Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/40bBFc5Gmih8DrI2PoJM7E4oMmA.roa
File: 40bBFc5Gmih8DrI2PoJM7E4oMmA.roa (raw, json)
Hash identifier: cj3pUm+TdKG5+mxrvrnB1QH2FV+wHFek16F2GlyyCQU=
Subject key identifier: E3:46:C1:15:CE:46:9A:28:7C:0E:B2:36:3E:82:4C:EC:4E:28:32:60
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0188FB605CAE6238E6C4EA42474DE8212B60
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/40bBFc5Gmih8DrI2PoJM7E4oMmA.roa
Signing time: Tue 27 Jun 2023 05:42:56 +0000
ROA not before: Tue 27 Jun 2023 05:42:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15611
IP address blocks: 213.176.96.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.188.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.196.0/24 maxlen: 24
62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.141.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.152.0/22 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fb:60:5c:ae:62:38:e6:c4:ea:42:47:4d:e8:21:2b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 27 05:42:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e346c115ce469a287c0eb2363e824cec4e283260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:0d:a7:3d:ce:56:9d:0a:a5:8d:d9:f9:20:
88:e2:19:fe:07:7d:30:6b:8d:9a:7c:f9:ea:47:a5:
3d:33:81:d6:d9:15:8f:9a:d4:65:8a:aa:ec:09:81:
c2:57:50:75:10:be:40:40:f0:9f:bc:fe:ff:a2:8b:
56:0e:55:8d:eb:7d:e0:52:f7:f9:9a:78:9d:ca:17:
ce:23:c9:5e:31:bb:d3:1b:b5:a7:72:28:28:27:ed:
2d:a1:d2:c6:e6:50:80:b1:f1:44:57:45:0f:5e:e8:
1e:6f:2b:bd:b6:82:14:23:74:fa:65:1e:4c:31:59:
70:17:0a:57:a9:db:e8:79:09:a5:cc:bb:ae:93:ff:
a1:90:b0:5e:a1:31:4c:e8:7a:0a:a8:68:c2:df:23:
fd:57:50:c0:d7:5b:b1:61:ba:59:e9:f7:59:0e:e5:
90:35:16:28:c8:54:01:22:35:b4:82:29:b0:68:a7:
59:31:66:3e:11:35:a3:64:50:96:4b:70:ef:42:09:
d3:dc:eb:f2:82:f4:06:9d:93:d2:40:1c:63:6b:90:
a0:c7:f0:b2:45:a9:17:e0:13:0b:f7:0c:c7:38:9a:
7f:70:99:a8:27:13:af:b9:6e:f3:fc:85:2f:2a:5c:
1c:fd:1e:3f:0d:2f:fc:53:86:fa:fa:6c:94:d7:5e:
5d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:46:C1:15:CE:46:9A:28:7C:0E:B2:36:3E:82:4C:EC:4E:28:32:60
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/40bBFc5Gmih8DrI2PoJM7E4oMmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.142.255
62.60.145.0/24
62.60.152.0/22
62.60.168.0/21
62.60.184.0-62.60.196.255
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
Signature Algorithm: sha256WithRSAEncryption
45:35:d6:9e:a7:5e:9a:35:97:ea:06:d6:2d:2a:55:9c:59:3d:
0a:11:ac:ab:3e:c0:4c:25:96:25:3e:26:21:95:bd:a1:a3:37:
0d:33:cc:dc:f3:60:1c:36:89:29:d2:09:1b:87:bd:43:45:77:
73:ea:19:a9:d7:56:e3:06:e6:6b:f0:34:a6:41:8d:45:bb:9b:
f7:97:e9:bb:cc:92:eb:d2:33:fc:60:c2:41:83:af:44:dc:ed:
53:44:3f:d9:c9:ed:61:35:a7:ff:52:18:ab:c9:2b:a2:88:42:
0b:12:00:c2:68:d7:91:cf:7e:36:9f:87:fb:45:71:09:52:a6:
a8:f2:13:1d:c7:75:ea:17:31:b2:39:e5:fd:8e:b0:68:53:f5:
26:a8:0e:95:6e:46:ce:6b:da:33:88:92:89:7d:01:42:c3:7b:
52:36:ae:4f:4a:7d:b0:8c:e6:b7:18:b1:10:10:be:26:21:c0:
d4:bb:41:bc:dc:d7:1d:20:0e:1f:7c:3a:87:ef:fe:3d:89:fe:
b3:71:91:f5:f3:76:6c:de:d5:d7:17:88:41:d1:45:df:7e:97:
01:d2:51:4b:61:28:f2:11:46:50:2a:a1:21:6e:51:51:f7:04:
02:54:8c:9f:b4:00:00:34:9e:72:55:83:cd:de:4b:c5:1c:b0:
55:be:9b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:38 2023 by rpki-client on console.sobornost.net