Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Y6bkpugkvyPtMMsoF0oPC358RLg.roa
File: Y6bkpugkvyPtMMsoF0oPC358RLg.roa (raw, json)
Hash identifier: e890GUEZIOzeRI1l3YR+LzClhBraQ6VIl9BtvUqcIHk=
Subject key identifier: 63:A6:E4:A6:E8:24:BF:23:ED:30:CB:28:17:4A:0F:0B:7E:7C:44:B8
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018B05154D8EB908AD63482FBD3FF0954ECA
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Y6bkpugkvyPtMMsoF0oPC358RLg.roa
Signing time: Fri 06 Oct 2023 13:02:44 +0000
ROA not before: Fri 06 Oct 2023 13:02:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399045
IP address blocks: 213.176.7.0/24 maxlen: 24
213.176.127.0/24 maxlen: 24
213.176.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Nov 2023 09:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:15:4d:8e:b9:08:ad:63:48:2f:bd:3f:f0:95:4e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 6 13:02:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63a6e4a6e824bf23ed30cb28174a0f0b7e7c44b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:8e:69:79:3b:25:8e:6c:e3:a2:b5:80:7e:
38:35:cb:1b:a2:66:e3:a0:8e:77:9f:96:8e:ac:73:
cc:de:f7:6a:e5:3d:c9:08:d9:75:29:3b:03:d5:ae:
be:83:12:b9:32:f5:ed:ca:af:5d:1e:46:97:0e:97:
e3:db:4f:f8:88:b3:72:39:94:c4:b7:3c:a3:a2:33:
8a:bb:08:42:32:b8:c4:54:82:86:8c:b3:18:04:12:
4c:dd:c9:50:a5:b6:60:ee:5a:72:76:c8:03:10:76:
07:87:f2:17:03:c5:88:1c:aa:11:c9:ac:a7:33:ff:
7a:a0:07:6e:b0:36:7d:9e:08:6f:7f:b8:be:70:a0:
4f:89:aa:c9:72:d5:05:e6:a6:f5:4f:c8:8a:18:8b:
7c:07:c1:1f:eb:1b:9b:78:53:14:89:3f:e2:ed:23:
f0:73:93:1d:cf:ce:33:21:1f:7e:8e:9c:21:b9:65:
7b:e4:b9:1c:99:7e:a9:7b:24:4c:0d:4d:fe:88:58:
54:ad:54:37:a7:ee:b9:1d:7e:d4:ad:04:43:a9:1f:
6d:f6:fe:1e:50:6e:6f:d0:a1:85:c3:86:c6:fc:5c:
52:67:11:1a:ca:20:28:29:44:cf:95:0b:79:9b:3d:
af:c6:0c:41:20:94:aa:68:1e:e3:a3:5d:c8:d8:be:
ff:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A6:E4:A6:E8:24:BF:23:ED:30:CB:28:17:4A:0F:0B:7E:7C:44:B8
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Y6bkpugkvyPtMMsoF0oPC358RLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.7.0/24
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:d3:4a:ac:ee:e2:bd:f9:13:b7:22:be:cf:b0:61:18:df:00:
06:cb:74:e8:d7:04:68:07:da:a7:79:48:81:d2:1b:e9:bb:cc:
f9:f4:62:43:63:cb:e2:d5:45:14:44:a8:c9:86:d0:89:b3:8c:
09:c2:36:d8:59:b8:ba:fd:a6:f3:cf:58:5d:ee:20:87:0c:6c:
3f:66:44:92:8b:3a:7d:51:87:83:fb:3a:a0:97:71:c6:08:2c:
7c:fe:35:b8:82:f7:20:ee:79:65:d4:24:6d:a9:bb:68:02:98:
44:5d:62:8f:95:af:cf:cc:10:22:59:dc:4c:76:d0:fe:cb:42:
ca:20:00:84:c7:f7:11:16:b1:d5:fd:d2:20:12:70:05:e4:8a:
a3:4b:1c:a7:a5:6f:8d:98:95:78:d1:79:39:f0:d9:57:c0:b7:
8f:22:5e:c2:15:05:60:de:18:61:2c:5c:88:41:43:35:c8:99:
27:ed:f5:c0:81:cc:3b:0e:88:fb:74:95:b9:b4:8a:c5:4d:82:
8e:00:dd:5a:de:6c:2a:07:af:70:81:76:2e:78:ed:67:db:86:
ac:4a:54:06:ea:fd:e3:65:5a:d4:a8:ca:ac:65:40:51:1b:58:
d6:68:a1:d6:23:2b:83:e9:a4:94:48:9b:7a:cb:35:bd:52:2f:
fb:c7:b7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org