Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/PqXCpP3bLMvzW-P98xo-nm7rv-s.roa
File: PqXCpP3bLMvzW-P98xo-nm7rv-s.roa (raw, json)
Hash identifier: e4z8vV44OLta/1dOJw3V4E1/ZX7ToglsMvETlHJSaB0=
Subject key identifier: 3E:A5:C2:A4:FD:DB:2C:CB:F3:5B:E3:FD:F3:1A:3E:9E:6E:EB:BF:EB
Certificate issuer: /CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
Certificate serial: 018570796E1A3813A36F8826FE858C3C2B57
Authority key identifier: 22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/PqXCpP3bLMvzW-P98xo-nm7rv-s.roa
Signing time: Mon 02 Jan 2023 03:14:44 +0000
ROA not before: Mon 02 Jan 2023 03:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41971
IP address blocks: 194.60.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:6e:1a:38:13:a3:6f:88:26:fe:85:8c:3c:2b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
Validity
Not Before: Jan 2 03:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ea5c2a4fddb2ccbf35be3fdf31a3e9e6eebbfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:99:33:41:b1:ed:01:08:eb:8d:0a:ef:33:57:
87:7c:dd:a3:aa:eb:25:24:f2:b2:3a:0b:5b:79:a6:
ac:86:8f:6e:d2:fb:51:13:ca:5b:ca:4e:32:07:09:
1e:ab:8d:7d:b5:ba:f7:81:b1:14:a6:b2:f7:a2:4c:
8d:ff:2e:fd:a0:2d:d0:13:44:a3:63:9b:39:a7:bd:
54:86:c9:be:7c:22:1f:55:d0:3f:ad:0f:b5:9c:79:
20:b1:ae:81:4d:e4:d0:01:44:b2:1f:14:28:3e:d6:
5f:a4:f2:31:98:2f:68:8a:47:72:40:e6:83:ea:a8:
67:bc:06:32:34:ff:9b:44:89:0a:bc:10:02:40:a6:
77:6d:16:02:f1:f4:23:d3:9f:5d:07:f0:07:b0:e1:
fb:96:16:1e:3a:a3:a3:d9:33:72:f8:92:25:58:b4:
c7:f4:25:4e:eb:a8:98:6b:c1:02:93:70:51:fd:ef:
7e:78:d4:75:b7:29:97:cf:3d:d7:e5:ce:53:8c:03:
3b:45:ff:94:9a:b5:19:60:ea:27:1b:de:be:c3:41:
bf:eb:29:cd:be:9c:a3:b3:8d:74:e3:cf:8c:52:0a:
16:18:76:3a:e5:ae:48:90:63:74:dc:d9:6c:1a:fb:
39:0a:e5:73:c4:3d:86:cf:f7:a8:a3:13:09:11:44:
bb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A5:C2:A4:FD:DB:2C:CB:F3:5B:E3:FD:F3:1A:3E:9E:6E:EB:BF:EB
X509v3 Authority Key Identifier:
keyid:22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/PqXCpP3bLMvzW-P98xo-nm7rv-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.82.0/24
Signature Algorithm: sha256WithRSAEncryption
16:22:5c:df:01:af:07:0c:02:49:c4:59:87:9c:8a:a0:38:3b:
d2:4b:8f:cb:62:82:5d:b3:05:37:36:10:e0:4d:a3:12:fb:cb:
6e:6b:32:69:7c:93:aa:2c:f6:b7:f4:a5:75:56:f3:57:5f:cf:
68:c0:f1:79:03:2d:96:5c:da:90:fc:68:03:0a:d7:23:70:5a:
ae:3b:17:13:39:80:51:16:6f:31:26:7d:63:9e:dc:19:e5:8d:
ad:1b:54:47:56:74:bf:c0:92:3f:91:ae:63:ae:6c:c4:68:28:
7d:b7:35:62:a2:70:52:3d:61:b4:12:10:bc:44:2c:67:52:b4:
5f:17:5d:ed:0f:29:c6:47:b3:5a:02:cb:e3:13:e8:fc:7b:e8:
67:c1:27:10:95:6e:03:1c:1c:f1:c1:48:fd:91:92:30:10:d9:
38:d8:7b:7f:40:84:56:aa:2c:58:31:74:82:54:0f:fa:5b:9f:
b3:53:6b:51:67:d5:42:a9:95:7e:af:64:93:a8:c6:69:00:dd:
e2:54:af:fa:96:40:09:99:49:7c:2f:42:14:34:a8:5b:db:75:
ad:f4:33:f6:87:d9:25:47:8e:a2:31:15:07:2b:56:bb:53:5a:
aa:f7:6d:72:c7:22:d6:44:a4:8f:13:b2:e8:cc:ef:c8:7d:cf:
d5:91:a1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:28 2024 by rpki-client on console-fra.rpki-client.org