Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/OoZlaNQoNoWwmZaAqK4e_C8wdjk.roa
File: OoZlaNQoNoWwmZaAqK4e_C8wdjk.roa (raw, json)
Hash identifier: 6YcdeBM52rW5MuQT+f5NX1gHocHER+pHv8VZTe9DKVo=
Subject key identifier: 3A:86:65:68:D4:28:36:85:B0:99:96:80:A8:AE:1E:FC:2F:30:76:39
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0189BA49FC298D49D7D85450CD24B303162F
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/OoZlaNQoNoWwmZaAqK4e_C8wdjk.roa
Signing time: Thu 03 Aug 2023 07:25:58 +0000
ROA not before: Thu 03 Aug 2023 07:25:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211421
IP address blocks: 62.60.146.0/23 maxlen: 24
213.176.120.0/23 maxlen: 24
213.176.126.0/23 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Aug 2023 03:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:49:fc:29:8d:49:d7:d8:54:50:cd:24:b3:03:16:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 3 07:25:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a866568d4283685b0999680a8ae1efc2f307639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:ec:02:5e:43:10:4b:67:1d:a7:9e:6a:4c:
8a:26:a6:1c:f6:f3:91:3a:61:9b:ce:92:ab:34:e7:
52:a5:6a:3e:c4:9c:71:df:9a:a8:c5:d0:8a:3a:54:
8c:a5:de:db:41:ef:ba:f5:82:e5:73:f0:90:18:22:
d5:35:b7:29:2b:2e:ed:70:0f:29:b2:bc:ed:9c:9d:
52:c0:df:2f:c9:a8:26:f1:9d:47:7f:9d:d6:f8:dc:
a3:d4:aa:8e:dc:16:dc:4d:0b:7b:f1:38:8f:c3:e5:
32:e1:a6:22:e2:ff:81:26:c6:8a:e2:d3:83:c5:7d:
c6:d6:a3:c8:a9:e6:57:90:7d:80:ab:ed:47:a7:6e:
76:be:7e:05:3c:c6:a5:60:85:28:d8:29:fe:50:c8:
de:9a:1d:47:da:51:16:86:14:6f:fe:81:33:f7:a4:
57:7f:99:7d:66:93:6f:e0:0d:89:53:59:2a:71:ac:
b9:89:d4:e7:6e:59:51:d3:87:05:6f:12:8b:af:3c:
ad:25:ed:ec:53:17:04:20:09:8e:4e:05:2c:ae:94:
22:00:07:fe:19:48:4c:e5:8d:eb:01:cf:6f:96:f2:
57:9d:e3:64:16:18:71:a3:92:46:c4:31:48:92:ce:
e7:4c:16:ab:ae:84:c7:19:9d:9f:e8:98:c0:03:45:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:86:65:68:D4:28:36:85:B0:99:96:80:A8:AE:1E:FC:2F:30:76:39
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/OoZlaNQoNoWwmZaAqK4e_C8wdjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0/23
62.60.192.0/21
213.176.120.0/23
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
98:ba:c3:ca:23:7e:86:bb:fa:5a:97:52:d6:16:17:8c:68:0f:
97:4c:5f:91:50:a7:12:4c:6d:04:03:6b:90:45:1f:23:9c:24:
92:21:51:49:6f:da:fa:22:9f:59:74:60:e3:54:b9:13:5e:0a:
6e:30:84:ed:08:03:c6:1c:52:c0:67:0e:38:f0:e5:9c:c2:b4:
02:1d:71:22:a0:5d:44:79:5b:53:70:25:03:cc:67:d2:ad:b9:
03:00:05:16:ac:22:c1:aa:7e:53:00:5b:8a:ad:18:1f:b5:ac:
02:5f:51:2f:dc:8b:9f:40:49:09:9c:53:86:43:38:30:07:4c:
e2:04:8a:13:d0:19:68:f8:6b:ba:a3:a4:00:e7:93:58:99:bb:
db:20:ae:5e:3c:48:59:df:4a:cb:30:73:66:df:12:76:a0:42:
fa:a2:b6:d6:e9:16:71:c0:75:05:8b:56:6f:c0:e5:23:f6:de:
87:ba:d6:e9:84:8d:97:ad:e0:96:ae:17:a4:de:2d:41:56:52:
68:07:8a:80:a2:28:2e:fc:3b:2b:9a:33:04:f0:e3:63:36:f3:
a2:87:4d:34:cb:0b:f1:33:35:43:88:7d:98:85:13:1e:92:67:
bf:68:97:12:5d:65:05:a7:87:05:1f:a5:e2:bc:85:ce:1d:a8:
a0:a8:94:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org