Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eWXO0ZSsft2V9v9S6rYLT4afq_c.roa
File: eWXO0ZSsft2V9v9S6rYLT4afq_c.roa (raw, json)
Hash identifier: 8HTOOdY0FWYGrTJBxoKWeQZ9zi7vchetAThJiZiOEao=
Subject key identifier: 79:65:CE:D1:94:AC:7E:DD:95:F6:FF:52:EA:B6:0B:4F:86:9F:AB:F7
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018B5C3E1B9E6EEAC259BBC56646D51A8C2E
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eWXO0ZSsft2V9v9S6rYLT4afq_c.roa
Signing time: Mon 23 Oct 2023 11:14:16 +0000
ROA not before: Mon 23 Oct 2023 11:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211421
IP address blocks: 62.60.146.0/23 maxlen: 24
213.176.6.0/23 maxlen: 23
213.176.121.0/24 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Dec 2023 08:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:3e:1b:9e:6e:ea:c2:59:bb:c5:66:46:d5:1a:8c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 23 11:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7965ced194ac7edd95f6ff52eab60b4f869fabf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c4:be:80:c0:5d:3a:b7:1b:a5:04:e5:5c:69:
9e:70:33:2b:a1:1a:8b:68:e0:7c:d2:00:89:35:2e:
fe:d5:98:2b:d4:be:6f:6c:ea:85:c7:c8:e4:c3:5c:
a7:c7:35:6c:27:07:44:d9:0d:9f:04:37:40:ba:a7:
d5:85:8d:74:1d:ec:42:e8:87:fd:4b:bb:69:70:7c:
de:21:22:dd:a7:f8:ce:07:c7:78:8d:f9:81:f2:47:
0d:6a:5c:ee:e9:b7:1f:c8:ac:fe:0b:34:90:94:dd:
4f:54:bb:9f:cb:e6:23:d0:bf:61:df:7d:0a:39:a9:
d7:ec:dc:55:d9:30:19:94:3e:86:68:c3:6c:7a:01:
f5:b0:00:7f:96:74:73:e4:ae:ed:07:6a:7a:49:b9:
d6:f8:22:03:b6:bb:d1:66:ef:be:25:21:3d:fa:a5:
49:ff:6b:12:38:ad:da:d8:8c:78:b7:e3:f3:93:13:
c0:79:66:07:ca:19:a0:68:17:da:b1:cb:bb:03:8f:
36:be:fa:fd:30:ff:0f:9c:ea:2b:4e:1a:47:b6:3c:
d6:70:e3:6d:d0:d0:0c:b3:4e:44:10:cd:32:13:25:
d0:3d:a3:17:4c:09:62:e0:c0:5a:70:d3:a6:eb:75:
89:e4:5c:20:f0:a2:1a:e0:b7:00:06:34:9f:a7:bb:
7f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:65:CE:D1:94:AC:7E:DD:95:F6:FF:52:EA:B6:0B:4F:86:9F:AB:F7
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/eWXO0ZSsft2V9v9S6rYLT4afq_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0/23
62.60.196.0/22
213.176.6.0/23
213.176.121.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:5c:a7:91:89:58:fb:9f:23:59:b2:eb:33:8d:bb:65:be:fc:
64:bd:e8:3b:11:f8:13:42:7e:c8:d9:ad:f1:39:5d:e7:28:0f:
a8:5c:4a:c0:06:ac:d3:a0:26:a9:38:6c:c2:d3:23:a1:e4:9e:
b5:34:0b:bb:3d:43:15:84:d6:9e:d0:33:c3:e9:b9:da:de:3e:
56:ad:19:76:f7:8b:9c:55:05:cf:d0:96:ba:e1:a4:b1:58:91:
2d:b3:e4:24:c9:39:7c:34:d5:ee:7d:cd:c7:f2:e9:f6:f4:53:
3a:12:eb:66:24:00:cc:a6:b3:66:5a:60:d2:7e:fc:2b:c3:33:
5b:57:af:7b:03:ac:bd:c7:0c:35:2c:3e:54:4b:5b:a1:c5:65:
f6:0f:51:34:d8:62:3f:ce:e2:ee:f5:08:c7:36:03:54:0e:bd:
14:0b:13:97:89:6b:bf:b1:f4:d6:88:09:30:11:f8:ca:8d:d7:
c4:d2:ed:d1:80:58:62:3b:ac:f3:a8:82:8c:75:3f:56:97:70:
f3:7e:15:c5:bd:e9:0c:0c:e2:c7:18:5e:80:e1:9b:ba:a7:35:
ce:4d:16:01:d7:f7:01:fc:d1:70:f2:65:f7:71:b4:36:b8:4c:
91:06:20:c2:9d:23:41:b1:4a:33:2a:67:67:9f:3b:88:29:04:
db:54:fe:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org