Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PphLSuC_8LZL7qEG1HMtcAs6kbM.roa
File: PphLSuC_8LZL7qEG1HMtcAs6kbM.roa (raw, json)
Hash identifier: LZrRVdFCONSSGrxAGGT/L6+MiU5XifvSMpLmC0EOglc=
Subject key identifier: 3E:98:4B:4A:E0:BF:F0:B6:4B:EE:A1:06:D4:73:2D:70:0B:3A:91:B3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0186849B9A0A9539476E3D8A8CFEB5BCF63C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PphLSuC_8LZL7qEG1HMtcAs6kbM.roa
Signing time: Fri 24 Feb 2023 18:07:15 +0000
ROA not before: Fri 24 Feb 2023 18:07:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 109.206.242.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
194.59.30.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Apr 2023 10:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:84:9b:9a:0a:95:39:47:6e:3d:8a:8c:fe:b5:bc:f6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 24 18:07:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e984b4ae0bff0b64beea106d4732d700b3a91b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:66:9e:9b:dc:b1:d7:47:c1:e0:52:4e:aa:40:
1f:54:7b:fd:61:b8:9b:b2:8c:2b:6f:bb:70:85:e1:
84:48:1d:f0:30:b8:7e:64:c2:89:e4:3f:b7:53:97:
a9:5e:29:cc:cb:b4:d1:07:94:52:bf:4b:bc:dd:03:
1e:62:ff:56:18:c9:ce:1a:23:4c:5e:35:a2:34:81:
ff:ac:f5:51:51:a0:81:41:02:44:80:b5:2c:44:a0:
30:5d:06:30:9f:9b:50:ba:f4:d3:74:3a:d3:45:2e:
fd:d0:c8:a6:07:3f:22:b0:f3:64:8f:10:a5:a3:f6:
34:7c:16:67:11:6d:22:91:98:c3:66:41:81:90:52:
54:fc:21:f1:52:47:e0:bf:95:42:ca:01:ac:ee:30:
df:4e:39:18:26:19:bc:f5:9c:34:b5:12:6e:a0:82:
56:ff:4a:23:c3:a4:f4:67:40:4f:62:61:f6:66:6d:
c3:77:a8:2b:89:41:cb:88:e0:8b:d2:49:a6:d1:86:
ec:06:05:bf:c4:25:0f:33:f1:e5:ee:7f:ca:93:7c:
a3:4c:3f:2c:26:22:96:9e:36:bc:59:b0:49:6f:91:
93:31:da:47:a5:9b:cc:5f:1a:aa:b3:0b:f2:12:20:
f6:2b:8d:8b:a7:78:d3:13:27:d8:d8:d3:7d:42:19:
c9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:98:4B:4A:E0:BF:F0:B6:4B:EE:A1:06:D4:73:2D:70:0B:3A:91:B3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PphLSuC_8LZL7qEG1HMtcAs6kbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.51.0/24
109.206.237.0/24
109.206.242.0/24
185.218.138.0/24
185.246.222.0/24
194.59.30.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:5b:94:24:e4:3f:ab:b6:f8:84:96:68:27:22:ed:ee:00:f6:
56:64:a2:e0:26:7b:bc:3b:d4:44:eb:db:03:5c:c7:11:0f:3e:
d4:7f:d3:9f:31:c3:07:c8:86:22:5c:f8:c7:d3:44:b3:fb:9f:
9e:f2:08:f4:c5:38:e4:54:d9:49:72:2d:51:3c:1e:94:01:18:
bd:96:1a:3c:4c:80:8a:5a:75:3b:de:96:66:e5:c3:19:60:8f:
78:45:a4:bb:df:45:9e:aa:73:a0:45:f4:36:ab:a0:3f:25:77:
04:d2:2a:6e:6b:19:22:39:1c:7c:1b:ee:ac:6d:97:45:64:ae:
a2:bf:05:d6:8a:3c:f2:26:cf:86:17:b1:cd:41:73:90:0b:80:
15:5c:15:9d:3d:05:8a:29:4c:ab:f8:70:88:c1:02:45:32:90:
76:5e:7d:d5:e1:1b:d2:3f:aa:ef:5f:93:fb:a1:bd:aa:5e:03:
81:5e:9f:31:be:00:6b:7d:d8:11:c3:87:42:7b:a8:5b:28:d5:
b6:b7:9b:6a:44:a8:71:df:5b:0b:7b:db:33:f6:cd:22:55:c6:
1b:01:1e:5e:56:df:53:c7:10:fa:55:fd:a1:b0:4a:25:5e:6d:
0b:5d:e7:25:a1:f3:f8:8d:e7:7e:34:a2:36:7a:08:67:26:e8:
80:a7:f1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:32 2024 by rpki-client on console-ams.rpki-client.org