Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/PCuZqE0xoGgxqUJCU9ibJg2aLfE.roa
File: PCuZqE0xoGgxqUJCU9ibJg2aLfE.roa (raw, json)
Hash identifier: 4dKqd4p6r8nQepOD7T81XKHjre4Or9nPYwzGtF3EBlY=
Subject key identifier: 3C:2B:99:A8:4D:31:A0:68:31:A9:42:42:53:D8:9B:26:0D:9A:2D:F1
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0191268436879CC021BD8900DC12933FEED4
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/PCuZqE0xoGgxqUJCU9ibJg2aLfE.roa
Signing time: Tue 06 Aug 2024 07:08:04 +0000
ROA not before: Tue 06 Aug 2024 07:08:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18779
IP address blocks: 217.180.12.0/24 maxlen: 24
217.180.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 07:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:26:84:36:87:9c:c0:21:bd:89:00:dc:12:93:3f:ee:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Aug 6 07:08:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c2b99a84d31a06831a9424253d89b260d9a2df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:7b:67:d5:95:e5:fb:f3:77:7b:b0:d2:60:
89:35:a3:26:9b:6c:c3:b1:24:68:3f:6a:a7:cf:cd:
43:be:fc:5c:a9:ef:a1:34:2d:82:3e:db:62:34:09:
19:ed:96:db:30:cd:a8:8b:24:ba:20:7f:70:c3:56:
e8:11:87:69:62:e8:6e:b1:37:09:16:15:a1:c0:34:
6c:01:c6:43:9f:a3:b4:1b:bd:df:aa:1f:68:78:e1:
1e:85:16:bf:64:f6:db:cb:d5:f4:a8:9b:6e:37:e8:
5e:60:3a:6f:d4:f2:d6:04:59:4b:ff:0c:2e:30:e4:
92:2c:7e:cc:5c:6e:87:5f:13:bc:4f:a9:f0:34:b1:
6d:5e:ff:fa:a0:fd:39:7f:f8:95:2b:d1:26:ab:4b:
58:95:21:c6:e7:fe:19:63:e5:92:df:fb:62:af:9b:
f6:24:df:09:76:f9:c4:b6:1b:ab:58:39:11:6e:34:
44:c6:d9:fd:df:89:cc:85:28:79:01:98:11:79:6b:
a5:cc:af:0d:9d:8a:ee:94:f3:be:a8:d8:7d:2b:bc:
fe:d2:c8:ae:39:6c:ee:9b:3a:e1:ac:1b:fb:f5:4a:
10:d9:4b:c2:8e:fa:b6:ff:d0:82:29:e2:a8:81:2f:
9c:e5:c3:03:24:90:03:9a:28:6a:94:84:78:3f:1c:
56:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2B:99:A8:4D:31:A0:68:31:A9:42:42:53:D8:9B:26:0D:9A:2D:F1
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/PCuZqE0xoGgxqUJCU9ibJg2aLfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.180.12.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:2b:4f:c7:56:41:e0:71:69:b9:79:b8:59:07:c9:1a:86:fc:
cb:16:14:3d:ec:d5:52:fa:28:70:1c:ff:22:fe:7a:fc:3b:af:
d0:ad:b2:f3:ca:0d:b5:81:9c:fe:ac:8f:53:c7:e6:96:81:89:
0e:23:18:65:29:c7:6a:34:d7:e5:1a:9f:6c:b6:89:1b:f7:13:
ef:41:6e:4c:ab:e6:98:7c:5a:81:e2:32:e9:7a:6c:0d:89:d4:
6b:49:87:43:5a:22:23:c6:20:f9:42:0d:97:16:43:18:bf:3d:
da:fd:d8:98:4e:ae:c4:62:9f:e8:8e:9b:5e:7f:5f:c7:89:c5:
63:b1:0a:e6:d0:35:45:45:c9:8f:79:14:c3:69:40:ce:42:45:
56:91:85:2e:89:07:54:85:ee:5d:68:31:8c:d1:db:b3:79:68:
2a:26:36:10:3c:3e:a0:ae:3f:5f:7e:07:a4:f6:d8:27:ca:0b:
ff:60:a8:01:57:c2:e3:2d:69:ae:80:09:41:45:bb:70:41:13:
ab:f1:bf:97:ba:5e:11:7c:ff:85:3e:02:f0:66:74:1a:ab:af:
56:ff:13:fa:53:b5:cc:3d:0b:8d:13:47:c3:9e:18:f2:bc:67:
63:a3:76:ca:c7:6e:3d:8d:43:d3:62:01:4b:77:e6:b7:af:85:
da:94:d0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 09:30:53 2024 by rpki-client on console-fra.rpki-client.org