Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PMkGW_AeNXUUcXaSvdHIQj1NJwY.roa
File: PMkGW_AeNXUUcXaSvdHIQj1NJwY.roa (raw, json)
Hash identifier: 774MzuwZtIQa3J5KjuyRJaYqMCsCjeD1zuVjTWrF0Do=
Subject key identifier: 3C:C9:06:5B:F0:1E:35:75:14:71:76:92:BD:D1:C8:42:3D:4D:27:06
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A8DDC86E4069C2BBB3236F3EE23B52732
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PMkGW_AeNXUUcXaSvdHIQj1NJwY.roa
Signing time: Wed 13 Sep 2023 09:25:54 +0000
ROA not before: Wed 13 Sep 2023 09:25:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60539
IP address blocks: 87.121.162.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:dc:86:e4:06:9c:2b:bb:32:36:f3:ee:23:b5:27:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 13 09:25:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cc9065bf01e357514717692bdd1c8423d4d2706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:5a:b1:e7:58:7d:3a:2c:ce:d6:6d:6e:a5:
99:77:1c:53:e9:f1:79:aa:85:57:f5:50:b6:1e:03:
4d:74:69:a5:06:76:2a:f1:b6:1a:47:79:23:81:50:
26:8e:af:0b:a0:59:34:09:77:69:53:02:77:2b:21:
b8:23:8c:3e:9a:ed:cd:39:72:b7:e3:72:83:7d:29:
09:0b:68:fb:f1:ea:a9:03:07:c1:eb:b2:71:05:49:
de:40:5a:a2:74:2f:c0:20:d8:4e:8e:17:82:da:54:
ec:31:eb:a1:f3:0a:e6:5a:7e:23:d4:9f:76:52:da:
c8:3b:16:11:56:25:e9:1f:42:df:24:ea:df:c1:48:
5d:05:85:cc:8e:e8:d9:8c:1a:23:a4:77:8a:f9:db:
68:93:55:3c:3a:98:98:21:bd:5e:d4:87:1d:25:f0:
c7:26:43:f2:57:63:cd:eb:a9:b7:be:a4:f0:f7:ae:
5a:5f:ca:c6:b5:a3:a5:3c:cc:e1:9d:be:05:4a:31:
bf:4c:2f:21:38:bd:28:d3:56:d5:d0:c3:24:95:bc:
cd:ca:d2:d0:c4:f2:06:d3:7f:64:b0:18:df:06:53:
5e:c4:c1:35:7d:f1:22:df:ac:00:2b:b0:da:5e:64:
c8:94:89:4c:15:5d:a5:c8:81:00:20:86:5a:f8:dd:
55:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C9:06:5B:F0:1E:35:75:14:71:76:92:BD:D1:C8:42:3D:4D:27:06
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PMkGW_AeNXUUcXaSvdHIQj1NJwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.86.0/24
87.121.162.0/24
Signature Algorithm: sha256WithRSAEncryption
61:2d:dd:2b:cb:b9:c6:58:7d:9d:c0:19:a2:58:0d:b2:f8:2e:
ef:fd:e9:77:95:79:df:5f:da:bf:32:f1:52:03:8f:72:4b:b5:
76:be:53:2a:69:74:14:84:c0:66:49:82:7a:18:0b:c0:cd:ca:
1c:62:36:bd:4b:1c:fa:49:88:f0:2b:4f:93:8a:6b:9a:ba:7e:
4a:cb:5b:93:79:bb:60:4a:bb:98:60:97:52:ba:ed:a0:87:0a:
72:d5:87:74:cb:33:18:54:6b:a6:45:e8:88:03:e7:f5:4c:79:
b4:a6:8d:22:39:89:11:bc:f1:2d:e1:9e:0f:87:df:ab:a5:76:
c5:87:ff:bb:a8:2c:9c:36:7f:ac:6d:e5:f9:10:06:05:6b:44:
cd:b3:21:13:9b:53:b5:12:21:35:6c:85:4a:69:db:f2:8c:4c:
69:3b:b4:e7:3c:5f:b4:09:f8:6b:b2:09:99:8e:15:12:4e:bc:
7e:6e:06:0d:f8:59:64:3a:63:38:c2:aa:0c:c2:26:ca:29:63:
db:65:e8:34:c4:3a:46:cb:5e:18:65:0f:a1:74:29:61:af:5b:
b3:cb:84:a3:1f:14:e0:d1:65:ed:94:39:22:78:d4:c8:96:cc:
fc:51:e8:a5:e7:63:c7:6c:b0:16:4a:10:f9:7b:20:d2:86:8d:
fa:d5:2e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 06:47:10 2023 by rpki-client on console-ams.rpki-client.org