Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/sJiTjgKku5SBE-wdNjN6HvoTM-Y.roa
File: sJiTjgKku5SBE-wdNjN6HvoTM-Y.roa (raw, json)
Hash identifier: y7xkJ4gboGWlyvnWYl+yuI4fI2ofuKyCi5TLDamv/UU=
Subject key identifier: B0:98:93:8E:02:A4:BB:94:81:13:EC:1D:36:33:7A:1E:FA:13:33:E6
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01867A086BB8C7321FDE2F399BE28678D651
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/sJiTjgKku5SBE-wdNjN6HvoTM-Y.roa
Signing time: Wed 22 Feb 2023 16:50:17 +0000
ROA not before: Wed 22 Feb 2023 16:50:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206065
IP address blocks: 213.176.68.0/22 maxlen: 24
213.176.72.0/22 maxlen: 24
213.176.88.0/22 maxlen: 24
213.176.112.0/21 maxlen: 24
213.176.20.0/22 maxlen: 24
213.176.24.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:08:6b:b8:c7:32:1f:de:2f:39:9b:e2:86:78:d6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 22 16:50:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b098938e02a4bb948113ec1d36337a1efa1333e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:2a:a8:62:6f:d3:2d:73:0d:b8:6a:9e:e6:
6b:2e:af:a0:53:d4:a8:cb:ee:7c:88:74:31:2b:84:
dc:15:5a:72:d9:44:3d:94:54:e9:7f:c0:bf:e6:cf:
cd:1a:af:66:d5:dd:4b:95:1f:fb:04:e4:d8:bf:90:
a2:e8:af:3f:19:3d:ae:17:63:b6:92:cc:1e:ef:d4:
aa:3b:48:b4:5b:90:6a:4b:9c:5d:0b:ba:93:ba:a9:
37:d4:03:60:45:80:9b:a8:cc:20:cb:bc:ee:93:81:
df:94:0e:c8:64:97:cf:e3:9c:55:55:d6:30:cf:12:
de:dc:81:25:de:e9:31:0d:1e:e6:c7:e2:c4:dc:db:
35:3f:1e:f8:57:24:03:02:4f:a7:e2:74:3d:85:4e:
c0:0e:b8:0b:71:82:54:01:84:79:76:ff:34:c7:84:
40:e4:39:9e:16:cc:db:34:0e:53:0a:ac:b5:4e:65:
e4:a9:f1:97:2e:d6:76:01:12:e3:60:c5:79:f4:24:
b3:ad:4b:34:04:ed:4b:d9:73:05:07:5c:af:95:6d:
4c:b2:76:bd:fb:42:05:81:4f:86:bb:71:b6:eb:ef:
f8:08:5a:e9:ed:e6:b7:5c:82:93:c6:6c:a2:d1:79:
f5:e4:45:d4:61:91:c6:c7:28:0b:c9:06:81:e1:4f:
09:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:98:93:8E:02:A4:BB:94:81:13:EC:1D:36:33:7A:1E:FA:13:33:E6
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/sJiTjgKku5SBE-wdNjN6HvoTM-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.20.0-213.176.27.255
213.176.68.0-213.176.75.255
213.176.88.0/22
213.176.112.0/21
Signature Algorithm: sha256WithRSAEncryption
14:5a:a6:c4:bc:43:8e:2c:1a:a6:57:c9:66:5b:99:a6:a9:0d:
88:18:2c:e8:c0:90:a3:56:e4:a9:ec:b7:09:30:75:f4:d3:6e:
35:45:ec:62:9a:aa:94:45:4f:87:da:32:58:48:6e:68:88:0e:
01:c2:de:8c:b7:00:8a:cb:bb:50:53:0f:e3:8a:52:30:a2:3e:
50:3e:66:5a:b0:35:29:55:58:a5:c8:16:45:f5:53:44:e3:c9:
2d:39:8e:d6:43:5a:8d:07:37:aa:fb:c5:9e:d4:a8:0c:b5:4c:
03:bf:d6:3a:7b:92:f8:04:29:8f:7d:30:9b:1c:2b:3a:58:2e:
91:d3:c0:0a:ba:54:e5:14:e2:57:35:cc:11:93:78:c0:3b:1b:
81:eb:f7:af:db:60:85:ce:21:2a:31:ea:6a:f1:1d:aa:84:fc:
20:6b:52:38:a1:72:f8:02:3d:f8:3c:b7:b8:f0:f6:91:1d:01:
67:15:1e:ae:5d:45:63:d3:88:08:74:54:16:62:37:2a:85:2b:
35:cd:7b:40:7f:25:18:06:51:49:47:25:ed:9d:97:e2:31:86:
a7:a5:8d:40:a8:61:c7:70:a8:3f:a3:04:81:03:8a:b6:c3:fb:
55:fc:45:80:e3:7b:0c:8d:9f:f3:55:d1:92:a5:bf:e3:ec:ef:
d2:a7:9f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:35 2023 by rpki-client on console-fra.rpki-client.org