Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ptpm_RaRg5V9vJ3v_wYzDVJwfx0.roa
File: ptpm_RaRg5V9vJ3v_wYzDVJwfx0.roa (raw, json)
Hash identifier: sWPnr/n36DxIH//4nTLudsx2UvKRynER3WdQDXglM4M=
Subject key identifier: A6:DA:66:FD:16:91:83:95:7D:BC:9D:EF:FF:06:33:0D:52:70:7F:1D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0190633DE514EF20555E4D25F1D4DC66D2D6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ptpm_RaRg5V9vJ3v_wYzDVJwfx0.roa
Signing time: Sat 29 Jun 2024 09:05:18 +0000
ROA not before: Sat 29 Jun 2024 09:05:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 194.87.246.0/24 maxlen: 24
195.133.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jun 2024 13:38:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:63:3d:e5:14:ef:20:55:5e:4d:25:f1:d4:dc:66:d2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 29 09:05:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6da66fd169183957dbc9defff06330d52707f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:9b:30:dd:82:7e:fb:72:2b:f3:74:5d:09:
80:85:ff:11:b3:37:d5:36:5e:cd:bf:6c:47:27:b1:
29:d2:3c:1d:0f:be:31:cd:6f:4b:a7:31:c2:42:75:
f6:da:fd:91:8c:2c:d2:fc:aa:ba:49:7b:83:11:79:
f7:9f:b8:2a:69:24:6e:f6:65:a8:2d:51:10:fd:c5:
9e:fa:f9:4f:8d:e2:83:79:45:03:7f:f5:51:f9:7a:
d6:b0:53:7b:da:55:da:bf:c6:a4:9e:a3:26:09:45:
09:30:25:10:cd:d8:ba:cb:7d:05:c8:98:29:ae:fc:
02:5d:3e:02:98:86:8d:cb:ce:3f:a9:d7:7e:fd:fb:
16:cf:cb:77:a5:0f:38:a2:a1:87:5e:24:a5:6c:4f:
1e:33:2e:a2:3c:c2:f6:ac:7f:4b:9f:b5:f2:18:30:
84:7f:1f:6a:cf:aa:77:c1:94:a8:3f:b4:72:47:73:
1b:55:69:2c:ac:69:03:d2:5a:22:54:6e:d0:32:f1:
84:ab:b6:4d:f7:ed:15:e1:d9:07:ca:91:e5:96:83:
c3:b5:d3:d5:d3:bf:30:92:11:8d:32:ce:a8:da:e8:
35:21:bd:ed:3d:5a:81:29:2c:3b:a4:01:48:d0:87:
59:0c:8d:ff:be:4a:18:d8:5f:02:de:8d:fb:8a:95:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DA:66:FD:16:91:83:95:7D:BC:9D:EF:FF:06:33:0D:52:70:7F:1D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ptpm_RaRg5V9vJ3v_wYzDVJwfx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.246.0/24
195.133.50.0/24
Signature Algorithm: sha256WithRSAEncryption
04:9f:e4:36:03:95:4c:6a:a5:54:b8:7a:c7:a0:3f:56:e3:34:
f7:ea:30:93:c4:65:e2:19:e5:b3:5d:26:7d:1c:76:9b:b9:ce:
7b:e6:ad:dc:8c:9c:1f:7a:ef:cc:9e:91:ca:b7:06:0d:a5:fa:
ce:6e:62:a9:a2:fe:d8:c4:bc:7c:1a:77:c8:89:c2:fb:83:53:
38:04:2a:45:67:15:43:08:4e:06:a0:82:37:47:b4:1c:84:1a:
5d:24:2d:df:64:3a:a2:f4:66:6d:54:3f:b5:64:06:2f:0c:ac:
8a:09:a9:d6:b4:d8:1d:e5:b2:bf:38:10:d1:ef:b9:b8:ae:d0:
2b:26:7d:a9:5f:20:de:e3:0c:f6:16:54:f9:20:a8:ff:0d:7f:
51:27:2b:4b:f3:e9:82:be:74:80:52:46:ff:18:f4:54:8e:0f:
72:43:a9:61:3a:6d:bf:20:17:d9:83:be:83:50:46:b4:59:53:
5c:a8:33:d9:00:79:d1:5e:ed:ef:7e:f2:2b:67:96:b2:02:b8:
5a:22:37:67:31:2e:e2:02:a2:fb:33:2d:44:59:be:81:78:bb:
10:18:37:ca:06:2c:d1:2d:05:64:a0:f4:77:fd:26:93:a9:c8:
c5:9a:6a:6a:d3:13:79:3a:3e:d1:9e:22:9d:70:89:32:be:13:
9e:ea:ab:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 18:29:24 2024 by rpki-client on console-ams.rpki-client.org