Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MLMTuBswTI_vRgsHv3t9Pj5-tcg.roa
File: MLMTuBswTI_vRgsHv3t9Pj5-tcg.roa (raw, json)
Hash identifier: IsIz5rjzcZEebGbI/xatacV2g4UwB7n+HH1bo9PLJqk=
Subject key identifier: 30:B3:13:B8:1B:30:4C:8F:EF:46:0B:07:BF:7B:7D:3E:3E:7E:B5:C8
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018B0511A4EF1B23B13452F876517EA48396
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MLMTuBswTI_vRgsHv3t9Pj5-tcg.roa
Signing time: Fri 06 Oct 2023 12:58:44 +0000
ROA not before: Fri 06 Oct 2023 12:58:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 62.60.146.0/23 maxlen: 24
213.176.2.0/23 maxlen: 24
213.176.6.0/24 maxlen: 24
213.176.120.0/23 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:11:a4:ef:1b:23:b1:34:52:f8:76:51:7e:a4:83:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 6 12:58:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30b313b81b304c8fef460b07bf7b7d3e3e7eb5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:9a:d1:7f:ef:d2:e8:2f:4a:ab:01:64:ce:
e3:2c:bb:e3:a4:77:10:29:32:4a:e0:4e:07:a6:f1:
ea:66:d4:1a:49:58:11:63:41:30:c3:f2:ec:93:3f:
4f:83:5b:28:82:1f:e4:00:87:1f:59:bf:4a:b2:f8:
7a:8d:41:fc:e5:37:80:44:44:b7:2f:88:cf:92:67:
f7:55:c0:aa:3f:cf:b6:e9:7c:d1:42:e0:fc:52:1c:
ff:c2:7d:28:05:6b:49:a8:27:87:e6:f9:63:76:d6:
f8:bf:36:b0:2f:9e:ed:9b:8d:e7:6f:ff:70:ce:0b:
0d:e8:01:3d:f0:c2:b2:83:33:1b:f1:30:1e:8b:33:
0d:9d:6e:4a:fc:f1:a1:2e:d7:79:b2:2b:ba:cd:43:
92:1b:04:94:cf:90:57:6c:8d:3d:23:c1:aa:f3:53:
bd:77:0c:3d:f7:a9:d7:3b:30:2e:73:51:35:54:f1:
b0:62:4a:ea:a6:de:54:e6:1f:92:4f:f6:de:d8:e5:
d9:64:87:22:8c:14:9b:91:1f:3e:d5:b2:a2:6f:e8:
f0:ad:04:5d:51:4a:b8:f5:62:6a:54:87:4e:b0:fe:
d7:19:80:5d:96:02:eb:3c:da:ff:a2:d3:ea:06:42:
f7:81:33:c3:36:f3:98:6e:5a:dc:57:b9:4e:80:83:
81:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B3:13:B8:1B:30:4C:8F:EF:46:0B:07:BF:7B:7D:3E:3E:7E:B5:C8
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MLMTuBswTI_vRgsHv3t9Pj5-tcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0/23
62.60.196.0/22
213.176.2.0/23
213.176.6.0/24
213.176.120.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:81:d2:fd:fe:a7:a1:8f:57:1f:04:de:d8:ea:65:da:ad:52:
aa:9e:32:8e:f4:2d:3f:c7:37:ca:e0:de:20:25:62:37:f3:fd:
b1:e4:45:cb:b2:9f:98:9a:06:97:9b:9d:95:4b:a8:c8:ac:44:
e1:81:c7:76:5b:0a:97:1b:e2:9d:3a:d8:46:3e:1c:ec:56:87:
ff:b6:b7:09:0c:ff:54:e5:16:2d:84:c3:e9:0c:dc:e1:65:40:
b5:bc:94:6b:46:08:e4:4b:ec:ed:b7:e9:cd:2b:5a:85:b7:c4:
0c:a4:b3:ac:10:7a:6e:33:15:81:a0:43:e3:49:9e:9f:18:e4:
88:3b:0e:86:fc:ca:f7:a3:e9:e6:45:d1:9d:aa:1a:7b:5a:78:
eb:fc:d8:65:6b:ec:9e:79:29:c4:83:ba:67:b3:72:09:ee:ad:
f6:e7:b6:bf:d3:49:66:b9:77:37:1f:99:c2:9a:a4:f0:43:a2:
e1:e4:b5:6b:f7:43:46:68:55:4f:6c:ea:28:95:c4:ea:a0:4d:
28:6a:f8:ed:30:c9:b1:6c:15:dd:70:c4:9a:37:b9:d3:0b:cd:
f8:6a:81:79:8d:09:fd:18:03:b2:cf:b7:99:5a:0e:99:81:26:
ff:5d:db:e4:69:42:b9:7b:71:5a:7f:eb:ce:80:e7:c7:19:75:
27:65:6f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 08:54:37 2023 by rpki-client on console-fra.rpki-client.org