Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/plGwzu16YlaN0kWJwogMNoHyy6A.roa
File: plGwzu16YlaN0kWJwogMNoHyy6A.roa (raw, json)
Hash identifier: ccYg3aakvaLVENSQRlWgmHy7c+z/juccbsWp3fPi6EE=
Subject key identifier: A6:51:B0:CE:ED:7A:62:56:8D:D2:45:89:C2:88:0C:36:81:F2:CB:A0
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018894C18FBABA66BFEDFA2F461D1DF5D0AC
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/plGwzu16YlaN0kWJwogMNoHyy6A.roa
Signing time: Wed 07 Jun 2023 07:28:13 +0000
ROA not before: Wed 07 Jun 2023 07:28:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 213.176.2.0/23 maxlen: 24
213.176.120.0/23 maxlen: 24
213.176.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jul 2023 12:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:c1:8f:ba:ba:66:bf:ed:fa:2f:46:1d:1d:f5:d0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 7 07:28:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a651b0ceed7a62568dd24589c2880c3681f2cba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:22:c4:bc:f2:d1:46:75:0d:9e:30:86:6b:
de:d2:b9:09:5c:65:7e:ba:11:cc:ba:73:d5:b9:38:
08:91:e0:f5:2f:48:9a:27:58:c7:58:94:1a:d7:98:
e4:56:4e:14:93:91:0f:50:cc:c7:77:b2:2b:33:24:
10:8a:34:9d:af:05:95:55:be:a7:be:aa:9e:38:07:
fb:3f:e4:95:cd:0f:96:d8:d6:e7:0f:44:f8:56:bf:
a0:9f:bc:ee:8b:69:e9:a1:e9:4b:5a:71:40:a0:98:
95:bc:6a:86:79:ba:24:1c:4d:c3:5d:82:c2:b0:0c:
29:0c:65:0f:5e:1d:65:8e:9b:32:f0:f6:bb:8a:ec:
4f:03:5d:45:46:d7:f7:7c:9d:cc:11:9b:87:aa:ed:
c4:cd:5f:bc:41:81:b9:13:3a:00:fa:56:4e:23:d5:
21:84:56:ab:73:8a:fe:f8:0c:8a:30:f0:97:ad:63:
82:f2:2f:5a:d0:3b:1f:c2:47:9a:5d:59:80:f9:c0:
d7:19:9a:b3:bc:f1:71:c5:cb:b5:a0:3e:0a:d8:4a:
8d:a4:f8:9f:71:9e:32:ec:82:d4:df:a7:ba:6d:b4:
78:5a:b3:8b:56:6a:68:81:84:88:1f:fe:37:27:48:
ea:8b:e1:90:e6:84:12:03:7d:25:fe:13:e6:f5:59:
83:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:51:B0:CE:ED:7A:62:56:8D:D2:45:89:C2:88:0C:36:81:F2:CB:A0
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/plGwzu16YlaN0kWJwogMNoHyy6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.2.0/23
213.176.120.0/23
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
67:3b:bd:c1:dd:f1:93:b0:da:4f:38:8a:a7:f9:e8:94:b0:19:
3a:75:e3:38:0a:7e:fc:86:44:81:22:84:5b:fb:e4:1b:30:f5:
94:1a:b5:b2:2a:e5:86:3b:d2:cd:6e:e6:28:53:78:28:27:41:
87:df:1a:54:6f:03:d0:81:e8:c3:0b:48:7c:a2:44:b1:4a:e2:
b5:fb:f0:e2:16:f9:06:77:55:e6:82:a7:a2:1c:4e:2d:b1:98:
4e:f5:ff:db:39:e9:60:b0:05:55:1e:e4:3e:40:8e:b9:2e:ef:
5b:9a:e9:1b:40:ac:c4:98:41:72:4b:87:84:02:44:08:e0:c8:
f3:0b:f7:26:a6:1c:0b:d3:1d:a9:41:90:84:b3:b5:b2:59:f5:
36:f9:41:48:ec:34:b9:ff:0f:7f:3a:75:c3:70:59:6a:84:09:
51:b3:38:7b:cb:3c:ac:14:ef:b7:ee:3a:c3:ba:af:06:98:56:
e4:17:ce:13:98:67:c9:2c:dd:05:e2:ea:8d:9a:00:f3:83:f6:
55:61:b1:c9:52:82:cc:d9:4d:2d:cd:c9:69:ff:50:38:75:83:
1b:00:99:90:be:a8:89:af:7b:45:de:fd:9d:88:ad:c6:36:90:
3c:a8:0a:0d:90:4e:d3:05:b4:68:9e:b9:14:65:5e:b0:dc:f8:
ba:e5:54:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org