Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/PKuOpAWXT0TABRi4FK_70gO5EZ4.roa
File: PKuOpAWXT0TABRi4FK_70gO5EZ4.roa (raw, json)
Hash identifier: 02ujtdEwlakgLNt3kqaBGTmcu6AaVzVuMYGAhdpKh0I=
Subject key identifier: 3C:AB:8E:A4:05:97:4F:44:C0:05:18:B8:14:AF:FB:D2:03:B9:11:9E
Certificate issuer: /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial: 0188D25F09E2BB617DE3783FD2CDE8687FCE
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/PKuOpAWXT0TABRi4FK_70gO5EZ4.roa
Signing time: Mon 19 Jun 2023 06:37:03 +0000
ROA not before: Mon 19 Jun 2023 06:37:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3209
IP address blocks: 91.216.108.0/24 maxlen: 24
195.66.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:5f:09:e2:bb:61:7d:e3:78:3f:d2:cd:e8:68:7f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Validity
Not Before: Jun 19 06:37:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cab8ea405974f44c00518b814affbd203b9119e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:55:16:7a:70:c6:78:06:c0:25:88:22:04:
85:8e:ac:90:2b:c1:4e:aa:ea:11:6f:12:f2:27:0c:
e7:64:fc:3d:86:11:74:89:d9:d3:64:ef:53:1e:2c:
cb:1f:bc:84:00:bc:9b:e5:07:ab:4c:26:12:66:06:
8d:19:9a:b7:ca:2e:1f:05:3e:b4:4e:2c:55:61:d3:
9b:da:3e:98:f1:5d:0f:7e:94:19:93:e0:6a:ca:11:
f8:8e:d1:0e:83:22:3f:d5:67:29:b5:5a:87:08:7f:
3f:5f:9b:87:0b:70:d6:0b:39:ed:a1:84:af:fa:36:
5c:41:66:ad:35:4e:84:a3:dc:5b:7d:fb:83:e7:68:
21:93:ba:38:6f:65:1e:8e:b1:b3:33:84:b8:ef:a6:
33:e3:af:d8:04:a0:23:f7:f0:bb:87:00:b8:81:e3:
a2:fb:0a:8b:a2:90:bf:f3:23:87:99:b9:53:ec:2e:
51:e7:26:6b:6e:51:7b:a1:d8:59:b5:13:b1:c9:b4:
d9:98:6a:09:65:69:88:de:22:0e:e2:b2:37:0e:fc:
89:3a:06:ab:a8:40:d4:46:a6:71:58:e0:56:84:0c:
9e:a1:a5:fd:e5:f6:54:84:65:e7:a0:af:85:36:40:
59:d8:2a:c3:81:df:31:47:74:a9:02:92:bb:04:21:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AB:8E:A4:05:97:4F:44:C0:05:18:B8:14:AF:FB:D2:03:B9:11:9E
X509v3 Authority Key Identifier:
keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/PKuOpAWXT0TABRi4FK_70gO5EZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.108.0/24
195.66.76.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:7a:87:cc:4e:4a:04:31:10:d7:68:1b:d2:c4:2d:f5:ff:c9:
23:ea:f6:e6:8b:73:a2:08:b1:0c:8b:8d:8d:f1:96:e0:b6:25:
55:ef:39:bc:c4:a4:61:57:a9:e7:17:5a:ca:ae:15:d5:48:61:
d8:de:8d:e4:19:d4:9e:6f:3e:f0:db:6a:36:53:03:b8:b0:3a:
ea:fe:6a:6d:ac:6c:42:46:76:dc:29:23:67:d4:b4:6e:72:06:
fc:e3:fe:b7:9c:67:c0:10:36:4f:55:ce:60:c3:ea:28:a2:9f:
68:73:a4:ff:06:be:b1:3c:58:c9:c4:ee:6d:f3:85:da:00:62:
db:38:3e:93:de:b1:0f:91:95:ca:70:f8:b6:56:74:30:3a:2a:
1e:ee:ad:59:f8:3b:74:a8:c4:69:07:72:f5:f5:0f:f2:3d:e4:
c2:94:c4:65:3d:0d:a5:43:b5:ae:59:92:3d:68:77:99:41:56:
34:50:bc:2e:a3:27:6d:c9:40:49:aa:f3:ca:3a:52:a5:23:dc:
c6:95:ea:a5:86:a9:cf:12:0c:9d:bd:47:e1:83:cb:c1:b5:7c:
fc:91:86:c1:00:62:2a:fe:26:b2:6c:db:50:f2:64:26:2e:00:
f4:da:4f:3c:4b:a2:f3:8e:72:70:f9:03:77:dd:a6:55:19:4c:
94:dc:84:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:15:49 2024 by rpki-client on console-ams.rpki-client.org