Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ROpveRS6b1toe7mYDT7NgYGjvHc.roa
File: ROpveRS6b1toe7mYDT7NgYGjvHc.roa (raw, json)
Hash identifier: Dr3iNRrcEp3D881cma3zanPP1HFVB4Mf4zArA8a6FiI=
Subject key identifier: 44:EA:6F:79:14:BA:6F:5B:68:7B:B9:98:0D:3E:CD:81:81:A3:BC:77
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01893A1B8A34161B06A40CA91A4DF6389036
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ROpveRS6b1toe7mYDT7NgYGjvHc.roa
Signing time: Sun 09 Jul 2023 10:03:50 +0000
ROA not before: Sun 09 Jul 2023 10:03:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 213.176.2.0/23 maxlen: 24
213.176.120.0/23 maxlen: 24
62.60.180.0/22 maxlen: 24
213.176.126.0/23 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jul 2023 10:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:1b:8a:34:16:1b:06:a4:0c:a9:1a:4d:f6:38:90:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 9 10:03:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44ea6f7914ba6f5b687bb9980d3ecd8181a3bc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:40:aa:1a:62:a4:a1:89:65:e2:6b:d7:ca:
54:0e:7c:84:96:e5:c2:b4:2b:e2:e3:3f:fd:43:95:
25:bf:0c:11:9b:c2:b4:d7:00:97:66:2f:2c:57:4b:
5e:05:49:ce:7c:60:4f:ff:b6:f4:3e:55:77:80:99:
54:71:c6:ba:c1:48:38:05:45:03:69:64:0d:a1:ab:
14:88:3e:a7:76:fe:cb:46:20:46:22:45:c2:8b:b9:
cc:07:b7:1c:ff:68:8d:f2:46:18:05:4f:99:c6:45:
ae:f8:f0:26:93:5a:a4:7d:9f:d9:91:22:57:8b:d3:
6d:95:10:7c:56:7f:d1:7c:9b:ad:e1:bd:e5:6b:7e:
66:84:64:71:6e:3f:5d:2b:0f:df:d1:67:5e:ed:34:
f0:27:5b:4c:3c:f8:f9:a0:1d:c5:cc:e1:3a:15:b8:
03:2d:0b:fa:ac:78:33:94:a0:3c:1f:96:83:51:df:
f5:d9:6b:d1:e2:b5:63:88:0a:ab:cb:94:df:61:72:
82:47:41:c2:b0:cf:78:2b:c7:d6:22:a7:cb:97:84:
0f:3c:cb:ce:a2:8c:d7:b8:96:f3:2f:ee:79:2b:dc:
fe:c4:57:87:09:07:96:fa:2d:a4:49:75:90:a6:c8:
c6:7e:f8:bd:69:d4:de:26:66:55:08:3c:3c:f9:be:
f2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EA:6F:79:14:BA:6F:5B:68:7B:B9:98:0D:3E:CD:81:81:A3:BC:77
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ROpveRS6b1toe7mYDT7NgYGjvHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.180.0/22
62.60.192.0/21
213.176.2.0/23
213.176.120.0/23
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:a6:ec:50:f8:45:24:aa:d6:6f:64:b9:e1:68:b0:d4:3e:db:
07:f5:27:02:55:b0:64:92:83:db:7c:77:ac:1e:27:3d:e5:7e:
6d:29:c2:5f:74:94:72:36:3f:08:82:06:b7:62:99:a8:7b:5d:
b8:67:74:75:5d:ff:c0:fc:95:6d:51:7c:f9:04:3f:1f:92:fd:
f9:63:df:f0:94:68:d1:76:34:f4:dd:25:55:8b:14:6a:04:ca:
95:5f:83:a1:c8:f5:6b:01:d4:24:c9:40:84:71:85:31:cc:ec:
f9:c8:c5:61:6a:d3:f3:98:2e:a0:5f:08:1e:63:cc:bc:46:57:
09:57:e8:14:99:d9:80:bf:6d:a1:fc:be:58:d5:a9:21:e5:43:
7d:69:2e:99:1e:f5:31:9f:c5:8d:76:f1:24:0e:56:43:32:0f:
e3:19:5e:60:88:13:f8:a3:9e:9f:d9:4b:de:15:63:fc:e0:79:
cb:95:5d:8d:c3:06:71:e3:3e:79:69:3b:d3:88:b7:90:71:ea:
f3:fb:75:bc:4e:4c:28:4b:07:6c:c3:57:3c:09:2d:4c:6d:f4:
1a:08:6c:1a:c6:87:ae:fb:9f:25:31:19:a9:22:52:3b:93:95:
36:40:e8:c3:89:49:dc:a3:d1:e9:0b:95:89:8d:21:d3:0c:b0:
f3:de:7a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org