Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/PJaPcfo_e6jnigXvG4FcgQ3ckqg.roa
File: PJaPcfo_e6jnigXvG4FcgQ3ckqg.roa (raw, json)
Hash identifier: HsBuI7npA3aZHRn/fXCsz+KR5wVu8qgJ1FFo2w4l6rY=
Subject key identifier: 3C:96:8F:71:FA:3F:7B:A8:E7:8A:05:EF:1B:81:5C:81:0D:DC:92:A8
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018BBA2040B49049CB7C25C145D187F3E2B4
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/PJaPcfo_e6jnigXvG4FcgQ3ckqg.roa
Signing time: Fri 10 Nov 2023 16:45:57 +0000
ROA not before: Fri 10 Nov 2023 16:45:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 2.58.232.0/22 maxlen: 22
178.239.30.0/23 maxlen: 23
37.44.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:20:40:b4:90:49:cb:7c:25:c1:45:d1:87:f3:e2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Nov 10 16:45:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c968f71fa3f7ba8e78a05ef1b815c810ddc92a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fd:b1:5b:4b:28:49:70:8e:75:bb:7b:8a:c0:
e5:13:5c:e4:39:2d:63:c4:ac:58:f7:b0:bc:48:8a:
70:62:7e:05:ac:72:61:06:1e:27:c0:84:dc:f1:d7:
99:68:92:2f:cb:d2:90:ee:4c:2f:ff:db:2e:61:0a:
18:22:7c:4d:11:6a:fb:51:39:7a:d0:af:20:cc:40:
2d:f7:76:47:67:c1:50:ec:e6:33:03:f9:01:ba:a3:
0a:26:c2:d9:75:72:2b:10:e2:b9:f3:a4:76:f2:41:
27:d9:44:cc:58:d9:c2:67:fc:a2:7d:f9:3a:8e:64:
fb:d0:e7:0f:ea:8f:ac:ef:cf:93:00:98:60:a9:34:
25:3d:ae:0b:1e:ce:64:7f:08:02:6c:df:83:3d:33:
72:cd:99:7a:ed:53:52:25:41:40:ab:60:75:2d:0a:
7d:84:d3:20:ce:6d:33:fe:77:e6:56:4e:ce:2c:00:
75:cc:04:0e:9a:bb:f4:0b:62:49:e7:06:dc:82:d0:
36:64:24:e3:21:27:cb:50:b5:09:37:b5:7a:5e:44:
3e:e4:31:50:24:88:fc:10:72:1a:be:fe:a9:5c:80:
bb:00:49:f5:63:b9:e7:33:2b:db:49:c7:49:62:08:
ee:43:de:ab:f5:42:41:22:f4:21:df:ef:03:3c:63:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:96:8F:71:FA:3F:7B:A8:E7:8A:05:EF:1B:81:5C:81:0D:DC:92:A8
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/PJaPcfo_e6jnigXvG4FcgQ3ckqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.232.0/22
37.44.212.0/24
178.239.30.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:18:81:0f:9c:27:88:63:09:1d:70:69:1d:87:e4:ac:50:72:
b2:a7:92:0d:c0:c1:43:57:e5:29:17:f8:cd:66:7c:bb:93:be:
01:22:29:2d:77:d7:c2:3d:ef:e6:df:3f:40:db:86:6f:aa:5d:
b3:f0:9c:25:62:d7:a2:8d:60:30:f9:53:58:9f:f5:1a:03:c8:
d0:bf:c3:ea:27:2d:49:ea:38:27:f7:c5:88:cf:fb:96:e1:1a:
b7:c4:7d:bd:54:8f:3f:55:32:60:f1:ae:fe:77:72:5b:57:ca:
15:55:7c:5c:7e:63:ae:8e:ea:d7:c6:55:fe:2b:b9:06:25:16:
7b:39:c2:dc:30:4d:49:99:be:13:8e:ea:e7:4a:7d:d6:fb:db:
6a:cf:55:8a:94:25:7b:8e:43:ef:69:f1:04:60:6f:38:62:2d:
5b:5e:0e:80:f3:a7:4e:7c:e6:05:de:60:aa:df:58:30:42:9f:
cd:38:40:eb:bb:cd:a2:08:15:0a:57:2d:1f:95:29:87:9b:b4:
34:bb:01:4e:c0:d6:37:c4:77:62:d7:b9:61:64:6b:fa:3d:98:
a5:ea:7a:68:0f:30:8f:c4:d1:c9:f6:a9:09:58:d5:52:b8:fb:
db:d5:6b:44:02:9e:ff:2c:a0:90:f8:da:27:0b:7f:ab:c4:19:
00:16:2f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org