Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/pYU5YhH6ojSjuvfe2L2Umcksbmk.roa
File: pYU5YhH6ojSjuvfe2L2Umcksbmk.roa (raw, json)
Hash identifier: uC8sCR4aI8zbkpFaWx0v9PqPEE3xrJwPcYMJdvrn0VM=
Subject key identifier: A5:85:39:62:11:FA:A2:34:A3:BA:F7:DE:D8:BD:94:99:C9:2C:6E:69
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018C86EAD67164F360B08B61E22F822BDB91
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/pYU5YhH6ojSjuvfe2L2Umcksbmk.roa
Signing time: Wed 20 Dec 2023 11:09:46 +0000
ROA not before: Wed 20 Dec 2023 11:09:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 213.176.2.0/23 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:ea:d6:71:64:f3:60:b0:8b:61:e2:2f:82:2b:db:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Dec 20 11:09:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a585396211faa234a3baf7ded8bd9499c92c6e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:71:fd:6d:5c:df:4c:6f:69:b0:da:40:42:e0:
d0:bf:af:a8:3d:e7:e4:57:39:3e:a9:26:f0:5a:2e:
e2:13:48:60:a8:23:86:66:10:c4:2d:ba:1f:20:11:
7d:39:85:86:ad:4f:0d:13:3c:c4:77:02:2c:35:f4:
a5:27:46:fd:09:57:a0:99:67:f4:54:6b:f8:8b:21:
cd:6f:f8:57:92:34:16:53:c6:93:f0:92:21:a1:2a:
1b:c3:df:db:07:8f:04:2b:a1:2e:10:2a:d0:3c:d4:
f7:0e:a0:dc:72:a9:39:48:00:a5:6b:5c:7a:96:6c:
39:3d:1c:77:33:42:fa:87:9e:a1:37:c8:ce:38:e4:
ba:dd:44:51:65:cf:28:b2:0e:e2:f1:5a:9a:c0:03:
fd:b5:d0:9e:8a:57:a1:08:35:5f:56:64:6d:cb:a9:
c6:3c:17:0f:41:83:7b:08:7a:71:0a:d7:2e:fc:14:
ab:6d:85:b3:42:33:b0:ff:e0:35:41:18:b9:17:c1:
69:f3:07:d5:a3:95:b1:42:37:27:73:9d:84:8e:1e:
93:53:fa:69:fb:c0:55:af:12:33:30:58:47:86:d4:
47:66:e1:32:88:65:a6:13:6a:cb:b0:4c:4a:b3:1d:
ed:86:d0:92:92:3a:4f:6d:7b:d5:25:5d:ab:fb:ec:
c6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:85:39:62:11:FA:A2:34:A3:BA:F7:DE:D8:BD:94:99:C9:2C:6E:69
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/pYU5YhH6ojSjuvfe2L2Umcksbmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.196.0/22
213.176.2.0/23
Signature Algorithm: sha256WithRSAEncryption
39:a2:d4:c7:6d:0c:44:e8:05:db:33:36:70:cd:2b:9b:e0:8d:
5d:a5:9a:fb:fc:a0:75:0e:64:69:ab:a2:bb:0a:e3:e5:b4:54:
2d:f6:58:51:7d:57:50:43:5d:99:81:d5:02:44:ad:8d:ae:9c:
b1:7e:39:c1:a9:02:a4:e5:46:b6:e4:c2:69:a9:15:76:1c:0d:
f2:ad:a0:c8:ef:cf:dc:52:6d:ad:20:24:fb:af:25:54:0f:31:
47:c7:ca:83:6c:5c:7c:50:87:87:da:f0:60:40:25:00:31:62:
bb:e1:d9:74:88:71:96:53:5e:6b:34:16:fd:6c:5a:3e:ce:b4:
f3:d7:64:b6:66:31:4a:da:7a:13:a9:62:6a:9b:20:60:c5:cd:
45:43:d6:1f:12:3d:c4:11:71:9b:c0:5c:22:b1:f7:fd:05:c8:
12:40:20:47:cf:fe:65:1e:86:3f:38:43:87:8a:a4:91:a1:0c:
77:7b:e8:b8:a1:46:85:56:7f:46:f5:46:75:be:49:fa:da:de:
4b:20:45:cf:93:95:cd:c2:a3:58:15:93:0e:b7:01:cd:ae:d3:
bb:71:34:3c:a3:13:40:9a:99:56:9a:78:81:16:b4:33:8d:79:
75:83:3d:7b:58:14:66:8d:8e:be:b0:35:1e:f0:6f:12:fc:69:
bc:02:56:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:42 2024 by rpki-client on console-fra.rpki-client.org