Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/mvPhYRgwC9O2BGIMiikvdjQIWJI.roa
File: mvPhYRgwC9O2BGIMiikvdjQIWJI.roa (raw, json)
Hash identifier: WDKchPY8M/ncmpyh6Dc3VgF31cuU6uKq3YvBhdBtLyY=
Subject key identifier: 9A:F3:E1:61:18:30:0B:D3:B6:04:62:0C:8A:29:2F:76:34:08:58:92
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01893A1D5D65AFF8B529CFFFAA16BA61C060
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/mvPhYRgwC9O2BGIMiikvdjQIWJI.roa
Signing time: Sun 09 Jul 2023 10:05:50 +0000
ROA not before: Sun 09 Jul 2023 10:05:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 213.176.2.0/23 maxlen: 24
213.176.120.0/23 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.180.0/22 maxlen: 24
213.176.126.0/23 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.188.0/22 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jul 2023 10:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:1d:5d:65:af:f8:b5:29:cf:ff:aa:16:ba:61:c0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 9 10:05:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9af3e16118300bd3b604620c8a292f7634085892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a3:61:14:0f:f5:55:b1:ea:21:25:06:46:e9:
83:fd:2d:b6:5b:4c:25:24:bf:8d:a6:9e:de:cb:e6:
d1:9f:be:b7:bf:27:95:e6:46:58:57:ca:07:12:22:
7d:f1:22:fb:2c:bc:19:b2:5d:20:98:91:b5:59:b8:
9f:00:aa:a4:63:ec:2f:da:bb:c6:50:0a:b3:69:4c:
8a:d3:d6:9c:32:cf:98:e1:38:ec:16:9b:21:64:4f:
c1:3a:71:e4:0a:77:b0:3b:a6:13:8e:a6:7d:27:48:
cd:67:5b:4a:ff:9c:16:8e:ed:6a:82:c8:dd:05:b7:
c0:4b:b7:44:7d:9c:a6:25:c4:a9:f9:26:a2:a7:77:
f9:b7:16:73:3b:dc:f8:8a:bd:90:48:99:ac:6c:4f:
de:dc:71:02:26:69:65:3d:b6:a7:80:f9:fd:b3:82:
2d:df:67:55:7f:3b:1f:2f:a3:f4:d7:68:cb:d5:a2:
5b:85:d2:12:b3:8b:b4:97:06:35:15:0b:0d:e3:cf:
01:e8:ee:d2:b2:1e:2f:f1:a4:60:4c:25:11:4a:fe:
98:61:ce:57:47:4c:48:1e:9a:5c:ab:9e:13:b1:73:
2e:5e:d5:4b:4c:60:1f:fa:b3:8a:4a:c5:ec:0e:ed:
31:80:cc:52:73:20:65:de:9b:2f:94:de:06:1e:35:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F3:E1:61:18:30:0B:D3:B6:04:62:0C:8A:29:2F:76:34:08:58:92
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/mvPhYRgwC9O2BGIMiikvdjQIWJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.180.0-62.60.199.255
213.176.2.0/23
213.176.120.0/23
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
17:51:80:0f:27:06:fe:21:14:ae:3d:5c:0d:b8:3e:2c:34:98:
0b:81:8d:81:53:66:4e:e0:b0:ac:a3:63:e8:60:60:c4:41:f6:
c7:ad:ac:a2:cc:e4:2e:22:48:ef:5a:7d:0d:2f:52:98:c2:50:
d4:60:56:12:56:a6:09:07:0e:59:4b:4d:66:97:95:99:99:ad:
62:d5:80:9a:a1:f8:f7:32:9c:df:8b:c8:46:b3:2a:50:c0:a5:
54:18:2d:93:4e:7c:42:09:c6:05:45:7e:84:84:7b:66:50:d9:
36:cd:81:64:0b:09:10:49:72:1f:d9:60:aa:17:cd:12:14:5a:
46:d3:51:9d:95:a3:1b:db:09:2d:b4:a0:97:f2:15:29:db:3b:
62:10:ef:85:5d:61:33:52:26:65:b8:5d:40:3a:c7:84:49:83:
5c:d0:6d:13:bd:db:60:b6:c2:14:fb:7e:10:98:1d:2b:29:59:
4e:46:57:b1:23:cd:c2:fd:74:f1:bb:0e:ea:4b:80:e4:bf:25:
f7:e0:97:c4:a4:d8:be:96:36:4d:49:7d:11:f6:34:b6:d8:ef:
ca:f7:3c:2b:ff:32:1a:5a:99:36:20:09:8b:2f:76:19:c5:57:
e9:ef:67:22:e1:70:9f:80:cc:0f:70:68:dd:5a:ee:eb:93:b5:
98:9a:06:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org