Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/PVfLP-LRlW7ScC_c-7q90UZF5-A.roa
File: PVfLP-LRlW7ScC_c-7q90UZF5-A.roa (raw, json)
Hash identifier: 5dngHOnnnvFA9/OxMMvlLQITcMZy1AmBLGPoMMLzm1k=
Subject key identifier: 3D:57:CB:3F:E2:D1:95:6E:D2:70:2F:DC:FB:BA:BD:D1:46:45:E7:E0
Certificate issuer: /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Certificate serial: 018BBD9DD379A72F07EBAECF6D1B0690913D
Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/PVfLP-LRlW7ScC_c-7q90UZF5-A.roa
Signing time: Sat 11 Nov 2023 09:01:58 +0000
ROA not before: Sat 11 Nov 2023 09:01:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12301
IP address blocks: 217.113.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bd:9d:d3:79:a7:2f:07:eb:ae:cf:6d:1b:06:90:91:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Validity
Not Before: Nov 11 09:01:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d57cb3fe2d1956ed2702fdcfbbabdd14645e7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:db:78:e2:2d:1f:0c:ee:77:ec:82:7b:2a:
e6:22:5e:44:d4:cc:da:e4:b5:6d:df:12:25:9e:85:
97:30:4a:ab:e8:48:24:88:74:ce:67:eb:3f:72:6c:
1b:8f:af:4d:4f:dc:7c:1d:0f:fe:1b:cf:14:31:2c:
85:9d:ae:bd:04:1c:ea:ec:97:07:03:a4:f2:db:3a:
8b:1d:a1:89:71:11:fd:8f:76:18:8e:24:a3:ed:e9:
ad:90:cf:f9:79:fc:ee:68:5a:db:e3:2a:18:79:5a:
3f:28:a4:1a:48:72:f0:e2:ea:ca:81:41:a8:a6:4a:
c6:56:52:a8:3e:ef:ae:e3:10:32:d6:03:41:f1:98:
d6:f1:9e:86:f3:97:92:f0:e5:50:f0:b5:5a:31:40:
a4:59:db:4e:e0:01:9b:cd:eb:42:73:99:92:3a:36:
8c:36:47:1b:03:28:d2:8e:7a:ba:20:05:09:88:40:
cb:24:4a:22:b5:b7:d2:4b:36:0f:59:58:57:cc:14:
da:29:23:b5:b6:6b:78:2e:86:fe:64:68:01:84:65:
3a:1a:ef:bb:b9:0b:dd:f0:93:9a:5d:73:10:72:72:
6e:75:c9:97:38:34:cb:ba:d0:01:7e:95:be:8e:39:
a3:6e:92:60:d5:9c:55:48:64:c9:17:3b:43:56:33:
98:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:57:CB:3F:E2:D1:95:6E:D2:70:2F:DC:FB:BA:BD:D1:46:45:E7:E0
X509v3 Authority Key Identifier:
keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/PVfLP-LRlW7ScC_c-7q90UZF5-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.60.0/24
Signature Algorithm: sha256WithRSAEncryption
21:8e:31:2d:8e:88:63:4d:c5:b1:e3:3e:a1:b2:e6:5b:57:bb:
8e:6d:71:45:57:36:d3:37:df:1d:d1:b2:12:20:92:a1:51:60:
15:0f:3b:0b:7b:00:ac:8b:c2:9b:67:cc:71:d6:46:a3:25:0a:
75:32:63:a2:ce:0d:bd:f7:49:eb:6c:f7:9d:75:d5:08:17:31:
84:f6:de:02:77:2b:bd:7f:45:65:ca:a0:bd:32:81:4d:6a:63:
cf:21:40:5c:25:d1:b7:fa:88:fb:bf:4c:e4:f6:70:4a:db:f5:
3b:63:5a:08:42:b1:b1:b5:38:20:40:5d:cb:86:e1:26:d4:a9:
42:d2:5c:b1:0a:c6:85:d3:3a:7c:e2:5f:77:99:33:6f:10:10:
52:e6:64:17:4b:ef:0f:28:33:3e:3b:95:06:55:8a:05:f5:e4:
ee:c6:43:63:c1:50:e6:1e:57:97:39:ac:33:49:64:08:e9:12:
6d:82:34:3c:ee:f3:17:01:1d:2f:e0:03:79:d7:74:fc:7b:cd:
e0:e3:a5:26:e0:33:e9:66:05:fe:11:6a:23:66:c6:96:9f:a0:
95:67:50:b2:40:d4:d4:e7:92:32:36:5c:1f:aa:0d:a4:c2:7a:
d0:a4:af:44:17:aa:99:d9:56:c6:d0:df:d9:9d:8e:6e:57:e1:
e3:15:02:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:29 2024 by rpki-client on console-ams.rpki-client.org