Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/PYpb01T3nJ3AFU8PCERwXic21JY.roa
File: PYpb01T3nJ3AFU8PCERwXic21JY.roa (raw, json)
Hash identifier: 8zonhfz1Pl8R8UoFijpguS+AWI5858OXMjxJG/fxRPQ=
Subject key identifier: 3D:8A:5B:D3:54:F7:9C:9D:C0:15:4F:0F:08:44:70:5E:27:36:D4:96
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 01856E2FB0B5AC3E2CEAA6AE9C9785462014
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/PYpb01T3nJ3AFU8PCERwXic21JY.roa
Signing time: Sun 01 Jan 2023 16:34:57 +0000
ROA not before: Sun 01 Jan 2023 16:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210805
IP address blocks: 46.252.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:b0:b5:ac:3e:2c:ea:a6:ae:9c:97:85:46:20:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Jan 1 16:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d8a5bd354f79c9dc0154f0f0844705e2736d496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:4d:00:bd:c8:07:63:55:00:e0:d1:30:8b:
46:57:77:c3:d0:51:44:c5:63:34:6f:90:e8:4e:57:
da:6e:d9:47:ca:33:3a:85:b8:a0:e4:fe:27:b0:da:
05:01:03:2d:23:73:cc:3e:a2:22:48:29:a3:cd:23:
53:0c:38:e3:eb:18:b4:9e:11:1e:9c:74:32:2d:24:
09:5f:f4:0e:ff:63:50:a3:fe:7e:bb:d7:fc:69:90:
84:d8:bd:91:85:00:fc:bf:94:35:f4:de:1a:40:a8:
1c:f6:7f:83:a8:87:6e:93:e9:fb:26:66:b1:1b:6d:
89:a8:89:c0:7e:00:75:1f:e7:b0:2e:5c:12:47:da:
78:14:5f:62:a7:f0:6d:b3:66:f3:5b:0d:f0:6f:c7:
e8:da:d7:62:0f:ec:70:8d:50:ac:01:ef:ef:ea:1b:
ba:6b:c2:d6:a0:0d:88:86:e7:92:ad:98:57:7f:f2:
d0:16:33:fe:d3:2c:19:39:ef:0f:4c:0b:65:10:b1:
b7:89:ef:da:da:47:ed:06:dd:92:dd:dd:4d:77:87:
3b:db:a5:13:68:c5:52:b0:3c:2e:00:8a:76:b7:fc:
02:b2:be:25:87:2f:36:30:68:d2:82:ab:45:e4:8a:
8d:15:71:2b:ec:2e:69:5a:ef:ed:af:25:31:7d:cd:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8A:5B:D3:54:F7:9C:9D:C0:15:4F:0F:08:44:70:5E:27:36:D4:96
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/PYpb01T3nJ3AFU8PCERwXic21JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.6.0/24
Signature Algorithm: sha256WithRSAEncryption
85:22:67:c5:a8:9d:ae:e6:d1:03:09:79:43:2e:6b:54:9e:a9:
8c:c3:d8:2a:2f:0b:c6:77:5f:0a:d9:c4:73:ee:6e:40:8b:9f:
1f:36:11:55:66:bd:77:7e:41:db:a9:f8:24:37:90:c6:97:a9:
b6:b1:55:88:bf:9b:e3:a6:a9:35:f8:94:53:67:70:c2:4c:d3:
20:fc:01:f6:fe:75:9c:d2:d5:4c:4d:84:27:02:db:5d:d8:8a:
95:cc:e6:de:27:c1:dd:d3:c5:b2:e0:b8:bf:0e:62:fb:1a:b1:
20:e7:9b:b0:1e:15:16:29:36:8b:bd:79:38:c2:69:b8:74:55:
8c:dd:26:1d:db:18:b9:ea:bc:c5:05:8f:64:0c:4b:61:ce:cc:
6e:3d:63:39:3d:b9:f8:9c:a6:ba:68:79:26:6c:d0:db:e9:9e:
3c:aa:4a:e1:cb:08:7c:dc:21:e8:b3:d3:f8:3a:82:37:ac:90:
92:36:e8:57:32:a2:93:51:a2:a4:f7:a2:f4:06:7e:a6:2c:9f:
ce:29:58:23:d3:b5:a4:bc:99:ce:96:ce:bd:33:77:15:cb:ae:
7f:e2:bd:55:39:74:ce:8e:02:70:7f:67:41:75:3e:a9:c2:4c:
9b:78:25:07:ff:9a:f6:64:3e:e2:83:cc:c1:28:ca:97:f7:74:
35:d3:ad:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:04 2024 by rpki-client on console-fra.rpki-client.org