Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FVPjUvpqO2GhpTBZAcnrYg72oic.roa
File: FVPjUvpqO2GhpTBZAcnrYg72oic.roa (raw, json)
Hash identifier: Sf5q/QZaun2ywPkEaJpY3XM484iAp78/nBDg8y6ECl4=
Subject key identifier: 15:53:E3:52:FA:6A:3B:61:A1:A5:30:59:01:C9:EB:62:0E:F6:A2:27
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018A5A10300377395146302B7C946FF40350
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FVPjUvpqO2GhpTBZAcnrYg72oic.roa
Signing time: Sun 03 Sep 2023 08:02:04 +0000
ROA not before: Sun 03 Sep 2023 08:02:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211421
IP address blocks: 62.60.216.0/22 maxlen: 24
62.60.152.0/21 maxlen: 24
62.60.146.0/23 maxlen: 24
213.176.120.0/23 maxlen: 24
213.176.126.0/23 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5a:10:30:03:77:39:51:46:30:2b:7c:94:6f:f4:03:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 3 08:02:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1553e352fa6a3b61a1a5305901c9eb620ef6a227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:9c:63:cb:46:41:a5:8d:ff:84:06:2d:5d:
d3:a5:83:c7:60:9c:3b:44:f8:2d:17:39:aa:55:1d:
27:da:e6:bb:2e:b4:94:22:df:ac:10:10:fd:9b:5e:
ca:7d:ea:2f:64:4e:12:b5:c3:c3:0e:52:b4:ff:a2:
83:d5:34:99:4b:6d:e5:a7:af:d6:5c:37:1b:d9:4f:
19:db:92:f1:86:88:de:18:4c:73:48:2b:e6:d9:58:
94:bc:fd:18:d1:f5:ff:b6:0d:e2:75:b5:12:cf:ba:
70:4b:f6:72:cd:60:7b:28:3b:c0:a3:9a:bf:fc:09:
e8:74:20:4a:79:91:a1:fd:ff:89:cd:60:11:32:4f:
29:66:38:18:66:94:01:d9:5b:58:e6:00:5a:4d:1d:
4c:86:61:e3:16:02:b7:91:eb:f4:bb:74:ec:5f:b0:
ee:0c:04:de:5e:7b:f5:6b:d1:ba:26:7c:03:3c:a8:
90:97:04:8c:1a:ff:6f:37:e0:49:f6:f0:65:70:a9:
b2:02:99:27:99:ab:fb:ad:d1:e2:7b:1d:18:d8:b9:
20:b7:38:f4:c3:2c:1d:27:b3:6c:69:b0:cb:d4:f4:
6a:ac:ba:34:6f:66:87:66:61:33:ef:f0:b8:b1:51:
6e:c2:d4:53:66:4e:31:00:98:5f:02:9e:a8:c2:e2:
a3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:53:E3:52:FA:6A:3B:61:A1:A5:30:59:01:C9:EB:62:0E:F6:A2:27
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FVPjUvpqO2GhpTBZAcnrYg72oic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0/23
62.60.152.0/21
62.60.196.0/22
62.60.216.0/22
213.176.120.0/23
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:33:24:13:f6:01:f7:ca:05:11:b6:36:b1:1e:73:67:cb:73:
09:85:93:4a:31:8c:1d:ff:61:33:44:c4:47:0d:6b:3d:47:40:
c0:20:5f:bd:02:b6:d0:90:39:d7:f7:fa:b2:59:6a:93:8d:a6:
12:a0:ec:f4:a4:42:d1:ed:29:82:49:c1:99:d0:83:cb:6c:ad:
03:43:0f:15:eb:6d:82:2d:38:55:d5:4e:07:25:ea:7b:61:18:
e8:6e:35:23:17:e1:2c:7a:84:d6:08:37:73:2f:87:28:01:67:
f7:24:ba:52:bd:fe:8f:61:0d:fc:9a:5d:0f:9a:3b:cb:08:14:
58:f2:00:db:75:f0:33:86:29:7c:da:42:41:bd:33:bc:07:5b:
1e:de:6d:8f:ef:cf:b7:a4:30:c7:54:b6:e1:a7:fd:39:87:08:
43:49:ea:ee:9b:86:a2:2c:c6:80:bf:9c:69:1d:56:0c:03:29:
ce:a6:57:de:82:27:25:ae:12:3c:92:80:8f:42:d6:03:86:cb:
ad:ed:8a:b8:26:50:a2:d0:95:fc:0c:39:23:26:00:14:2d:77:
49:ad:99:ab:c4:48:bf:c8:4f:bc:14:a3:33:20:cd:0a:e4:f1:
67:f1:77:a3:9b:ef:17:75:74:0e:1f:dc:6c:4a:59:96:f5:b6:
b5:c6:5a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 06:26:13 2023 by rpki-client on console-fra.rpki-client.org