:bd:35:cf:b5:94:4d:43:33:55:8a:30:ae:04:
61:29:04:4c:5e:8f:d0:88:41:84:1f:8b:bd:ce:c8:86:3d:d7:
18:9e:64:b0:6b:d9:99:f1:7e:99:aa:ff:f8:8b:15:f8:9e:60:
19:ac:fc:38:7d:fd:dd:94:16:a7:ea:a5:e7:4f:4f:e9:57:f4:
c4:34:7e:1e:3b:ae:9a:12:b0:12:ea:9b:56:a0:26:4f:98:e4:
86:e2:a7:70:a1:9a:c4:78:e8:34:0a:dc:50:d6:0d:57:0c:4a:
8e:dd:e2:1a:d9:c1:11:b6:88:d9:ed:d0:e2:63:c4:90:52:b0:
28:ca:ba:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org