Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PfTsvrjWk97BVHFV_x2txYxSHLA.roa
File: PfTsvrjWk97BVHFV_x2txYxSHLA.roa (raw, json)
Hash identifier: +HYjDSxUYsevYai6hUxiehdSY6Z4sDDO/wRDR5JCGcQ=
Subject key identifier: 3D:F4:EC:BE:B8:D6:93:DE:C1:54:71:55:FF:1D:AD:C5:8C:52:1C:B0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01884EB724D1D0443E59E8232CFDA0141ED6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PfTsvrjWk97BVHFV_x2txYxSHLA.roa
Signing time: Wed 24 May 2023 17:03:25 +0000
ROA not before: Wed 24 May 2023 17:03:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53850
IP address blocks: 62.76.224.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.34.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
194.87.39.0/24 maxlen: 24
185.72.11.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:b7:24:d1:d0:44:3e:59:e8:23:2c:fd:a0:14:1e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 24 17:03:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3df4ecbeb8d693dec1547155ff1dadc58c521cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0b:bc:33:44:b5:14:68:d2:00:ae:fa:36:b7:
a1:61:c0:22:33:64:34:9f:f9:e7:bf:01:1d:3c:ea:
ab:d9:b2:cc:9d:ff:61:25:63:86:98:5c:a4:62:34:
7e:cf:ea:23:b8:55:fb:07:1d:4a:a5:c3:9a:43:ec:
bd:3c:92:fc:09:21:f4:ff:fa:93:e0:d1:33:4b:e9:
18:8e:88:45:6d:d3:d5:36:0c:46:99:5c:49:df:77:
af:cc:7f:08:13:96:16:b0:ba:dd:c2:27:7c:b2:43:
77:bc:c1:3c:c9:ea:3e:74:61:b2:9e:9e:f3:07:30:
f3:82:68:4c:3e:fb:f8:d0:1b:fa:fc:1e:5e:60:aa:
80:f8:aa:fe:e5:e9:2a:23:b2:e0:88:70:d1:bf:f6:
5b:4f:38:d3:53:f9:2e:e6:0e:2a:16:75:4c:5c:0d:
1c:09:c3:3b:ad:17:94:07:26:5d:6c:cd:a5:53:c6:
f2:76:6c:ae:34:e9:9a:ad:c1:0b:0c:5c:a9:29:f3:
f5:e9:b8:49:af:20:03:8a:e1:ac:7d:41:f8:00:2e:
4e:b8:c7:5a:ec:ac:47:3b:5b:23:2b:a2:6a:54:73:
8a:1f:17:8b:53:00:b2:eb:a8:f7:45:79:81:af:4a:
4c:06:7c:7f:bf:bb:f2:0a:e0:de:35:f7:89:f1:c3:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F4:EC:BE:B8:D6:93:DE:C1:54:71:55:FF:1D:AD:C5:8C:52:1C:B0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PfTsvrjWk97BVHFV_x2txYxSHLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.224.0/24
185.72.11.0/24
194.87.32.0-194.87.34.255
194.87.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:26:0a:3b:cc:c4:3e:f1:aa:51:e0:6d:36:93:54:4c:12:f1:
a9:94:ee:4b:be:1c:a0:a2:a3:f4:f8:7d:6b:f7:4d:0d:bd:dd:
c5:10:0e:6e:20:a4:d1:30:cd:2e:18:86:dd:f1:e4:f5:bd:38:
6a:6f:51:0a:13:f9:f6:e3:9d:78:43:73:5c:40:b1:88:69:0c:
77:f9:f6:03:f2:5b:08:85:0e:68:4f:23:e9:ba:5f:4a:5f:21:
d1:5d:5c:c9:ba:7f:4c:d4:9a:c3:c8:37:e6:4a:88:ca:98:77:
4d:21:ff:ba:4d:8e:4a:cf:81:32:49:c3:62:0f:bc:aa:af:9b:
1d:79:bf:39:d3:42:cf:cc:25:a5:d7:60:5d:2a:0e:a2:d1:55:
5b:f2:f1:05:6a:d0:b3:01:1c:0c:e1:41:0b:18:25:61:fa:ab:
d7:e0:d7:98:05:9c:90:ee:da:34:7d:52:19:7b:d3:d3:60:df:
08:8c:47:85:14:86:f5:d6:4b:29:f6:60:f1:32:ed:bc:02:b3:
01:d7:86:ad:92:99:47:13:bb:3f:dc:de:08:90:da:84:84:4c:
c8:33:87:9a:f4:52:30:26:63:a7:fe:78:60:04:19:88:20:4b:
5a:33:62:e1:cd:04:bd:39:34:05:8e:b5:ca:ba:dd:cb:46:da:
3f:7d:f6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-ams.rpki-client.org