Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/znhdn0eh3q-uyoYj4LEhcwrsNH8.roa
File: znhdn0eh3q-uyoYj4LEhcwrsNH8.roa (raw, json)
Hash identifier: 4djC1l8QNx7mCn4vFja0c0MUFcfr2KyTcEX0W7aupfg=
Subject key identifier: CE:78:5D:9F:47:A1:DE:AF:AE:CA:86:23:E0:B1:21:73:0A:EC:34:7F
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018610C99A4119832A49F788E44630A57A9B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/znhdn0eh3q-uyoYj4LEhcwrsNH8.roa
Signing time: Thu 02 Feb 2023 06:21:33 +0000
ROA not before: Thu 02 Feb 2023 06:21:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206065
IP address blocks: 213.176.68.0/22 maxlen: 24
213.176.72.0/22 maxlen: 24
213.176.88.0/22 maxlen: 24
213.176.112.0/21 maxlen: 24
213.176.20.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Feb 2023 17:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:10:c9:9a:41:19:83:2a:49:f7:88:e4:46:30:a5:7a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 2 06:21:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce785d9f47a1deafaeca8623e0b121730aec347f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:92:48:b8:34:fc:80:0e:3c:9a:d0:78:23:
6b:8a:66:34:22:e9:4b:54:d3:0e:66:25:9f:e8:fe:
a2:e9:1f:cf:bf:28:52:37:79:9c:60:cd:b4:bf:24:
a5:26:69:25:b0:a9:0e:68:e3:8f:57:07:eb:09:88:
7c:0d:71:66:32:d0:65:28:de:c8:b9:74:25:ed:12:
47:5e:2b:4f:27:99:75:70:a1:a8:19:ca:02:93:81:
3f:8f:06:77:c6:78:f8:b7:92:16:da:06:fd:62:3e:
1e:d6:35:47:80:a6:5c:38:e1:03:5c:c4:97:51:31:
ba:63:7e:ad:fe:90:75:06:31:10:59:0e:c4:90:63:
93:dd:7e:cd:b8:a3:65:8a:a1:13:5b:dc:df:00:ab:
f8:d0:92:e7:06:25:69:b5:38:a5:3f:a4:24:bc:28:
3d:e0:fc:9e:ce:af:f2:de:e2:1e:cf:07:5f:be:87:
8d:4c:4e:56:f2:76:e4:3f:93:f6:b9:7d:29:62:88:
9e:9d:37:30:8d:ca:c4:a4:27:37:9f:5d:fd:66:51:
41:00:2b:8b:d4:dc:fb:b2:49:83:cf:91:15:82:a2:
40:70:18:14:09:35:8c:3d:4c:b9:58:18:0d:4d:5d:
fd:6a:42:ab:89:54:5b:73:d8:7a:82:12:b2:9c:bf:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:78:5D:9F:47:A1:DE:AF:AE:CA:86:23:E0:B1:21:73:0A:EC:34:7F
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/znhdn0eh3q-uyoYj4LEhcwrsNH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.20.0/22
213.176.68.0-213.176.75.255
213.176.88.0/22
213.176.112.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:1b:79:6a:d0:cc:60:06:bf:63:f1:03:b8:24:2b:03:34:95:
7a:61:65:e5:e2:d4:66:1b:44:7a:7a:89:05:5a:d4:17:c8:e5:
98:e9:d5:8b:52:65:de:bf:ed:de:37:f2:d5:17:8f:d8:d3:cc:
8a:76:47:81:cc:53:74:4d:f1:1e:bf:f7:89:ab:32:cb:28:80:
15:cd:d2:2a:81:62:b0:66:39:10:c3:7b:2e:fe:2c:17:ac:7b:
70:78:77:57:d3:6e:b5:c0:f3:e8:65:59:32:69:a3:38:f1:e5:
6f:84:53:c4:20:92:45:11:db:e4:44:23:ca:28:47:f4:a2:8b:
68:e4:58:68:d7:9f:36:bd:fa:2f:c0:9e:fd:08:51:5e:11:ff:
bb:74:7d:49:dd:1b:f1:ab:89:8e:e0:3f:f9:b6:86:26:8f:01:
a1:fd:e0:7b:b3:0e:f8:cc:3b:ed:55:e2:e1:1a:64:be:1e:3c:
9f:2d:3e:a3:e1:9f:84:cc:cd:ee:b2:94:e6:83:06:78:c5:15:
24:73:8b:b8:63:50:a3:b4:d5:d7:50:7e:b4:0e:8d:8b:5d:80:
35:83:44:cf:8a:51:8c:01:83:af:77:4c:bf:15:fb:2e:20:73:
ea:f2:0e:b2:99:f0:89:b4:c5:09:0c:08:88:d4:0b:e4:76:42:
05:b7:12:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org