Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/OtdMQ4DyOgNJwEbK9KoTSYihSIo.roa
File: OtdMQ4DyOgNJwEbK9KoTSYihSIo.roa (raw, json)
Hash identifier: SbsoMGue6TBF0XuTxBrXZC2UPIPnkwf4fX7oHhdKoYE=
Subject key identifier: 3A:D7:4C:43:80:F2:3A:03:49:C0:46:CA:F4:AA:13:49:88:A1:48:8A
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01867CF8FA8BD39CA9B3D7C2C7316B98EBC0
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/OtdMQ4DyOgNJwEbK9KoTSYihSIo.roa
Signing time: Thu 23 Feb 2023 06:32:17 +0000
ROA not before: Thu 23 Feb 2023 06:32:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206065
IP address blocks: 213.176.68.0/22 maxlen: 24
213.176.88.0/22 maxlen: 24
213.176.112.0/21 maxlen: 24
213.176.20.0/22 maxlen: 24
213.176.24.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7c:f8:fa:8b:d3:9c:a9:b3:d7:c2:c7:31:6b:98:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 23 06:32:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ad74c4380f23a0349c046caf4aa134988a1488a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:57:39:14:b2:fa:ff:a5:dd:6b:c9:a7:67:a7:
df:07:0a:62:c9:f6:18:d7:cb:4c:ce:f2:01:81:f0:
b1:9c:6c:78:cb:e0:0d:99:6e:ed:bd:4c:04:8c:97:
6d:d3:ad:6a:bb:0a:0d:55:50:d1:78:fb:bd:15:14:
02:b0:2f:71:52:e2:62:1e:bd:e1:f5:ad:a2:93:d4:
b8:4f:00:2f:3e:61:9f:01:8f:6d:ff:13:87:3b:f5:
fd:35:a4:b3:fd:75:5c:03:d3:c6:f3:0c:ce:d7:73:
84:4f:11:25:52:24:de:6f:c7:6b:da:90:a8:37:5c:
37:8c:04:12:8f:96:01:8f:5f:54:ac:4f:77:a5:46:
00:9a:1b:ad:f1:09:52:ea:b6:9e:d8:11:bd:2e:f4:
39:56:e9:d9:07:71:1a:0f:b3:87:90:b5:fc:4e:50:
54:1d:b4:8a:96:48:c3:74:ef:2c:13:a5:86:b9:3d:
f2:7b:ec:97:e5:87:f2:5e:c7:2f:78:da:65:7b:b7:
0a:56:a0:ce:de:96:bc:b0:e8:c0:d8:fc:4e:fd:47:
8f:ea:62:99:5c:72:c6:b0:74:da:f2:96:b8:9e:7a:
23:e4:9c:72:c2:12:9d:8e:e1:49:65:b6:0f:f3:1f:
d3:34:68:cf:9f:cd:9f:f2:23:56:3d:ee:3c:7b:59:
67:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D7:4C:43:80:F2:3A:03:49:C0:46:CA:F4:AA:13:49:88:A1:48:8A
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/OtdMQ4DyOgNJwEbK9KoTSYihSIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.20.0-213.176.27.255
213.176.68.0/22
213.176.88.0/22
213.176.112.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:18:74:9f:94:db:0c:03:0d:df:72:f9:4b:b5:c2:a6:e5:82:
cf:55:bf:75:ab:08:d4:c4:f1:45:de:c3:28:03:74:98:ca:80:
92:ce:e5:80:1c:22:bf:c4:15:57:6f:b8:da:86:5e:aa:54:ba:
51:fe:87:c8:ee:8f:2b:62:a3:68:08:25:4f:0f:7b:e3:ab:d5:
d2:86:bf:b4:cf:db:c6:ca:0b:56:c4:a9:87:71:6d:9b:98:97:
c7:af:92:45:e8:a7:f4:6f:1c:d6:f6:90:7b:70:8b:89:f6:e2:
dc:62:48:ce:28:a4:de:e6:f5:f5:d4:0f:c8:da:c8:1a:8d:6d:
4a:14:ff:fd:d9:47:c4:36:1a:b1:7d:8f:43:7c:03:24:2c:06:
2b:5f:56:17:5d:93:44:8b:ee:4c:b7:e5:fe:c7:13:6f:57:15:
98:4d:48:dc:fb:07:4b:4a:d5:b9:ed:b2:d5:7c:f9:9d:95:b1:
ef:64:0a:d6:8f:82:7e:fd:87:6b:6d:63:a2:8e:c9:5b:4f:d4:
a3:5f:48:62:52:2c:a7:af:e8:bd:6e:fc:a2:7e:58:bd:39:73:
25:7c:27:f8:81:72:27:75:f5:7d:73:23:d2:0d:86:ae:a7:2c:
b5:e5:19:a9:2a:58:20:64:d4:64:7d:15:53:5f:b8:6f:f4:0b:
3d:93:4c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:42 2024 by rpki-client on console-fra.rpki-client.org