Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PcmTdG6k4Rlr_RoYT1lMBE8RgL8.roa
File: PcmTdG6k4Rlr_RoYT1lMBE8RgL8.roa (raw, json)
Hash identifier: 8re9sh9BErTVyP1p0SDt2sOfp8IVZos0wc8nCwU7DYM=
Subject key identifier: 3D:C9:93:74:6E:A4:E1:19:6B:FD:1A:18:4F:59:4C:04:4F:11:80:BF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190353662D6C4B19BDB7692383ACACD4E36
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PcmTdG6k4Rlr_RoYT1lMBE8RgL8.roa
Signing time: Thu 20 Jun 2024 10:34:35 +0000
ROA not before: Thu 20 Jun 2024 10:34:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 80.76.51.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 05:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:35:36:62:d6:c4:b1:9b:db:76:92:38:3a:ca:cd:4e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 20 10:34:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3dc993746ea4e1196bfd1a184f594c044f1180bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:1d:70:ec:22:c4:72:80:21:81:ef:25:4b:
f5:cb:71:27:6d:39:b4:8c:89:fd:a5:95:69:a7:17:
91:db:19:ca:91:81:48:4d:44:9f:8c:1a:9f:c2:03:
31:21:9f:1e:d6:c6:9b:0c:88:72:d0:ef:f2:91:dc:
04:88:0a:9f:1e:de:0e:27:d5:bd:03:b6:ca:0f:ec:
24:fe:b7:f8:b2:34:11:65:77:ca:ba:9d:00:4e:03:
33:b1:d6:0d:b2:92:83:8b:11:36:a3:44:01:fb:7d:
6e:6d:f2:a8:3f:9c:82:cd:51:5d:f3:f1:d0:7d:90:
80:12:94:71:85:09:71:71:35:f4:83:44:cb:50:a8:
0c:8e:dc:05:35:a9:fc:1c:e7:ea:1b:0f:1e:85:2b:
ed:02:7f:7b:e0:5c:0c:d8:f0:ae:b6:5d:66:b9:96:
8d:e4:9d:61:a9:8d:00:44:36:61:85:32:a1:0d:f4:
8b:22:af:62:0e:df:a5:70:19:92:d6:96:70:72:d7:
72:22:46:c8:c1:43:18:f8:56:c9:a8:75:f3:5a:39:
6d:23:14:9b:ea:44:66:2f:c8:de:c4:d3:36:ff:ea:
4e:8b:60:88:72:7d:8a:02:52:d3:d9:16:1b:13:83:
f5:85:54:ad:48:a9:60:0a:5b:46:04:e9:03:a2:cb:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C9:93:74:6E:A4:E1:19:6B:FD:1A:18:4F:59:4C:04:4F:11:80:BF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PcmTdG6k4Rlr_RoYT1lMBE8RgL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.51.0/24
141.98.7.0/24
185.216.71.0/24
Signature Algorithm: sha256WithRSAEncryption
99:05:74:b7:81:af:3e:f3:50:99:c8:50:e8:cc:cc:3e:12:82:
5b:92:b7:a4:73:c9:5d:82:8d:96:69:29:f5:31:66:ef:da:f4:
bf:e5:8a:5c:de:50:a1:92:16:a6:6c:6b:d0:46:53:3b:21:63:
c3:de:8d:d9:b9:4a:84:7a:5f:a7:ee:91:d0:c4:31:90:5b:97:
72:6f:dd:73:50:d2:9d:58:1e:ea:99:de:51:a4:bc:ec:26:7c:
fe:30:ab:73:3b:6b:02:7a:7e:0c:bf:b2:04:17:4a:6c:4b:81:
26:5a:41:de:95:b3:50:c1:0a:60:29:b5:d9:1a:27:d1:6f:c1:
b1:a8:fa:c0:ca:ad:da:24:4f:73:27:56:91:37:e2:87:88:09:
32:dd:35:0c:2e:25:95:a6:a5:6f:f1:a8:06:65:3c:aa:96:06:
9d:11:c9:59:9a:6a:85:ea:64:e5:08:70:dd:63:8b:bb:12:e0:
b9:47:09:1d:33:eb:24:5d:85:a0:bb:52:13:40:80:c6:26:14:
a2:ed:7c:f9:a8:47:f1:25:ef:a6:ae:43:d2:70:c7:af:4e:0a:
28:45:f5:45:95:78:a5:a0:76:ae:92:e4:8e:a4:12:7c:22:f6:
6d:2d:fb:b7:fe:0f:be:53:e4:ee:f9:19:1e:bb:f5:06:c5:cc:
ad:01:d7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 07:42:31 2024 by rpki-client on console-ams.rpki-client.org