Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/lV42DRhoDfsuuPHV1ptxk2azpVw.roa
File: lV42DRhoDfsuuPHV1ptxk2azpVw.roa (raw, json)
Hash identifier: 60m3uHCHINuwwJGeye5GndG2mnKeXDNMnxKIPZ0egUQ=
Subject key identifier: 95:5E:36:0D:18:68:0D:FB:2E:B8:F1:D5:D6:9B:71:93:66:B3:A5:5C
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018B0514624C3A55652BF5670A4D87F44B3F
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/lV42DRhoDfsuuPHV1ptxk2azpVw.roa
Signing time: Fri 06 Oct 2023 13:01:43 +0000
ROA not before: Fri 06 Oct 2023 13:01:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399045
IP address blocks: 213.176.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Oct 2023 13:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:14:62:4c:3a:55:65:2b:f5:67:0a:4d:87:f4:4b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 6 13:01:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=955e360d18680dfb2eb8f1d5d69b719366b3a55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fc:39:ab:3d:b9:03:5c:da:3c:79:69:37:56:
0b:33:81:aa:1e:c7:eb:87:aa:0e:58:c1:fa:c9:64:
4b:98:01:28:3c:2b:b6:d3:35:7c:5a:3b:0b:1e:67:
61:34:07:1f:53:48:bc:4b:2e:46:a5:4c:c2:6c:db:
a2:63:5e:9a:7e:06:71:db:3b:9c:d8:74:2e:43:1c:
75:cc:42:63:76:14:6c:af:0a:59:81:86:b1:38:28:
6f:e6:96:22:5b:76:6a:ae:1f:40:2c:3b:81:05:9b:
b9:eb:27:4c:55:bf:75:e7:50:ed:f5:2b:62:d4:d8:
de:07:56:ca:40:be:af:f2:64:eb:ae:e3:54:2a:3e:
99:00:ac:17:6f:69:4a:39:e1:d0:c9:c8:73:09:cd:
55:2e:51:7b:e1:b6:97:3c:c7:c4:4c:d8:b7:81:35:
b2:23:c1:de:c3:c0:30:1d:32:98:c8:97:bd:b1:27:
40:4f:a5:a2:36:20:67:a5:aa:14:e9:61:e1:4c:ba:
c9:c4:0a:ad:22:c4:df:64:71:66:6b:97:93:da:1c:
6d:7a:7d:f6:a2:b3:62:86:dd:62:5d:97:4a:e1:9b:
20:8e:7f:14:cc:1a:05:ee:75:8e:dd:17:2f:a7:fb:
16:24:71:d0:d3:40:ba:63:5f:a6:a1:26:1e:e9:be:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5E:36:0D:18:68:0D:FB:2E:B8:F1:D5:D6:9B:71:93:66:B3:A5:5C
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/lV42DRhoDfsuuPHV1ptxk2azpVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:82:14:02:57:de:f3:95:53:db:0a:e9:d8:40:ab:df:55:a7:
85:72:18:74:30:bc:70:92:ca:a3:d1:53:a5:f3:94:ca:f8:63:
5b:24:62:0b:a5:7b:ae:5d:ab:f3:57:e0:3b:33:c6:2d:5a:ac:
49:0d:54:5d:ed:68:c3:0c:41:f8:35:3f:4e:4f:0e:36:0a:31:
e6:c3:8d:9a:4c:5e:93:d6:e4:d3:44:e9:e3:7f:3e:7b:20:6a:
bf:9b:1d:0e:ff:43:7d:a8:e1:06:2b:1a:31:7e:fe:c4:7b:b7:
49:94:81:61:7c:da:be:8c:c6:35:73:62:ef:49:ce:a2:41:34:
99:5a:e3:91:56:39:e6:a1:f0:ee:bb:28:eb:fe:7f:fb:a1:1d:
71:b1:7c:21:16:e9:8b:98:97:78:59:4c:5a:76:34:41:51:70:
de:b5:35:57:7b:df:ed:87:e8:9b:c0:24:e6:9a:fd:d5:bf:1d:
99:b0:5c:25:c4:49:d7:af:5c:1e:e2:6f:13:84:ac:ed:70:58:
d1:ae:76:e0:24:41:f0:ac:26:58:9c:92:8f:41:84:74:be:88:
96:a0:5e:c2:49:17:74:a3:1e:d0:74:78:be:bf:a7:d4:4f:47:
b1:c3:97:43:0d:6c:0a:2e:0b:a7:6b:33:21:65:c5:6f:06:5f:
28:82:f2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org