Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/SuY1PUGYBjoJZLo-1OdczAakywI.roa
File: SuY1PUGYBjoJZLo-1OdczAakywI.roa (raw, json)
Hash identifier: OdoWbVb0syMTTrcaGI5vR3qmBd/dkSMUYFpU778tjkE=
Subject key identifier: 4A:E6:35:3D:41:98:06:3A:09:64:BA:3E:D4:E7:5C:CC:06:A4:CB:02
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018B99AB35970AB98068B6BA80410B5A3EA0
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/SuY1PUGYBjoJZLo-1OdczAakywI.roa
Signing time: Sat 04 Nov 2023 09:30:16 +0000
ROA not before: Sat 04 Nov 2023 09:30:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399045
IP address blocks: 213.176.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Dec 2023 08:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:99:ab:35:97:0a:b9:80:68:b6:ba:80:41:0b:5a:3e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Nov 4 09:30:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ae6353d4198063a0964ba3ed4e75ccc06a4cb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:77:e7:1e:66:e6:8d:10:8d:ca:9d:df:30:
45:f6:ec:02:72:ee:37:80:5d:3f:34:94:50:70:12:
be:ad:82:d1:86:fd:45:25:82:34:83:ee:2f:d0:c4:
34:35:45:f8:2d:25:93:8b:0f:28:c3:bd:99:b0:ab:
9c:91:08:2f:85:25:ce:7d:7a:a9:d5:1b:31:87:50:
f2:7c:57:da:51:e9:56:89:98:8f:bd:d9:fe:eb:88:
04:ba:97:a8:4c:65:49:2a:5e:b1:f5:80:4c:7d:43:
bc:ed:8a:ad:f2:51:e6:f2:52:2b:c3:a9:5a:82:92:
61:24:86:fe:2d:ba:a8:d5:4d:1a:43:d2:b6:ae:14:
7c:91:5c:60:d4:0f:ba:f2:9c:10:b9:fd:b4:0d:01:
30:55:ce:4d:cd:f2:bd:0b:b4:1b:87:15:a0:85:c6:
cb:f3:60:ab:08:ae:98:c8:d4:ab:7e:68:64:b6:07:
90:0a:f7:ce:6c:c8:1b:e0:b8:6d:4e:b0:cc:1f:ed:
e5:87:15:be:80:0d:58:c7:e6:24:ba:ad:f1:5c:9e:
de:e1:84:ff:62:58:77:db:02:9e:d6:7d:bf:33:86:
73:69:54:22:2e:19:7f:b7:07:15:bd:17:bc:c4:ed:
83:81:41:1b:65:e5:08:0b:fd:51:da:7b:28:a3:67:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E6:35:3D:41:98:06:3A:09:64:BA:3E:D4:E7:5C:CC:06:A4:CB:02
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/SuY1PUGYBjoJZLo-1OdczAakywI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
20:f5:d8:60:45:6e:36:d4:28:96:0b:06:83:b1:db:c4:be:65:
b2:c5:48:f6:ec:30:aa:57:ef:12:eb:3e:4b:4a:f7:e1:e6:54:
b8:7e:71:54:fa:99:e9:c8:08:37:b9:91:5d:66:fd:65:82:ee:
51:e4:d4:4e:23:76:00:d2:6c:5a:d8:04:a0:22:0c:36:5e:14:
21:48:2e:e8:a4:90:49:0c:2b:c6:b1:ad:9c:14:36:7d:23:0c:
d0:38:25:fe:9e:3b:5f:36:6b:ec:ed:0d:45:64:8d:f6:52:69:
1d:92:2b:82:b5:e1:de:56:9d:99:33:72:fc:22:e7:32:d1:9c:
39:49:6c:03:0c:cd:23:a1:68:4c:69:9f:db:16:20:06:c0:1b:
40:c3:59:7b:0a:aa:57:e4:2e:2a:6a:2e:9d:91:30:41:32:d2:
1c:97:36:2f:4f:94:3d:1e:d2:25:b7:da:f3:0f:2f:10:ad:13:
c3:db:31:52:ae:34:fd:5b:0f:58:fa:88:bb:df:06:a7:c1:36:
6e:25:a5:57:9c:9e:0a:8d:a7:95:9e:0a:8b:c3:a1:cc:fd:2b:
c4:f2:3e:8d:3a:c4:ce:b5:61:3d:59:ce:97:7a:11:38:4d:e1:
2e:be:90:67:c0:f3:ef:d0:73:50:58:97:01:a5:8d:d9:51:ef:
9f:6e:be:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org