Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Ix3q3lB1Juu_dxkUNYYSEgDLHqk.roa
File: Ix3q3lB1Juu_dxkUNYYSEgDLHqk.roa (raw, json)
Hash identifier: gN1HDXaYlMQwqQ7V9Vv/HNYrd8sKGgymxGBa3F73iKk=
Subject key identifier: 23:1D:EA:DE:50:75:26:EB:BF:77:19:14:35:86:12:12:00:CB:1E:A9
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0189D0EE301B087340960FA7CFA0863037D4
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Ix3q3lB1Juu_dxkUNYYSEgDLHqk.roa
Signing time: Mon 07 Aug 2023 16:56:58 +0000
ROA not before: Mon 07 Aug 2023 16:56:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53356
IP address blocks: 213.176.2.0/23 maxlen: 24
213.176.6.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 08:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:ee:30:1b:08:73:40:96:0f:a7:cf:a0:86:30:37:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 7 16:56:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=231deade507526ebbf7719143586121200cb1ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:aa:1b:aa:58:c0:be:c1:1f:17:14:59:a0:
81:57:9f:12:17:e5:d2:68:ae:b3:b4:bf:78:de:c5:
1c:89:0e:3b:d7:ef:44:0a:f0:c1:a5:d3:60:c6:2f:
a4:14:35:a5:19:b6:f4:a3:a3:60:46:88:c7:d0:1b:
22:29:dd:bd:09:20:7f:a7:ca:6c:38:41:00:ca:91:
14:3c:cf:2a:10:d1:74:fa:ba:bb:40:e5:0e:bb:92:
b8:ac:1a:a2:cc:41:25:1c:6e:16:65:27:5a:25:6e:
aa:a8:c3:c7:d6:78:5e:4c:73:99:97:62:86:61:4f:
a2:c9:9e:dc:13:d1:7a:b5:36:df:b3:7d:9c:93:73:
47:29:ea:0f:06:20:8c:b7:ec:34:45:45:ae:01:65:
b7:63:86:93:0d:77:20:4e:9e:42:30:dd:dd:ee:e8:
18:e1:9c:da:b9:3e:c8:84:01:5f:cc:fb:6e:4b:1a:
27:b5:fd:c9:f4:3f:7f:3f:44:6f:41:0d:07:8c:2c:
54:fd:5c:e7:95:a1:88:c3:05:26:98:c4:c3:94:ba:
63:86:94:2c:b6:f4:c3:55:ae:ff:bc:19:2d:2c:b1:
5f:7f:7d:e7:fb:d3:03:a8:90:9d:e9:e2:58:f5:cd:
cb:3f:f4:fa:64:06:6f:fe:a4:ad:e5:d7:69:7c:ad:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1D:EA:DE:50:75:26:EB:BF:77:19:14:35:86:12:12:00:CB:1E:A9
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Ix3q3lB1Juu_dxkUNYYSEgDLHqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.2.0/23
213.176.6.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:cc:ba:db:dd:5e:9f:90:9c:66:75:b3:a0:ce:3c:b4:93:a2:
6a:0e:15:ba:9d:f8:82:3e:9f:cd:fd:48:31:7b:69:b2:0e:a3:
d9:14:f1:43:2e:31:07:5a:00:a6:85:49:2d:16:d3:bd:ea:69:
1c:41:01:ab:6b:b5:23:9b:d1:f4:0f:5e:46:14:26:0c:13:30:
44:c0:ff:e6:de:21:a6:33:99:3f:02:bb:55:84:4f:7b:4e:40:
ef:1d:45:65:76:dc:73:3f:c7:cd:df:c6:62:fc:db:3c:7c:d5:
b3:ba:70:55:67:05:ee:74:d4:87:19:68:44:2a:79:30:b1:eb:
e9:9a:c1:9c:67:07:fd:f1:41:2b:ac:80:8e:d3:eb:e4:03:7f:
b0:18:3b:4a:84:7b:90:cd:a3:9b:cd:e5:e3:0f:51:8c:0b:8e:
a0:65:dc:72:99:e9:82:98:08:a1:d4:2e:a1:dc:fd:86:da:89:
e6:07:84:aa:2a:e5:26:ce:87:71:90:c3:9d:84:9d:ee:76:4f:
a5:be:51:6c:5d:26:92:f5:32:2e:2a:1b:dd:55:a4:3f:e1:75:
0b:8a:d5:7f:16:a0:94:cf:4c:9b:3a:7d:ed:62:73:b3:dd:70:
1c:cb:bc:50:b6:2b:ed:30:d4:4d:12:d9:c7:eb:3a:c7:2e:89:
fb:43:81:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org