Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/o1O284wqNplF5wh-K8JpwP5fSzI.roa
File: o1O284wqNplF5wh-K8JpwP5fSzI.roa (raw, json)
Hash identifier: 89KB/M2hJzozoqpCQEpPYog2dkBLcX3ywYqMgCbvHHM=
Subject key identifier: A3:53:B6:F3:8C:2A:36:99:45:E7:08:7E:2B:C2:69:C0:FE:5F:4B:32
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019054144B015E33F68831D8956951B54C14
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/o1O284wqNplF5wh-K8JpwP5fSzI.roa
Signing time: Wed 26 Jun 2024 10:25:34 +0000
ROA not before: Wed 26 Jun 2024 10:25:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 213.176.74.0/23 maxlen: 24
213.176.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 05:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:14:4b:01:5e:33:f6:88:31:d8:95:69:51:b5:4c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 26 10:25:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a353b6f38c2a369945e7087e2bc269c0fe5f4b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:38:1c:08:b1:a2:46:a0:5f:5d:7b:fc:25:
34:b6:bc:8c:f1:8f:52:f7:a9:5a:8d:cd:bc:0a:b6:
b3:79:12:37:3a:c3:61:34:98:9d:35:aa:c5:3c:00:
b4:6f:17:b5:10:8a:8d:7f:fe:10:45:3a:dd:3c:8f:
66:d7:e6:2f:31:a7:83:0a:8a:35:82:88:91:5b:4f:
03:c0:98:4c:33:e9:9d:13:5e:03:8c:00:da:83:1b:
0b:98:1a:08:af:84:66:e1:9f:3c:9f:23:e3:a8:1b:
1a:8c:0b:3d:b8:bc:50:a0:a6:3d:6b:c0:9d:3d:ad:
76:2e:22:c0:d2:ff:c0:ef:d3:1b:6a:56:69:e6:21:
3d:9b:37:4e:bf:3a:3b:4f:ab:43:15:77:2a:0c:d1:
57:04:79:52:86:81:b6:85:cc:8c:7c:db:02:7e:cb:
4e:ec:f4:47:59:98:e7:8a:74:cd:f2:a4:23:66:ac:
a3:cb:b2:87:96:81:ea:94:a6:e9:64:a6:3e:a7:3e:
3d:d5:ad:7b:69:36:7c:b4:f8:e3:e7:a3:0b:d6:30:
04:bc:7f:2c:4f:61:ae:96:c7:6d:fe:07:36:7b:8b:
e8:da:27:56:fa:1d:4a:65:81:6a:3c:61:b6:21:46:
1b:15:c5:d1:a1:50:1c:6a:b9:24:99:98:0f:28:ae:
82:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:53:B6:F3:8C:2A:36:99:45:E7:08:7E:2B:C2:69:C0:FE:5F:4B:32
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/o1O284wqNplF5wh-K8JpwP5fSzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.74.0/23
213.176.92.0/22
Signature Algorithm: sha256WithRSAEncryption
86:4b:66:09:dc:b2:f5:00:5d:51:f5:40:3e:a5:e3:13:65:7c:
30:a7:e0:c0:c0:4e:e1:2a:58:c2:ef:06:f3:7f:7b:ed:d8:3c:
b4:d4:da:bd:b2:83:9e:1c:fa:ad:3d:97:84:43:40:2b:57:a7:
b7:99:35:7a:47:3d:b1:75:61:e6:da:d0:88:48:3e:1e:67:38:
77:17:18:d4:0e:c7:24:68:a1:11:a6:56:75:a7:2d:2a:0e:67:
d1:8f:2f:4f:87:a1:ed:ca:36:06:2c:90:7d:f8:8b:c0:3a:4d:
4a:2b:0e:61:d0:c9:fe:6f:29:e7:ba:e2:c2:23:de:cc:8d:98:
54:24:9a:4e:f3:e2:bc:8c:e9:7b:5b:83:79:27:24:cf:e5:82:
b4:40:ed:77:a9:f0:94:3f:e1:02:39:ab:ec:9e:8c:5b:9c:e8:
f4:4f:2d:fb:76:77:47:39:93:4f:e1:26:93:31:48:eb:14:dd:
e0:23:b0:82:a7:60:3c:d5:31:f1:a6:2c:86:05:7a:c8:1f:a0:
33:b8:61:94:da:fd:ce:eb:7c:a9:d9:66:5e:0f:b2:1d:4e:6c:
a4:53:00:64:fd:fc:6e:58:78:eb:2d:32:c9:18:62:0a:63:b9:
53:46:38:3f:74:f1:f1:36:c4:31:01:b2:f0:f1:ac:ea:bc:33:
0a:c4:a6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 08:44:26 2024 by rpki-client on console-ams.rpki-client.org