Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/TFQyrk8TekWC2f0vhJDbYBZK_n0.roa
File: TFQyrk8TekWC2f0vhJDbYBZK_n0.roa (raw, json)
Hash identifier: xQRA3YU9UG1UuR03kefC4tWbswXbkfeSdrXF1+LszUs=
Subject key identifier: 4C:54:32:AE:4F:13:7A:45:82:D9:FD:2F:84:90:DB:60:16:4A:FE:7D
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018A8D21DD0B6BF9E99791A07233D816A154
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/TFQyrk8TekWC2f0vhJDbYBZK_n0.roa
Signing time: Wed 13 Sep 2023 06:02:01 +0000
ROA not before: Wed 13 Sep 2023 06:02:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15611
IP address blocks: 213.176.96.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.141.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 05:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:21:dd:0b:6b:f9:e9:97:91:a0:72:33:d8:16:a1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 13 06:02:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c5432ae4f137a4582d9fd2f8490db60164afe7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:95:33:56:aa:84:2f:28:75:77:f5:56:f2:
0d:ee:c2:bc:12:6d:8b:e2:d6:ef:14:2b:74:d9:5b:
f3:6c:4e:45:18:70:48:e6:d4:1d:ed:b5:ae:b8:92:
89:b9:e9:7c:4c:7a:17:19:e5:d7:56:fc:72:9d:c4:
67:de:ac:ba:be:14:ee:9e:e7:e1:0d:42:32:5e:59:
7e:54:da:f6:a7:d0:8d:cf:99:c2:65:e5:99:fd:fd:
f1:20:0f:f2:f6:3c:aa:37:e9:5d:08:9e:65:73:82:
c6:c6:f7:0f:d6:35:0a:88:d3:af:89:81:43:36:e2:
98:42:53:59:a0:37:f2:85:cc:1d:d6:dc:62:a0:50:
75:1a:3b:d7:51:af:6f:cb:20:bc:8f:cf:3e:0c:7a:
7d:3f:0f:71:95:2d:56:47:5e:7b:e9:27:27:73:f0:
0e:44:f6:6e:3c:45:f2:d5:f0:79:a1:89:0d:5d:a5:
bf:60:5b:92:d2:88:02:c3:e6:d7:ee:b6:9a:41:b9:
b9:04:16:99:57:3e:8b:b5:fd:a6:23:78:67:d0:ae:
18:2c:ab:8d:76:b0:15:52:74:d5:22:04:94:0c:c3:
cb:02:49:47:4b:76:b8:4a:f1:e9:c6:23:74:b4:e8:
a3:6c:df:dc:bf:0c:9d:cf:5f:1d:de:9b:2c:3c:7c:
52:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:54:32:AE:4F:13:7A:45:82:D9:FD:2F:84:90:DB:60:16:4A:FE:7D
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/TFQyrk8TekWC2f0vhJDbYBZK_n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.142.255
62.60.145.0/24
62.60.168.0/21
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
Signature Algorithm: sha256WithRSAEncryption
6f:af:8c:ab:b7:9d:83:ee:0a:9d:5b:a5:81:c4:6f:73:ad:bb:
73:b7:0d:2b:4a:e0:ad:1d:12:68:34:d7:2f:32:d0:28:99:d0:
15:25:97:0d:0f:db:49:5d:70:be:fe:c2:04:0d:94:cd:d6:15:
85:38:56:26:cd:2d:7b:5d:53:16:f1:d6:86:26:f2:7a:84:5e:
11:f4:62:fb:d8:33:c0:0a:56:a9:27:c6:0a:31:5c:78:24:bc:
ee:6a:0d:64:6d:8d:ed:07:f8:7c:11:7c:ca:e1:ae:71:18:cb:
ca:ef:60:92:d8:bb:3f:7d:1a:a8:c2:83:5a:1a:30:3b:fa:1f:
2d:a5:ab:22:6d:54:22:d4:c0:44:96:ae:d6:a7:f9:f1:f2:76:
a6:4b:24:7f:af:7b:54:2d:a5:22:d0:f2:ef:ae:e4:2c:c0:69:
f5:3c:7a:af:8e:14:8f:ed:f4:56:11:95:14:bb:2e:e2:b7:58:
33:e6:65:57:b8:a3:c6:46:32:c7:ad:88:72:a3:0b:22:38:1a:
cd:12:4b:97:ab:c1:e9:42:a9:22:45:42:db:89:4a:03:25:86:
3e:63:3a:9a:78:b8:65:c3:06:ad:90:5d:ba:e7:0b:f6:be:ed:
92:c5:fb:52:8e:9f:b2:67:8f:fc:75:e9:ed:87:2e:b9:1f:71:
5a:87:b8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org