Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ZUG6GM7TktsxApGvXfbiTCzdUSc.roa
File: ZUG6GM7TktsxApGvXfbiTCzdUSc.roa (raw, json)
Hash identifier: P+MBUNNfN3fyBuBsD1TSY6RBBbUfi3SzX2Ojup+eCy0=
Subject key identifier: 65:41:BA:18:CE:D3:92:DB:31:02:91:AF:5D:F6:E2:4C:2C:DD:51:27
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01884782599E0B1FE4DAB571F61E098DB026
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ZUG6GM7TktsxApGvXfbiTCzdUSc.roa
Signing time: Tue 23 May 2023 07:28:24 +0000
ROA not before: Tue 23 May 2023 07:28:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 213.176.2.0/23 maxlen: 24
62.60.164.0/22 maxlen: 24
213.176.6.0/23 maxlen: 24
213.176.120.0/23 maxlen: 24
213.176.126.0/23 maxlen: 24
62.60.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 May 2023 11:25:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:47:82:59:9e:0b:1f:e4:da:b5:71:f6:1e:09:8d:b0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 23 07:28:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6541ba18ced392db310291af5df6e24c2cdd5127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cc:81:d7:6f:61:25:1f:53:cb:00:0d:36:80:
ec:fb:24:69:ff:0b:14:69:0f:f3:bf:d3:72:53:f9:
d7:1e:b5:15:66:a7:53:4c:09:7d:c2:94:a5:09:5c:
d4:30:50:09:58:94:e7:64:6b:bf:d6:71:bc:db:ca:
4a:64:46:86:55:78:a6:90:ce:2e:5f:1c:cb:c2:ed:
d4:4e:13:61:01:e8:0d:57:9f:e2:26:bb:57:ea:db:
2c:1a:9f:5b:41:96:9d:c0:ea:f7:86:b9:c1:5b:db:
98:de:4a:b8:69:f8:ce:b0:62:8d:ce:99:66:f2:a0:
2c:ed:e9:88:52:ff:53:58:a2:f3:22:94:f3:b0:97:
b0:48:12:e7:a7:96:c8:b9:73:a2:89:c5:19:72:f3:
a9:28:b8:8e:33:83:22:96:8d:5b:6b:a0:e5:d0:d1:
08:2d:58:e8:6b:33:59:f5:3f:82:aa:0a:10:63:36:
2b:21:7f:1c:49:6f:89:b9:13:01:82:fc:5b:b0:46:
05:85:58:59:7a:ff:67:b8:d3:af:e4:04:3d:c0:9b:
bf:db:2d:4d:0c:cc:7d:f8:78:e7:b5:39:df:82:40:
bf:22:25:c7:fb:fe:e6:c3:d4:18:21:2d:ec:62:19:
9a:4a:a3:31:9a:21:fe:64:66:28:e8:c8:1d:2f:6a:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:41:BA:18:CE:D3:92:DB:31:02:91:AF:5D:F6:E2:4C:2C:DD:51:27
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ZUG6GM7TktsxApGvXfbiTCzdUSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.164.0/22
62.60.188.0/22
213.176.2.0/23
213.176.6.0/23
213.176.120.0/23
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
cc:f9:17:36:a6:c9:d4:4c:f4:34:c7:db:72:cd:e3:9e:57:f5:
3c:1e:67:e0:20:23:88:85:1a:9c:63:02:6b:41:60:e9:d5:0b:
73:a0:23:8c:34:7e:51:eb:a1:7d:22:91:47:ea:44:39:46:7a:
06:3a:00:0b:d3:61:66:f5:74:8e:41:18:4c:9e:c0:87:bb:f5:
a6:49:38:d4:40:b8:45:6e:81:41:f4:f3:4d:53:09:8c:38:ee:
7c:18:cf:c3:e8:c7:22:52:0e:bf:f8:80:da:96:ed:04:43:24:
ba:3d:21:e1:62:9a:ca:b3:97:69:fe:0e:6f:33:aa:62:3d:cb:
7e:8e:da:23:9e:6b:63:ce:f0:45:53:27:f0:36:c3:4f:57:06:
f8:d8:51:b3:be:8c:0f:64:e9:27:b3:09:21:a9:a3:0b:b2:aa:
6a:b2:95:26:c3:de:88:33:2b:1f:a1:f2:bc:dc:40:a1:d3:c0:
ce:4c:11:a3:8d:2e:e1:16:3f:28:65:b3:0b:76:0e:76:2d:f6:
04:bb:f6:a0:0c:8c:fc:ec:68:07:4e:63:60:82:3e:3c:2c:e9:
3a:29:a7:df:01:53:32:0a:57:f7:4f:83:9b:32:2a:d0:9b:c0:
c4:62:a9:46:7a:71:0e:40:9b:86:b0:d6:12:82:76:aa:6d:e9:
68:da:fd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org