Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MLui872jfM33SEtg0DnQvc9c9v0.roa
File: MLui872jfM33SEtg0DnQvc9c9v0.roa (raw, json)
Hash identifier: pJe+IgzRAgwy7BZGI8ySbIURR/DTUqakcqNwRRVss1M=
Subject key identifier: 30:BB:A2:F3:BD:A3:7C:CD:F7:48:4B:60:D0:39:D0:BD:CF:5C:F6:FD
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018585F3229131D9121C4741EDD50BCE8C19
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MLui872jfM33SEtg0DnQvc9c9v0.roa
Signing time: Fri 06 Jan 2023 07:19:41 +0000
ROA not before: Fri 06 Jan 2023 07:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21700
IP address blocks: 213.176.72.0/22 maxlen: 24
213.176.92.0/22 maxlen: 24
62.60.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jan 2023 08:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:85:f3:22:91:31:d9:12:1c:47:41:ed:d5:0b:ce:8c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 6 07:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30bba2f3bda37ccdf7484b60d039d0bdcf5cf6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:d5:71:21:df:27:f4:32:5a:5f:d1:c6:8c:
b5:96:66:a3:96:64:60:f0:b5:e6:0a:87:c1:7b:b4:
b9:5b:01:e2:55:a1:48:41:db:81:a8:fb:14:b3:16:
bd:55:75:fd:eb:53:d5:b9:12:ec:35:e6:0a:c4:be:
d3:53:5f:f5:13:58:03:f3:41:ad:48:0d:77:8e:80:
8e:23:58:03:7b:6b:c4:dc:1c:7e:5e:2d:cb:2e:13:
62:af:3d:c4:2c:0e:14:3a:cd:dd:5d:86:77:ad:a2:
16:0b:75:71:21:06:ac:3b:6a:e6:10:6e:9b:f3:46:
97:3b:bc:32:37:f2:f8:3a:99:bb:19:ce:b9:76:ef:
f7:a4:fa:64:00:70:3c:cd:ba:f6:c1:6f:2e:b2:9c:
c2:f9:0f:57:9d:18:ad:04:1b:bd:29:b3:b7:52:a5:
e1:7c:48:e7:57:8d:74:e1:5a:70:f4:8a:ae:63:7b:
67:39:bc:c5:25:44:d8:79:32:6c:cc:a5:93:d6:77:
43:c2:3c:f2:1d:f8:6e:ed:d5:36:64:cb:8d:c1:04:
df:80:cb:db:6a:cd:c5:20:03:36:e6:21:c8:87:49:
76:9e:10:2a:70:b2:b9:e5:c0:b1:f2:74:03:35:fe:
06:5f:7a:f7:24:95:9a:ae:03:e3:f6:e2:5b:77:cb:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BB:A2:F3:BD:A3:7C:CD:F7:48:4B:60:D0:39:D0:BD:CF:5C:F6:FD
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MLui872jfM33SEtg0DnQvc9c9v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0/23
213.176.72.0/22
213.176.92.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:78:c7:e3:39:d0:81:5d:28:c1:3e:06:a6:46:c5:bf:15:0e:
16:93:ea:de:42:cd:3d:21:8a:07:c1:32:95:ea:f2:2c:0e:9f:
46:1e:d3:1d:15:4f:08:56:1f:df:38:e1:56:2c:14:6b:9d:78:
8d:fe:3c:5c:ef:d3:bb:81:61:29:f2:63:de:7e:7d:6a:e1:a0:
1a:53:08:32:d2:9e:ed:fd:8e:76:6d:06:c5:78:9c:90:b1:a7:
96:8d:6e:bf:48:9d:58:cb:ed:23:09:ed:a7:1a:d8:eb:90:fb:
ab:91:0b:a7:ed:16:45:bc:8c:6a:49:5a:14:2a:a9:ea:08:80:
2e:a3:39:e3:59:99:26:a6:2b:73:88:e4:cd:e0:3e:b8:56:56:
1b:9a:25:26:cc:2e:2c:20:d6:67:0e:d0:75:d6:3f:ab:e4:ff:
fc:b2:5b:a7:77:9b:44:96:56:0d:65:10:1c:f9:ae:4d:12:43:
6e:ad:40:a2:e1:31:59:7d:c2:12:4b:a4:31:5d:35:62:a3:91:
9a:83:3f:ea:3e:4c:25:be:81:a1:54:76:ab:e4:92:77:3f:c9:
67:e4:dc:41:77:9d:96:4a:a6:ec:a7:0d:f3:28:8b:b8:3a:65:
1b:0f:39:85:9a:ca:0a:50:13:1f:9c:31:2a:85:5b:73:75:5a:
de:e0:8a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org