Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/PKGg8UtnLTVX659shGCdBBZWPag.roa
File: PKGg8UtnLTVX659shGCdBBZWPag.roa (raw, json)
Hash identifier: IKtlLTPn1ks7VzyR1Oo21DSXFfbu+myEgKFCnWHlSHQ=
Subject key identifier: 3C:A1:A0:F1:4B:67:2D:35:57:EB:9F:6C:84:60:9D:04:16:56:3D:A8
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 0189FE5B9F135D23F5C90DE7CBE9EBAFB7FC
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/PKGg8UtnLTVX659shGCdBBZWPag.roa
Signing time: Wed 16 Aug 2023 12:39:24 +0000
ROA not before: Wed 16 Aug 2023 12:39:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8368
IP address blocks: 193.243.150.0/23 maxlen: 24
80.253.192.0/20 maxlen: 24
45.134.192.0/22 maxlen: 24
94.247.160.0/21 maxlen: 24
46.247.160.0/19 maxlen: 24
185.117.36.0/22 maxlen: 24
94.143.80.0/21 maxlen: 24
185.48.48.0/22 maxlen: 24
194.105.58.0/23 maxlen: 24
194.105.62.0/23 maxlen: 24
176.53.128.0/22 maxlen: 24
185.8.240.0/22 maxlen: 24
185.12.96.0/22 maxlen: 24
193.239.190.0/23 maxlen: 24
37.26.176.0/21 maxlen: 24
185.50.76.0/22 maxlen: 24
2a04:b440::/29 maxlen: 48
2a03:bd00::/32 maxlen: 48
2a01:aa60::/32 maxlen: 48
2a01:9720::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:5b:9f:13:5d:23:f5:c9:0d:e7:cb:e9:eb:af:b7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Aug 16 12:39:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ca1a0f14b672d3557eb9f6c84609d0416563da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:d3:34:86:c5:52:f9:5a:96:95:72:58:77:
dd:30:8b:4e:04:f7:3e:7f:de:b2:17:a9:8d:61:b3:
9e:cf:e8:b1:71:5f:9c:88:f5:32:d5:c7:33:1b:0b:
01:fd:97:5d:e6:bd:07:23:e5:df:e0:fe:2e:cf:41:
ec:64:6d:e0:f3:7a:c8:cc:5b:e0:41:cc:42:9b:98:
30:24:07:3a:0a:9c:5f:c1:e3:9b:e2:bf:20:16:86:
5d:ee:00:c2:8f:f5:c0:31:2f:e8:c4:6e:84:4f:bb:
38:7c:13:11:04:6c:4a:e6:5c:6b:43:64:a5:56:a6:
e5:f2:76:64:90:ae:25:fd:80:64:32:06:db:be:e6:
82:4f:f3:d6:7f:f1:42:e9:78:0c:70:ed:a7:3a:76:
e2:9f:ca:13:e8:61:e2:40:21:ce:b4:1a:8e:94:f8:
1d:e3:d0:37:ed:97:bd:0d:9f:f3:12:21:12:f9:bb:
0d:6f:9a:ae:67:1a:03:e0:c5:d0:11:ad:fc:76:9e:
12:f6:4e:73:0c:61:3e:e4:dc:1a:20:ba:4c:92:21:
11:9c:42:1b:4f:7a:46:b4:0c:13:fc:d2:b3:b4:7c:
88:53:be:d4:43:20:28:75:4d:48:9e:a3:e2:30:86:
9d:f2:e2:e3:56:a8:b0:1c:cc:63:69:b3:80:71:8e:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A1:A0:F1:4B:67:2D:35:57:EB:9F:6C:84:60:9D:04:16:56:3D:A8
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/PKGg8UtnLTVX659shGCdBBZWPag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.176.0/21
45.134.192.0/22
46.247.160.0/19
80.253.192.0/20
94.143.80.0/21
94.247.160.0/21
176.53.128.0/22
185.8.240.0/22
185.12.96.0/22
185.48.48.0/22
185.50.76.0/22
185.117.36.0/22
193.239.190.0/23
193.243.150.0/23
194.105.58.0/23
194.105.62.0/23
IPv6:
2a01:9720::/32
2a01:aa60::/32
2a03:bd00::/32
2a04:b440::/29
Signature Algorithm: sha256WithRSAEncryption
49:bf:6d:ca:bb:ea:7a:67:c6:33:85:7b:12:58:35:19:fa:0d:
cb:85:2e:fd:d9:db:8e:1b:7f:b0:ea:2b:2b:a3:5b:97:b7:7a:
7f:8f:b6:92:ea:bf:9c:ba:b4:0e:97:b2:4d:b0:aa:43:e5:b9:
0b:ab:d5:b6:b6:ff:68:21:3c:22:eb:7f:ec:72:c6:23:e9:db:
25:ad:f8:58:e7:59:49:f6:4d:76:f1:7d:d6:9f:b6:8f:cf:e2:
af:60:38:f9:b1:75:09:52:e8:d9:5c:51:2d:2a:9e:b3:e8:08:
36:f8:e4:2b:9d:9c:61:37:bb:07:a2:e8:95:86:1d:c2:22:b0:
97:22:12:e6:b6:82:a3:83:72:b0:16:4e:0f:48:27:bc:62:a6:
50:cd:8d:85:f9:0a:3b:84:04:60:63:23:35:ad:ca:83:06:7f:
52:59:8b:97:2d:d4:b3:89:34:de:7b:9b:9d:8c:d9:e4:08:6e:
c6:cc:a2:5f:6f:bf:bc:91:1d:99:ad:ee:92:db:03:31:ae:23:
3a:ad:7b:8f:f0:df:42:4f:cb:97:54:4e:60:b5:ae:b8:3c:e1:
0f:e4:10:16:5e:89:8c:f2:64:08:9b:03:65:24:cb:e2:c0:10:
d3:0d:5f:51:ba:b6:ea:3b:69:14:3c:13:44:09:7f:09:d5:2a:
7d:f2:f6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:09 2024 by rpki-client on console-ams.rpki-client.org