Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/SYvB-uwC0_pl98e5802tSZb0_J0.roa
File: SYvB-uwC0_pl98e5802tSZb0_J0.roa (raw, json)
Hash identifier: 756W7sh3MOGSvPte7vCbqqDT7GV6YAVc94QNVo2upi8=
Subject key identifier: 49:8B:C1:FA:EC:02:D3:FA:65:F7:C7:B9:F3:4D:AD:49:96:F4:FC:9D
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018B5B40832FEDFE92C9ABF79886DCF39C99
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/SYvB-uwC0_pl98e5802tSZb0_J0.roa
Signing time: Mon 23 Oct 2023 06:37:16 +0000
ROA not before: Mon 23 Oct 2023 06:37:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15611
IP address blocks: 213.176.96.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.147.0/24 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
2001:790::/32 maxlen: 48
Validation: Failed, certificate revoked on Sat 04 Nov 2023 09:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:40:83:2f:ed:fe:92:c9:ab:f7:98:86:dc:f3:9c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 23 06:37:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=498bc1faec02d3fa65f7c7b9f34dad4996f4fc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:14:88:12:43:8e:11:20:52:bb:02:28:0c:
52:2e:f0:51:d3:18:d3:f7:90:bf:62:c1:09:df:d8:
eb:ce:68:15:99:9d:f6:b4:ae:2e:ce:8b:c8:69:c1:
93:8d:aa:2d:26:27:c5:d3:6b:1e:21:da:76:4a:39:
35:47:44:f3:4b:3e:31:09:91:48:e3:51:4e:02:ab:
a6:70:b5:14:c5:87:e9:a5:66:01:1e:22:e3:3b:7e:
6c:7e:f1:a8:2c:ba:82:8f:78:35:38:05:6b:9a:86:
f8:ed:9d:47:0b:d9:36:2f:96:0e:34:0b:85:2b:99:
d9:72:07:55:fa:0c:74:c6:69:63:fa:20:83:68:ce:
f2:eb:ff:db:c4:6a:55:bd:5b:b4:c4:0b:66:76:f2:
70:09:58:e2:74:1e:0b:40:21:e5:1b:40:5c:97:1d:
27:ef:14:0a:65:b8:0f:04:79:b7:a5:e7:3e:37:85:
4e:83:98:34:26:1b:52:a6:d5:f8:98:bc:72:5e:6d:
1b:5f:29:66:1e:fd:aa:67:90:b6:09:6a:2a:66:3b:
ae:cc:24:e5:46:d9:c9:37:c5:06:02:a1:07:9a:a7:
14:b2:c7:01:93:f8:51:72:de:68:d3:87:60:eb:61:
48:4d:6c:7f:08:8b:c5:6d:1e:1e:04:82:7f:a5:8f:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8B:C1:FA:EC:02:D3:FA:65:F7:C7:B9:F3:4D:AD:49:96:F4:FC:9D
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/SYvB-uwC0_pl98e5802tSZb0_J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.140.255
62.60.142.0/24
62.60.145.0/24
62.60.147.0/24
62.60.168.0/21
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
IPv6:
2001:790::/32
Signature Algorithm: sha256WithRSAEncryption
5e:75:10:89:50:0c:34:23:d8:93:d5:f6:6d:a6:47:c0:e6:9b:
0e:fc:66:36:7e:68:ae:18:ee:94:23:d4:ac:33:f8:3d:8a:96:
d2:d4:10:53:fa:70:15:62:98:1c:7e:36:6b:9d:74:5c:3a:e5:
78:50:30:c2:8b:fb:0f:25:b4:1a:95:8d:fe:2e:51:36:03:76:
51:a7:79:43:90:81:44:e0:ea:86:ea:4b:68:12:13:b8:c5:2d:
0b:b6:3f:bb:88:fe:bc:a2:d5:2f:40:42:e6:13:e1:6f:5c:ec:
82:6f:ce:b1:ed:76:a1:53:5b:2a:71:ad:07:69:d7:f1:e0:5a:
2b:7b:1b:5e:59:4c:80:af:d5:d2:22:26:ee:f3:da:53:79:95:
c2:b7:3d:3e:4a:22:79:ea:ec:1a:7a:bb:2a:c1:32:c6:f6:11:
67:b4:96:39:d0:6b:fd:f2:3b:9f:b1:31:c7:31:c4:43:29:57:
19:4c:e1:60:e9:67:d1:cd:48:3d:68:46:65:e7:5a:c9:8f:3b:
db:45:d0:61:ab:f8:58:98:79:c2:4d:0b:04:e2:24:44:5f:70:
e1:51:5c:c3:7f:1c:2a:d6:ed:0c:f1:ff:89:f8:72:7b:5f:a6:
de:fa:78:7c:7e:82:7d:78:ef:b0:b0:0f:b1:57:66:49:3e:df:
d9:85:9f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org