Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/PVwmrDX___aK6hC2h6rKFVEeELA.roa
File: PVwmrDX___aK6hC2h6rKFVEeELA.roa (raw, json)
Hash identifier: PpHkFWVQNA5GTeY6VG98NCdS0xDgEeFn4C+VbDVh7lI=
Subject key identifier: 3D:5C:26:AC:35:FF:FF:F6:8A:EA:10:B6:87:AA:CA:15:51:1E:10:B0
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018CC649CE88923B5A987540978365A28307
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/PVwmrDX___aK6hC2h6rKFVEeELA.roa
Signing time: Mon 01 Jan 2024 18:29:34 +0000
ROA not before: Mon 01 Jan 2024 18:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211826
IP address blocks: 89.185.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 08:13:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:ce:88:92:3b:5a:98:75:40:97:83:65:a2:83:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 18:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d5c26ac35fffff68aea10b687aaca15511e10b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:71:df:32:7a:2d:e4:85:9f:8c:d8:d2:c9:ac:
c0:c3:76:19:79:9f:e5:86:b2:dc:91:53:34:94:0a:
1f:da:00:b6:98:57:0a:db:e7:db:83:fb:92:62:7f:
bb:a4:57:9d:39:8b:73:69:8e:2b:1e:fe:43:7d:15:
21:26:5b:2d:c3:22:42:3f:c4:b1:25:ff:ba:9a:d2:
57:45:ff:b5:00:d7:83:8a:80:3c:00:18:70:44:0b:
34:a0:a5:0e:0a:ae:6e:63:5e:1f:f8:4a:f5:48:07:
07:6c:21:2e:6f:b4:41:a8:ed:e7:df:5c:04:bc:a6:
37:13:44:c2:5b:5e:56:fe:a6:6f:95:09:14:66:91:
02:79:10:37:a3:7c:76:1e:52:5f:05:d8:ca:0c:1e:
b8:21:42:87:7b:3e:8c:b3:17:1b:58:0e:81:89:72:
ed:4d:9e:8b:85:d1:5d:2b:1a:31:76:3c:1a:a2:8f:
f8:67:88:39:f4:76:87:00:ba:36:d1:88:79:ed:d1:
e0:c7:48:84:1e:5e:01:59:56:72:e8:c1:99:7f:d8:
b5:1b:46:97:8b:9f:87:91:b6:df:a0:cc:bb:07:f4:
24:7d:e1:89:ea:f4:0a:ad:05:5c:bd:7c:c4:36:5d:
ac:f5:08:48:58:33:ff:e5:82:d9:10:0f:0c:e1:1a:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5C:26:AC:35:FF:FF:F6:8A:EA:10:B6:87:AA:CA:15:51:1E:10:B0
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/PVwmrDX___aK6hC2h6rKFVEeELA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.2.0/24
Signature Algorithm: sha256WithRSAEncryption
09:bb:6f:f7:df:1a:61:7b:e0:9f:d2:2a:4a:94:89:86:80:97:
c7:50:09:8e:d5:f1:40:08:6c:44:67:b1:6c:99:7a:10:aa:14:
ef:8a:e5:5f:10:f6:cb:bc:44:57:9a:69:d5:69:5a:a6:c0:08:
98:0d:50:e8:8e:14:b7:bb:02:26:85:67:75:37:93:db:a4:8e:
f2:cd:17:87:76:4c:9e:1e:ce:60:9f:de:1e:df:24:cc:04:aa:
96:a0:0b:fa:64:c7:ef:6a:2b:2f:fa:25:ca:ba:57:cb:53:22:
a0:97:4a:d2:d8:23:98:69:c3:0b:ae:61:43:82:c1:3f:6a:5e:
70:34:1e:aa:8d:7f:5d:3b:fb:be:83:a9:f4:a0:ec:1c:00:21:
d6:8c:8b:b2:14:bd:41:e1:27:96:f9:36:ba:bb:db:80:09:58:
da:ea:28:dd:21:0f:6d:3a:d4:64:e4:15:28:05:78:73:9f:15:
34:02:02:fc:48:6a:e5:97:1e:9f:07:b5:20:32:23:4e:c7:9c:
c2:42:15:a2:31:39:e3:d6:07:69:32:0c:3f:32:36:4d:49:58:
0d:00:ec:a0:fd:22:dd:30:c3:4f:af:91:b3:cc:f4:c7:fb:2b:
b0:a8:91:e2:97:4e:11:ba:38:75:3f:d6:21:d1:96:29:58:a5:
0f:f0:fe:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org