Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/kULgOYYpnr9iLS-XuNIMCZFh_TE.roa
File: kULgOYYpnr9iLS-XuNIMCZFh_TE.roa (raw, json)
Hash identifier: fs2zIj9Yq4f844I2iOPy3E7ZlxZJ+25pY6Als4KYAD8=
Subject key identifier: 91:42:E0:39:86:29:9E:BF:62:2D:2F:97:B8:D2:0C:09:91:61:FD:31
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018570B06FDD3A12DB90CDD669C03B0A0307
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/kULgOYYpnr9iLS-XuNIMCZFh_TE.roa
Signing time: Mon 02 Jan 2023 04:14:48 +0000
ROA not before: Mon 02 Jan 2023 04:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21700
IP address blocks: 213.176.72.0/22 maxlen: 24
213.176.92.0/22 maxlen: 24
62.60.146.0/23 maxlen: 24
62.60.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jan 2023 07:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:6f:dd:3a:12:db:90:cd:d6:69:c0:3b:0a:03:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 04:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9142e03986299ebf622d2f97b8d20c099161fd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:78:be:8c:26:fe:cb:54:9b:39:aa:ba:4a:70:
a8:5c:e2:56:3e:a4:f4:4a:97:ec:0b:e2:6e:85:eb:
ea:23:7a:6c:06:f0:1f:b0:8b:bd:fa:c3:20:11:39:
38:89:36:35:c5:6a:0a:05:b0:80:c4:95:c2:26:74:
c3:25:7f:7a:5b:cb:c2:65:53:d3:9b:62:52:d0:fa:
61:36:f7:98:2a:bd:58:15:82:58:dc:7e:67:df:a7:
1b:de:88:7a:5f:fa:de:d4:23:ef:0f:34:f2:e8:a2:
ca:4b:d6:d0:eb:47:7a:e6:f8:c0:e3:a4:e0:4c:66:
f7:93:53:eb:c2:cf:26:e6:0b:bf:09:a4:4d:cd:36:
39:94:5a:ee:89:d4:61:dc:5d:c4:a1:9a:9f:85:10:
68:3d:1d:a9:b9:5f:ed:f4:45:c8:0e:91:f2:3c:32:
31:a9:c8:44:b9:49:23:41:78:04:39:09:8b:7d:60:
d0:b7:4d:1c:cc:5b:cf:ae:f2:6d:4a:61:10:9c:d2:
34:1f:a6:f7:af:a4:96:24:c7:a6:21:e5:12:65:e9:
ac:63:b2:66:22:6c:09:54:1f:15:10:aa:98:f7:80:
69:49:87:74:96:41:d1:37:c4:3e:90:68:a0:ae:8f:
b7:48:12:ce:b9:fb:0e:70:af:ad:e2:f9:63:11:d8:
2e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:42:E0:39:86:29:9E:BF:62:2D:2F:97:B8:D2:0C:09:91:61:FD:31
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/kULgOYYpnr9iLS-XuNIMCZFh_TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0/23
62.60.208.0/22
213.176.72.0/22
213.176.92.0/22
Signature Algorithm: sha256WithRSAEncryption
32:2f:2f:ab:73:53:e8:48:d5:d5:b4:7f:12:ea:09:28:a3:46:
d4:19:28:67:8d:b1:63:8c:bc:9a:58:8a:a8:cc:9e:26:ef:28:
b1:e2:8b:02:ab:ab:a9:57:36:06:e6:40:15:fa:09:02:7e:5f:
2a:5a:ce:9a:b2:30:5d:72:e6:8d:08:40:d2:c0:7c:9a:3a:c8:
f3:bf:6e:da:17:61:1c:2f:b2:e6:61:aa:17:20:c2:98:1a:26:
71:47:15:44:f2:df:ac:29:aa:0f:aa:02:22:4c:7e:33:75:54:
23:6d:08:a4:59:64:76:4d:fd:e9:6e:7d:aa:ec:a9:88:7a:f1:
8f:be:70:b2:98:25:60:46:92:c1:45:5d:c1:54:0c:96:9d:a7:
27:f0:2d:32:f0:0e:8d:70:de:ed:1d:51:3c:60:58:75:e8:c0:
48:c7:04:36:07:9a:76:a0:4b:37:e9:39:4e:36:94:b9:cc:0c:
5e:cb:bc:b6:1d:78:cd:2b:d0:21:02:bb:e2:b6:1c:f5:43:3c:
b2:d3:6c:77:a1:2f:16:62:ff:e4:ca:54:af:09:5e:74:e9:7e:
cd:af:55:fc:2d:da:a4:20:9a:5b:24:ca:2a:08:3f:f2:7b:7b:
46:64:67:89:86:0d:ee:3b:59:01:a1:a2:71:40:fb:49:cf:2d:
61:56:c6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org