Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pl_Hw9xLUAYOXNlY0_KTAC6oR1c.roa
File: pl_Hw9xLUAYOXNlY0_KTAC6oR1c.roa (raw, json)
Hash identifier: F6CDgHhPvJPnfi7bCawu5Y49bhjB5uWZGan6i7zOtxU=
Subject key identifier: A6:5F:C7:C3:DC:4B:50:06:0E:5C:D9:58:D3:F2:93:00:2E:A8:47:57
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F2D9F42880DC8E9E25045437D6490CC3D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pl_Hw9xLUAYOXNlY0_KTAC6oR1c.roa
Signing time: Tue 30 Apr 2024 06:09:22 +0000
ROA not before: Tue 30 Apr 2024 06:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47757
IP address blocks: 194.48.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 08:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2d:9f:42:88:0d:c8:e9:e2:50:45:43:7d:64:90:cc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 30 06:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a65fc7c3dc4b50060e5cd958d3f293002ea84757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:87:29:d8:5f:15:83:c6:6e:d0:89:20:80:
a3:f2:17:24:18:33:be:aa:2f:d6:e0:5b:e7:4d:2e:
60:94:89:ca:5d:30:35:48:85:8a:d4:e5:3f:04:09:
60:16:91:d6:fc:36:4d:aa:ab:84:3c:af:aa:ca:f1:
da:20:7d:e5:80:ce:a3:4f:57:65:03:34:60:71:b6:
1b:a6:01:f5:99:37:f8:ac:31:bc:e9:1b:de:51:db:
51:31:4d:c2:21:74:c8:c5:d7:68:33:19:eb:8d:a6:
b1:ab:53:ae:66:bb:e9:9b:fd:56:59:69:25:48:0e:
d9:f4:14:27:6c:6e:ab:46:bf:e6:b0:ff:f2:75:67:
00:1d:20:00:5d:2c:5a:58:87:9f:e0:8a:65:a2:b4:
db:72:3f:5f:35:64:8f:dc:6e:f7:a3:68:6d:16:67:
f0:f6:ce:a4:c1:c4:7b:3e:d7:14:17:0c:88:fe:1e:
0f:1f:d3:3a:13:21:c5:18:f3:83:2c:27:f1:7a:08:
a8:9c:cb:03:67:0e:79:04:5e:92:26:2d:cd:45:d3:
51:fa:7c:d7:a8:e3:4f:3d:98:04:28:d6:33:bd:9a:
b6:7e:06:9e:1b:14:90:e4:74:2e:ee:4b:3e:a1:63:
15:9b:7b:a1:91:b6:4c:d4:2a:e9:a2:dd:8c:00:c1:
48:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5F:C7:C3:DC:4B:50:06:0E:5C:D9:58:D3:F2:93:00:2E:A8:47:57
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pl_Hw9xLUAYOXNlY0_KTAC6oR1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.248.0/24
Signature Algorithm: sha256WithRSAEncryption
64:13:68:6f:ca:69:8a:cc:49:8a:fa:2c:97:9d:68:9f:fb:b8:
13:69:db:88:d1:23:51:b5:91:71:eb:1d:21:a3:7b:29:77:5f:
bf:a3:7d:b2:de:5d:c7:66:a9:21:8c:c9:db:5f:cb:92:67:a3:
69:52:0a:20:41:cb:c5:c7:d4:75:8a:cc:c3:ba:c6:75:2d:8e:
87:94:62:68:ed:3b:30:25:b2:38:ff:e6:69:b2:ff:fb:94:13:
5a:31:c6:33:57:33:43:8e:16:cb:9b:ed:28:a6:28:53:fd:ef:
ea:5a:71:d8:d0:22:35:99:c9:7e:63:2c:cb:c2:71:98:57:51:
01:03:6d:35:bd:b8:2a:95:4b:58:b0:eb:a0:e6:d4:90:a7:9b:
c0:d5:f9:3f:26:65:38:4b:55:ad:8a:fd:f0:4e:25:74:8f:8d:
32:ef:45:23:d1:f3:96:2b:05:ea:a9:33:3c:06:76:78:d5:ba:
ba:65:45:63:4c:ee:2f:60:ff:03:d4:09:4c:73:63:c4:9f:04:
3a:24:0a:85:f3:71:3f:73:7d:ca:89:76:e9:98:56:fa:d8:96:
0e:c3:08:59:c0:0c:75:70:2a:78:e0:17:c7:ea:b8:5f:17:fa:
62:c0:38:30:fc:c0:c8:2c:6b:c3:11:48:a8:98:89:d9:09:60:
8c:d3:ca:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 12:10:30 2024 by rpki-client on console-fra.rpki-client.org