Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/c6JUaSaxPlnFLhza8hwHW2INHI4.roa
File: c6JUaSaxPlnFLhza8hwHW2INHI4.roa (raw, json)
Hash identifier: 5TwrDqvSxKVkW7Gs7OldlvlCSedMireGDRNWhlpI2kw=
Subject key identifier: 73:A2:54:69:26:B1:3E:59:C5:2E:1C:DA:F2:1C:07:5B:62:0D:1C:8E
Certificate issuer: /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial: 018A76A3F93A568527D5398F82784B53DC50
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/c6JUaSaxPlnFLhza8hwHW2INHI4.roa
Signing time: Fri 08 Sep 2023 21:12:52 +0000
ROA not before: Fri 08 Sep 2023 21:12:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208506
IP address blocks: 213.178.136.0/22 maxlen: 22
213.178.138.0/24 maxlen: 24
213.178.139.0/24 maxlen: 24
213.178.136.0/23 maxlen: 23
213.178.136.0/24 maxlen: 24
213.178.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:76:a3:f9:3a:56:85:27:d5:39:8f:82:78:4b:53:dc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Validity
Not Before: Sep 8 21:12:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73a2546926b13e59c52e1cdaf21c075b620d1c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:c2:95:54:9a:0d:3b:5e:ab:95:43:f9:46:
22:7a:1c:f4:7a:35:ef:40:e3:d9:c9:9d:87:28:d4:
7e:60:86:19:c9:9e:03:25:2e:cd:43:2c:8b:1a:0a:
0e:7e:d5:7f:1b:fa:d7:91:9f:97:28:48:0e:43:8f:
50:1d:ae:b1:c8:c2:33:19:f4:d7:7a:ed:ac:d9:af:
e1:36:6d:55:e1:0b:76:fb:53:6a:83:80:2a:d6:60:
ca:33:1b:12:03:0b:16:9a:cf:60:d6:b2:21:54:d4:
36:59:17:fe:99:96:0d:0e:82:ba:a3:18:76:b8:50:
3e:44:b4:89:b4:bc:41:9d:50:02:85:a5:d9:cb:f4:
2e:05:47:09:7e:d7:12:a5:f6:83:63:a7:e5:a2:27:
8b:11:a7:1b:a3:b8:56:04:4e:aa:47:b0:4c:63:8b:
61:c8:c9:9b:8c:5a:42:47:42:f3:e8:0e:1b:91:b5:
1a:b4:ef:e5:e3:a5:0e:07:3c:2a:7e:c1:41:1a:af:
ba:b8:ab:ed:fb:b8:ab:e2:39:96:cd:13:b0:91:2e:
30:0e:f9:5d:9d:f5:d6:a3:ae:3c:e0:a8:81:d5:8e:
00:7d:4c:82:63:76:c4:f8:4f:5a:96:b4:2d:a4:af:
0b:ab:6d:f2:7c:0f:52:76:65:2a:5b:0e:2c:8f:16:
aa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A2:54:69:26:B1:3E:59:C5:2E:1C:DA:F2:1C:07:5B:62:0D:1C:8E
X509v3 Authority Key Identifier:
keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/c6JUaSaxPlnFLhza8hwHW2INHI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.136.0/22
Signature Algorithm: sha256WithRSAEncryption
99:9d:47:ab:3a:05:a4:22:47:1a:e4:02:49:43:00:90:ae:41:
b3:23:fb:7e:32:0a:7f:28:12:77:ec:3f:4f:1a:ba:10:37:72:
c6:ab:fa:e1:c0:09:ae:bc:bb:8b:10:d3:c6:e0:b6:eb:e0:cc:
e9:74:78:bf:44:bf:85:9d:6e:c7:4a:be:67:8f:00:08:34:bb:
3b:bb:9b:1b:29:79:21:b2:65:27:2f:7b:d2:37:36:35:a9:ce:
e8:31:ff:3c:c4:35:ff:07:bc:aa:8f:20:20:b4:08:77:42:f1:
e9:c9:3a:78:21:07:dd:3e:b3:75:8d:e5:0e:67:5a:41:d2:e8:
a3:44:43:61:46:e3:75:16:35:b2:eb:d7:c7:89:05:52:bd:68:
a1:65:6b:42:d8:e4:66:d4:21:ef:be:e8:58:1e:59:80:03:31:
af:41:f4:25:9e:cc:be:e7:a5:20:b5:44:f7:4c:e6:04:e6:27:
6e:36:7d:1e:94:f7:0d:af:25:07:79:c8:4b:a6:38:44:b4:31:
d6:9b:ef:29:f0:58:08:25:e4:62:0f:aa:a8:3e:13:25:08:f6:
8b:e6:13:38:3c:63:83:61:8a:ba:ba:b8:65:6d:d0:98:b4:8e:
38:4c:e1:ec:8b:06:bd:77:fc:b8:ba:46:85:15:89:17:72:16:
c1:ff:33:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:28 2024 by rpki-client on console-fra.rpki-client.org