Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/M5B2UtaJH7ST3aB-kk7C7NFc1Rs.roa
File: M5B2UtaJH7ST3aB-kk7C7NFc1Rs.roa (raw, json)
Hash identifier: B2f4ik8UuiC6EfYwT0rZ4o8RdCbOta+VKBSEEwp3tqU=
Subject key identifier: 33:90:76:52:D6:89:1F:B4:93:DD:A0:7E:92:4E:C2:EC:D1:5C:D5:1B
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CE7BCF07A6CD95D5D8E60F57B664C95F4
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/M5B2UtaJH7ST3aB-kk7C7NFc1Rs.roa
Signing time: Mon 08 Jan 2024 06:22:48 +0000
ROA not before: Mon 08 Jan 2024 06:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14315
IP address blocks: 213.176.2.0/24 maxlen: 24
213.176.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 07:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e7:bc:f0:7a:6c:d9:5d:5d:8e:60:f5:7b:66:4c:95:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 8 06:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33907652d6891fb493dda07e924ec2ecd15cd51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:64:0f:5b:1c:36:eb:d2:7a:11:ce:fc:3b:46:
a4:3d:7c:ba:84:17:16:ec:f7:83:23:42:03:a8:35:
20:e9:21:81:b7:41:45:b8:c1:67:80:fa:29:5a:b4:
f8:88:32:7a:c1:7a:91:43:bc:9a:11:74:c2:a7:3e:
83:fe:24:8b:4f:b5:20:68:aa:9e:56:2c:0f:83:eb:
e4:05:20:55:64:94:d9:ef:96:a7:3b:f7:c7:2c:e5:
e5:55:38:ef:7c:f8:9d:34:0d:53:97:cf:39:59:40:
36:d5:1d:21:7d:fe:70:7e:ce:94:91:5f:0d:ae:9e:
d1:9b:c7:6d:9f:00:07:cf:ff:84:7a:e3:08:18:56:
79:10:db:9f:87:79:3d:1f:64:fd:80:60:47:95:58:
8c:7d:39:f3:02:69:ba:fa:72:51:9f:5c:24:50:00:
0d:9e:74:5f:26:55:c5:69:49:4b:5c:1d:b8:4e:20:
ea:95:37:a1:7a:a5:37:8f:85:f7:3b:b6:3e:0d:76:
7d:67:d6:30:f7:19:aa:50:1d:be:1d:f9:c9:87:be:
ba:9a:47:ae:e1:f7:40:3c:bb:e4:b0:b1:ad:0c:b1:
c3:79:67:95:f1:9f:04:36:14:9b:65:be:d6:60:a2:
29:c6:6e:cb:70:05:f6:e5:61:10:1c:4e:dc:63:f1:
d8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:90:76:52:D6:89:1F:B4:93:DD:A0:7E:92:4E:C2:EC:D1:5C:D5:1B
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/M5B2UtaJH7ST3aB-kk7C7NFc1Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.2.0/24
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
65:97:22:f2:4d:29:8a:d5:61:0b:94:d0:e7:27:61:f0:6a:83:
2b:18:59:e0:1b:3a:ab:54:a7:34:c6:5c:c8:27:2a:12:60:f9:
3a:83:e5:57:8d:f2:2a:1e:8b:65:f9:aa:ff:b7:38:d7:e0:14:
64:b5:10:20:53:1a:ab:37:c3:54:ef:b9:de:aa:db:0b:39:96:
1c:b0:45:4c:de:90:43:b2:60:76:bb:be:b2:8a:6c:ed:e5:43:
14:07:f6:06:77:c0:4e:44:a3:7a:8e:81:e9:bb:a1:dd:aa:c4:
c5:c3:db:4b:0a:f8:2e:68:3a:40:2e:8b:b9:6f:35:f1:27:cf:
a0:ef:44:80:29:30:59:e7:4a:e9:79:77:70:3c:5c:8d:b4:90:
1c:41:32:05:ae:e4:b6:a9:40:16:90:6c:a8:de:df:ab:60:3f:
aa:a1:34:2a:79:61:19:eb:1c:9f:05:75:94:2d:e8:0d:83:4e:
3a:d9:27:bc:42:9e:fc:e0:28:7d:c9:e7:40:f4:41:8f:f3:73:
52:01:31:1d:4f:50:0b:1c:95:a1:7c:15:4a:bb:8b:0d:55:59:
31:f5:f9:c3:e7:7c:80:a2:64:f8:b1:88:ba:c0:b4:3a:6b:92:
e9:9b:29:14:14:ac:cb:d3:f4:57:50:b7:1d:ad:dc:74:90:8a:
29:c2:19:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org