Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uErPGlN3Axgy2wsK4l2PdZwAqQY.roa
File: uErPGlN3Axgy2wsK4l2PdZwAqQY.roa (raw, json)
Hash identifier: nakdbVOl+e4ujAx9kmfAL+90G1Rh19O0GuKPcWR1qAI=
Subject key identifier: B8:4A:CF:1A:53:77:03:18:32:DB:0B:0A:E2:5D:8F:75:9C:00:A9:06
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01859BDE6327ABEECC1EBE45D3ABAED243B5
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uErPGlN3Axgy2wsK4l2PdZwAqQY.roa
Signing time: Tue 10 Jan 2023 13:28:40 +0000
ROA not before: Tue 10 Jan 2023 13:28:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52209
IP address blocks: 213.176.64.0/22 maxlen: 24
62.60.220.0/22 maxlen: 24
213.176.68.0/22 maxlen: 24
213.176.88.0/22 maxlen: 24
213.176.20.0/22 maxlen: 24
62.60.200.0/21 maxlen: 24
62.60.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jan 2023 08:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:de:63:27:ab:ee:cc:1e:be:45:d3:ab:ae:d2:43:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 10 13:28:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b84acf1a5377031832db0b0ae25d8f759c00a906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:30:93:f6:ce:e1:da:61:ae:b8:8f:8c:4d:
f0:20:19:f1:b2:87:cb:95:18:85:88:e0:e4:5b:bc:
49:fe:a6:86:5e:ca:14:28:2c:eb:b4:4c:e5:14:f9:
da:17:2a:65:aa:02:0f:7d:bd:9e:92:9f:d6:6a:af:
67:b0:56:70:e9:1a:79:f8:36:77:ca:5e:4b:70:d5:
5a:f1:00:84:13:cc:dc:28:c9:5c:05:59:f4:21:74:
08:4a:1f:a4:e2:aa:d0:59:01:86:ec:b9:e7:5b:90:
75:ac:c2:bb:85:41:da:a4:5e:7c:52:27:a9:f4:6d:
e8:a8:88:35:29:4f:a4:13:f9:b0:ba:a7:bc:09:b0:
52:c2:f5:d0:b9:a6:ae:56:35:00:2e:09:96:0c:62:
a5:37:ba:50:a0:c0:4f:3e:b8:14:51:a0:0a:8d:46:
98:bf:f4:48:a1:3f:49:f1:fb:1f:52:b7:b1:cf:d1:
69:eb:c3:83:d8:0e:9d:3c:e4:b4:db:60:48:02:45:
3c:ba:c0:70:1b:08:d9:58:25:a9:41:9f:39:49:00:
16:5a:29:5c:d5:24:2f:42:0c:fe:01:b5:b6:d0:73:
a2:e5:97:b3:62:45:e5:07:50:60:ae:8f:b9:8e:51:
a1:49:7e:f8:c2:26:3e:f9:6d:00:4c:4b:aa:d8:2a:
40:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4A:CF:1A:53:77:03:18:32:DB:0B:0A:E2:5D:8F:75:9C:00:A9:06
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uErPGlN3Axgy2wsK4l2PdZwAqQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.200.0-62.60.211.255
62.60.220.0/22
213.176.20.0/22
213.176.64.0/21
213.176.88.0/22
Signature Algorithm: sha256WithRSAEncryption
58:30:ae:d3:fa:6b:49:b5:c2:5c:fd:b1:ff:31:d8:f5:d7:06:
04:8c:91:af:ea:68:4b:a2:e7:8e:da:78:59:07:8a:9a:be:44:
f9:b1:20:e7:3b:d2:21:de:e1:e2:77:7c:c6:aa:41:27:64:3b:
23:be:6f:1b:83:8b:36:1c:8d:12:44:fc:11:15:3f:c5:15:ae:
49:be:54:1c:20:62:b0:6c:a9:ec:ed:d7:16:7a:03:47:c7:ee:
d7:d7:6f:02:e5:ee:ab:29:44:68:3f:19:b1:e4:19:ea:9e:45:
51:00:53:0a:a6:f8:d8:dd:37:2b:bf:2c:16:bd:fe:46:c2:0b:
7d:33:a8:e6:af:85:04:72:7c:ca:1b:85:40:a5:b0:1a:c2:08:
4b:e3:2c:a3:0b:82:ea:22:16:26:82:1f:84:ef:d6:ef:2d:f6:
31:a9:35:2d:00:a1:8c:52:9d:07:39:a8:70:30:58:db:6a:4a:
79:d0:1c:89:e5:7c:88:4f:88:c9:26:63:1e:2e:81:8a:42:bc:
24:91:9e:70:03:05:df:2b:dc:2c:b8:d8:dc:8a:89:ab:34:e9:
e0:4c:6a:e5:8d:31:16:78:50:98:59:e9:89:f5:8f:1d:45:01:
3b:87:62:f8:20:45:ca:bd:45:45:37:29:92:fc:19:3b:77:db:
4f:4a:58:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org