Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/RMrcul8ALVVvWI5cz7vj8_PSCPE.roa
File: RMrcul8ALVVvWI5cz7vj8_PSCPE.roa (raw, json)
Hash identifier: uuemaH/pUP/Dvzvla7YL3tL7uS19V0IvVzt5SeGiggU=
Subject key identifier: 44:CA:DC:BA:5F:00:2D:55:6F:58:8E:5C:CF:BB:E3:F3:F3:D2:08:F1
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018BBA270039E7C42BB0EADC801DD717C4C7
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/RMrcul8ALVVvWI5cz7vj8_PSCPE.roa
Signing time: Fri 10 Nov 2023 16:53:19 +0000
ROA not before: Fri 10 Nov 2023 16:53:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 193.84.109.0/24 maxlen: 24
185.232.167.0/24 maxlen: 24
178.255.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:27:00:39:e7:c4:2b:b0:ea:dc:80:1d:d7:17:c4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Nov 10 16:53:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44cadcba5f002d556f588e5ccfbbe3f3f3d208f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f5:23:c5:ae:1e:03:b6:ff:e1:cb:ae:54:6d:
ba:0e:0c:0c:5a:ea:3c:72:e8:38:a7:34:48:2e:94:
42:5a:27:7d:b8:e1:1c:7a:8d:9f:8d:60:3d:6c:cf:
c3:a8:e1:7d:92:e0:7a:f8:94:26:d3:d1:51:63:78:
fb:ac:f8:21:f9:14:48:8e:40:06:44:11:7e:ad:81:
88:52:1b:13:26:d7:c8:eb:13:50:16:96:6b:92:0e:
e5:f7:d0:ff:4d:2c:c6:6b:17:7f:25:b0:7a:e7:b7:
33:2a:f7:6f:90:69:05:a1:8c:63:f2:62:81:e9:b6:
5a:2a:bf:f2:12:68:5d:a8:d7:d5:d7:0a:0c:36:e1:
f6:c8:ea:24:3e:7c:29:b8:88:d4:85:53:b8:8e:24:
43:d7:c9:d5:a1:cd:b1:5f:b8:5d:4d:5b:26:da:4f:
57:e2:17:1a:c3:3a:a3:32:0e:07:72:dd:9d:ee:7c:
4d:b1:ec:eb:50:e5:18:ac:fa:50:a6:a0:ac:16:0c:
cc:55:b0:ea:a6:2a:d6:eb:06:f5:cb:31:1d:de:d7:
51:26:18:59:75:f5:7d:91:c1:25:81:1c:70:09:ad:
c4:30:01:c6:f6:5d:cb:9e:76:de:49:76:74:2f:71:
19:78:95:31:28:06:0b:4e:e0:79:73:75:7f:8e:4a:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CA:DC:BA:5F:00:2D:55:6F:58:8E:5C:CF:BB:E3:F3:F3:D2:08:F1
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/RMrcul8ALVVvWI5cz7vj8_PSCPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.221.0/24
185.232.167.0/24
193.84.109.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:44:11:7d:c5:a0:91:38:69:a4:79:de:c9:dc:2a:90:1e:0a:
52:9d:b4:2f:1e:8a:4d:c9:2b:2f:2d:7b:92:6a:02:ca:35:c2:
94:27:5b:1d:4f:2e:88:a3:55:43:9c:7f:25:80:96:8c:ed:fc:
d9:ff:61:56:cb:99:09:b4:7b:36:83:71:8f:17:5f:62:98:49:
9e:53:26:e7:f1:25:e2:d1:28:b2:b7:44:c2:77:31:ef:7b:d8:
2c:87:5a:b8:fb:8d:d7:d2:cb:9f:7f:e9:60:4e:a0:40:b4:c8:
97:8f:d5:70:3e:04:f2:7c:4d:70:55:a1:5e:82:84:a8:a7:32:
b2:e2:cb:5c:a1:66:66:81:bc:8f:51:94:3e:c2:89:7e:8c:3a:
65:24:f6:fb:b1:80:26:43:0f:7d:c9:2f:c4:6a:61:5f:c0:87:
47:f9:cb:21:77:82:a8:71:09:47:30:b9:22:d4:0d:1b:fa:a8:
f7:a0:98:24:60:41:61:a6:fc:5d:11:fe:a4:c7:bd:e0:a6:81:
5f:18:0f:fd:a7:42:a9:4b:d7:42:48:ba:75:45:23:7d:da:cf:
6e:eb:85:d8:80:c8:6a:27:61:7e:80:34:fa:c2:a3:74:36:8e:
15:17:6e:59:59:88:a2:49:9c:8c:44:e2:98:9f:da:4e:46:b7:
c4:bf:db:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org