Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ME4yt_T26KiqXP-C7yYbRvVryNw.roa
File: ME4yt_T26KiqXP-C7yYbRvVryNw.roa (raw, json)
Hash identifier: FogT5bjSQVenk4hnBCKk0yQVWpLvgPnzsgQDrn66Qjc=
Subject key identifier: 30:4E:32:B7:F4:F6:E8:A8:AA:5C:FF:82:EF:26:1B:46:F5:6B:C8:DC
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01886172AA5E505809A9A7211170462616A1
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ME4yt_T26KiqXP-C7yYbRvVryNw.roa
Signing time: Sun 28 May 2023 08:21:24 +0000
ROA not before: Sun 28 May 2023 08:21:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 213.176.2.0/23 maxlen: 24
62.60.164.0/22 maxlen: 24
213.176.120.0/23 maxlen: 24
213.176.126.0/23 maxlen: 24
62.60.188.0/22 maxlen: 24
62.60.204.0/22 maxlen: 24
62.60.200.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 May 2023 08:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:61:72:aa:5e:50:58:09:a9:a7:21:11:70:46:26:16:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 28 08:21:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=304e32b7f4f6e8a8aa5cff82ef261b46f56bc8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:44:28:27:1e:fe:f7:73:27:56:71:8e:70:e6:
97:5a:80:33:89:ee:4b:9b:5d:b3:70:65:af:3a:6f:
e2:35:a6:65:96:f7:49:7e:7b:f0:a5:5d:79:64:47:
12:2c:54:ab:c2:4b:58:c8:dc:f8:b8:fe:ef:f0:70:
a8:b3:f0:b4:a9:d0:90:f4:17:d9:7f:22:24:9d:11:
de:73:fe:23:46:60:00:b9:4a:22:09:44:43:97:e9:
84:b8:fb:7b:0b:9f:e6:3c:4d:44:d9:a1:88:7c:83:
95:6e:05:d7:75:39:af:fc:d1:b7:f0:c6:87:bb:22:
a7:a0:c7:c9:a7:3b:4f:59:ed:6e:8f:89:49:e8:c7:
13:05:9e:53:48:9a:15:7d:50:52:5d:a8:bb:a6:a3:
5f:c7:f1:29:3f:b5:49:04:6d:b1:e6:d6:69:2a:cf:
71:49:bd:92:a4:08:da:d8:8d:3e:f0:d8:48:44:6e:
d0:4a:54:d1:fc:d2:d4:cd:22:d9:03:9f:56:17:76:
0d:5a:b5:74:fe:ef:0b:f0:a0:67:51:18:51:47:ec:
9e:d4:f0:32:a2:b0:85:a2:f0:74:8b:0d:b3:cd:2b:
0c:8d:b5:1b:e7:1d:35:dc:6a:b7:13:73:c2:0c:86:
7f:67:fa:79:09:4c:e3:ea:51:54:f7:2a:4d:66:a9:
6b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4E:32:B7:F4:F6:E8:A8:AA:5C:FF:82:EF:26:1B:46:F5:6B:C8:DC
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ME4yt_T26KiqXP-C7yYbRvVryNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.164.0/22
62.60.188.0/22
62.60.200.0/21
213.176.2.0/23
213.176.120.0/23
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:a7:f6:19:a3:a0:e3:cb:5a:ef:2f:01:3e:43:96:a1:ed:46:
09:b1:d4:ba:fb:95:d1:7a:92:c5:58:b6:99:1f:a1:ed:e8:96:
16:b2:02:e3:84:26:dc:ec:95:28:b4:82:2d:fd:19:ad:32:cb:
84:a2:ed:4c:a0:e7:e4:a0:34:f0:81:7a:00:a9:a4:63:21:c7:
16:8d:1f:40:19:e8:e8:b2:94:74:9e:f4:3e:94:3a:91:47:44:
44:49:26:38:c4:d6:fb:34:d2:b7:5b:23:88:9e:16:dd:a4:51:
75:82:49:85:13:5d:bf:77:d4:f4:ce:6f:c9:ca:df:08:ec:02:
d3:49:f1:01:e0:5c:f8:a6:4d:ce:22:0b:fa:61:b2:ec:2e:6d:
30:88:89:7f:fc:a8:73:87:89:9b:d5:e2:a5:24:66:7e:05:d6:
22:91:79:bc:a7:a0:f7:27:48:45:3c:b6:d3:c3:c5:23:31:08:
8c:d0:ab:37:89:49:bd:0a:fe:5d:41:46:b9:9b:de:a7:7f:df:
b9:7d:62:3f:5a:6c:0a:18:1f:10:81:0c:2f:5d:c8:ec:4e:bb:
d2:01:5a:ef:36:e6:d6:a2:38:a5:33:eb:af:4d:26:64:cf:6b:
65:d7:ef:11:43:67:8e:c4:91:f3:d0:b4:b1:57:21:cb:fd:76:
d8:09:35:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org