Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/PtFY8NWU91KRPbtzlwbXufsauhU.roa
File: PtFY8NWU91KRPbtzlwbXufsauhU.roa (raw, json)
Hash identifier: mJH0j0pURbgK/texEpZisPOH/F/xe3yz49hJh8wyIiU=
Subject key identifier: 3E:D1:58:F0:D5:94:F7:52:91:3D:BB:73:97:06:D7:B9:FB:1A:BA:15
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0185719E78CD1F37B494B497FB1565ED4260
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/PtFY8NWU91KRPbtzlwbXufsauhU.roa
Signing time: Mon 02 Jan 2023 08:34:49 +0000
ROA not before: Mon 02 Jan 2023 08:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13075
IP address blocks: 195.208.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:78:cd:1f:37:b4:94:b4:97:fb:15:65:ed:42:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 08:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ed158f0d594f752913dbb739706d7b9fb1aba15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:a9:9c:38:b9:17:75:32:cf:19:b1:a1:23:
8e:f6:da:59:8e:c1:fd:27:f2:38:d3:be:ef:75:8b:
1e:3b:1a:29:82:45:de:ea:56:f8:04:76:15:a3:2e:
74:55:95:bd:7b:6f:51:91:7d:94:91:f0:33:63:61:
f3:79:5b:80:d6:98:6e:66:03:1d:71:3b:d0:4f:ee:
88:d6:f0:a8:38:42:88:19:ae:7d:f5:0d:c3:f1:98:
76:20:19:54:ba:f8:ba:5c:27:cd:7f:da:94:1f:1a:
a1:99:b1:6b:41:da:bf:e5:d4:de:f6:bd:4d:c7:47:
b3:5c:11:e5:f4:2c:5e:33:e2:25:19:8a:85:03:d8:
bd:ec:4c:85:ce:85:34:b8:b3:4f:2f:8c:94:fe:be:
39:b7:bc:01:3e:e6:75:0f:2c:f8:1f:87:46:ce:62:
3f:cc:e5:45:3d:f9:34:5c:d4:e9:59:98:3a:1a:3d:
de:19:cc:c7:d5:84:e4:1e:95:42:e3:ce:94:e2:4d:
9c:50:9e:17:7e:b3:84:ba:24:0f:68:ce:ec:46:23:
84:9c:83:11:f0:0c:90:46:5a:14:34:89:e2:3d:ce:
c3:7c:b8:5d:f3:75:f9:77:53:26:96:bc:11:47:88:
7f:74:03:42:0b:1a:21:68:9a:89:a8:77:3d:8e:c7:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D1:58:F0:D5:94:F7:52:91:3D:BB:73:97:06:D7:B9:FB:1A:BA:15
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/PtFY8NWU91KRPbtzlwbXufsauhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.208.38.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:4e:cb:e9:d0:66:81:38:74:a9:c3:5c:1f:27:d9:c3:ff:0a:
f3:b3:28:b5:87:fd:51:63:92:fc:6e:68:fc:0f:29:e0:46:83:
58:89:b1:84:9b:78:55:f8:56:97:1b:18:ba:10:d2:64:b6:e7:
41:85:16:c8:8c:d6:b4:2f:c1:39:40:56:82:cd:8b:f4:ce:c2:
da:2f:92:9a:cb:66:b5:ad:c0:06:82:81:17:12:9b:60:ed:78:
b4:2c:66:ef:bf:b8:50:64:a6:31:9c:e6:90:b6:0c:75:67:25:
a0:48:16:ce:8c:d8:53:1a:84:bd:e6:37:c8:0a:c7:b9:10:db:
24:5c:5d:a9:80:ba:b8:58:fb:d2:5e:60:45:85:b4:ba:1b:d8:
ce:eb:4c:7e:e6:ca:b7:b3:59:0f:bf:bb:4a:21:03:eb:b9:86:
30:39:da:b6:1d:ee:69:5f:4d:fd:52:49:18:f9:e2:b0:85:40:
fb:ca:41:89:d8:10:a5:10:ca:9f:35:67:c0:68:c7:21:10:36:
eb:69:d0:13:07:97:e4:12:3a:8f:49:25:64:b8:31:d8:30:e6:
d3:f4:d9:05:ab:54:1a:77:0c:1d:75:90:b8:9d:19:d1:9d:0c:
f4:77:aa:9a:d3:71:20:f8:28:d2:39:0b:5b:6e:2d:ac:df:72:
a9:7a:9a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org