Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pnSE_J7sI3pTfN9i-VofSfTNwoo.roa
File: pnSE_J7sI3pTfN9i-VofSfTNwoo.roa (raw, json)
Hash identifier: /XSPoLaFc6N5nGZ2YrbQ+cYtgT3OR6ZHE4TJCWInhiQ=
Subject key identifier: A6:74:84:FC:9E:EC:23:7A:53:7C:DF:62:F9:5A:1F:49:F4:CD:C2:8A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B8012C6B56D6E9C72AE2FCFEC0DFED4C0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pnSE_J7sI3pTfN9i-VofSfTNwoo.roa
Signing time: Mon 30 Oct 2023 10:13:16 +0000
ROA not before: Mon 30 Oct 2023 10:13:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209043
IP address blocks: 62.76.233.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.24.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:12:c6:b5:6d:6e:9c:72:ae:2f:cf:ec:0d:fe:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 30 10:13:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a67484fc9eec237a537cdf62f95a1f49f4cdc28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:ea:9e:14:c9:6e:32:af:b3:f9:ce:60:7e:
19:9c:67:17:90:f8:94:ac:0f:8a:86:ca:3d:4c:2b:
d0:36:66:c0:b2:7c:d4:62:45:03:9a:94:86:b4:43:
5f:cf:c0:51:95:11:d4:5a:6d:96:37:36:b7:7f:c7:
03:9d:f8:92:f6:ca:11:bb:da:ac:5d:dd:9b:0f:61:
b3:0a:46:d2:55:6c:b6:e5:c1:dc:be:e1:22:91:97:
97:b6:9e:f5:fc:4e:46:a0:09:7d:04:dd:d0:be:8b:
3b:84:f3:23:6f:d0:48:18:a7:55:af:c1:a9:a8:44:
63:16:ff:04:bd:e0:95:0f:5b:9c:09:b9:0c:f8:f1:
ac:a9:75:2f:6a:24:0f:6b:44:16:75:75:e1:41:dc:
b7:a9:5b:f0:57:23:cb:e6:02:f3:f4:61:1b:d2:c4:
20:a7:0d:c6:8a:d6:b0:56:11:9e:54:bd:d6:bb:64:
b3:d1:88:c4:f6:17:12:29:be:70:d0:3e:79:c5:77:
fd:a7:c9:f5:06:43:b9:9a:b4:89:c4:2c:98:5b:bb:
cb:4f:e7:ab:f6:55:18:ef:b4:d5:46:0a:78:9d:18:
ae:23:6a:d9:34:05:08:04:96:9b:b6:7e:2f:1d:91:
67:36:4e:7f:59:29:b5:96:93:6f:7a:a8:2f:50:30:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:74:84:FC:9E:EC:23:7A:53:7C:DF:62:F9:5A:1F:49:F4:CD:C2:8A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pnSE_J7sI3pTfN9i-VofSfTNwoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.233.0/24
193.124.207.0/24
194.87.24.0/24
194.87.115.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d0:78:eb:2b:90:3c:56:16:1a:52:35:3f:49:cd:64:d4:af:
14:f0:f9:06:b7:44:40:58:a1:5d:2d:ec:49:6f:62:3f:16:f9:
60:35:12:62:b8:5a:ea:6b:ea:57:45:f5:16:d5:1b:b3:39:b0:
47:8c:37:05:71:ac:78:a4:f5:c5:09:a5:a0:47:bd:42:89:13:
03:bf:a8:2e:20:ac:ab:62:ae:f0:4f:eb:86:95:84:72:0e:25:
41:55:15:bc:7e:67:9d:12:8d:03:3c:fa:75:fd:48:3c:95:7f:
a5:f6:d2:3a:cd:89:44:78:c2:c7:26:af:55:ee:b0:cc:8f:6e:
8c:89:5b:da:48:85:1e:37:6d:06:87:6f:de:3e:9c:27:2c:33:
6c:96:a6:36:f8:4b:ad:92:31:ff:ba:d5:93:06:1c:a8:69:bb:
d5:60:49:62:a5:a7:5e:43:f5:a4:0c:18:03:b2:90:24:6b:2a:
2e:d7:7e:1e:00:cf:86:4c:90:70:24:ab:28:02:04:61:81:bc:
cd:26:a2:83:44:30:61:88:70:61:51:9d:70:dd:46:21:7a:4b:
c0:df:1f:d3:49:02:25:44:d9:34:b1:49:43:b5:a5:cb:df:0a:
e6:5f:23:3a:8c:f7:9c:a2:48:ad:2f:2c:7d:4d:71:57:b4:34:
e0:12:57:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:22 2024 by rpki-client on console-fra.rpki-client.org