Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MvItift5agoUTk9x0uE4Hx71Nsc.roa
File: MvItift5agoUTk9x0uE4Hx71Nsc.roa (raw, json)
Hash identifier: +nbUPN9kN4m2h7kDCB+b7yd6M+QqBVydKOi0gXjwFEw=
Subject key identifier: 32:F2:2D:89:FB:79:6A:0A:14:4E:4F:71:D2:E1:38:1F:1E:F5:36:C7
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018A5A102ED1B58710E47662E23F66DE3591
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MvItift5agoUTk9x0uE4Hx71Nsc.roa
Signing time: Sun 03 Sep 2023 08:02:04 +0000
ROA not before: Sun 03 Sep 2023 08:02:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15611
IP address blocks: 213.176.96.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.141.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
213.176.121.0/24 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
213.176.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 08:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5a:10:2e:d1:b5:87:10:e4:76:62:e2:3f:66:de:35:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 3 08:02:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32f22d89fb796a0a144e4f71d2e1381f1ef536c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:95:18:94:94:2d:67:fc:c9:6a:fc:0e:d9:
82:da:92:a8:b3:c0:78:c4:66:43:39:b6:b0:44:56:
a9:c2:ad:14:bc:00:29:cf:e3:92:16:3b:10:17:87:
a0:5c:d6:56:e3:7f:3c:11:4b:aa:94:24:a0:df:ab:
73:12:b8:b2:bc:5e:51:11:df:82:78:62:cb:f8:d5:
2c:33:17:95:be:55:13:d6:8b:e9:d5:13:a0:fb:83:
0f:d1:39:5e:3f:15:22:0f:6f:86:9c:e6:09:17:d9:
3f:40:db:43:0a:5f:31:d5:44:86:bb:68:ad:90:5e:
9e:6e:fe:38:8f:0f:d1:89:19:d5:89:da:fc:8b:1c:
a9:48:7a:fe:ea:e3:a8:ee:70:a7:1b:e1:a2:29:90:
4f:74:b0:47:76:6c:fd:7f:1c:f1:bb:92:ee:50:c5:
a7:c4:d9:d5:09:4c:09:1b:fc:89:f8:c5:d6:c5:10:
0a:9c:d4:ac:12:ad:f2:72:cf:07:f4:85:df:6e:c7:
a7:67:f5:2a:9c:69:3a:07:e9:b6:08:1f:6f:80:26:
f7:84:08:71:b5:cf:85:f3:d3:55:2e:e5:ed:ff:e3:
da:b1:41:70:b8:ff:39:28:05:71:c0:1b:be:c0:12:
4f:ad:41:91:46:e9:7c:fc:98:62:5a:7c:6d:4f:c8:
3f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F2:2D:89:FB:79:6A:0A:14:4E:4F:71:D2:E1:38:1F:1E:F5:36:C7
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MvItift5agoUTk9x0uE4Hx71Nsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.142.255
62.60.145.0/24
62.60.168.0/21
62.60.192.0/22
213.176.4.0/23
213.176.96.0/24
213.176.121.0-213.176.125.255
213.176.127.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:75:e8:b3:70:c4:e6:a9:33:2e:5a:2b:2f:04:5e:b0:2c:39:
e2:82:31:a7:a4:a7:88:91:b0:02:c5:8c:ba:6b:78:17:f6:2a:
11:cd:ec:37:e9:43:75:4f:5c:56:37:e8:90:59:e4:8d:1b:5e:
f9:70:7f:e3:f6:0f:9a:e1:9f:40:5d:b3:a7:1a:57:ff:18:ee:
c9:71:53:a4:2a:a0:2b:b4:8d:4e:e6:9a:67:3d:06:8d:6b:4c:
85:33:00:a6:46:ed:6f:65:47:7e:5e:2a:13:06:69:c9:61:f8:
00:86:3f:d0:17:03:a4:8c:2c:ab:50:32:d0:b8:ec:8a:47:dd:
0c:e6:44:a4:c4:04:07:b8:59:e6:6a:96:c2:30:e0:0f:e6:c9:
b6:8b:8f:d4:b7:ed:87:de:7a:a2:2d:41:92:7b:47:6a:f1:85:
fb:00:a7:f8:c1:02:cf:1e:a1:63:4b:b7:6d:f1:b7:86:fb:80:
4d:50:98:d6:f7:1a:d7:d1:f6:1e:8a:4b:3f:08:5b:e6:77:10:
0c:ba:fd:93:13:dd:af:60:57:8c:97:ab:97:ca:b9:7b:01:0d:
5d:2c:7f:55:ec:8b:20:04:f8:ee:1e:02:1f:a5:24:1b:c0:39:
95:1a:4b:95:c3:c4:28:8d:54:c1:9b:10:b1:b5:20:79:2e:c7:
4c:14:b5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org