Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/PVwdU_LY2dxYATiLxLib2K88zRk.roa
File: PVwdU_LY2dxYATiLxLib2K88zRk.roa (raw, json)
Hash identifier: MoAIgipOWYUQc9geOssPBufFfTPLXVzkmNPetmVWAlE=
Subject key identifier: 3D:5C:1D:53:F2:D8:D9:DC:58:01:38:8B:C4:B8:9B:D8:AF:3C:CD:19
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF973B10766A008F1D7CBF881D119A2
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/PVwdU_LY2dxYATiLxLib2K88zRk.roa
Signing time: Mon 02 Jan 2023 00:54:57 +0000
ROA not before: Mon 02 Jan 2023 00:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44525
IP address blocks: 92.247.104.0/24 maxlen: 24
92.247.104.0/22 maxlen: 22
92.247.105.0/24 maxlen: 24
92.247.107.0/24 maxlen: 24
92.247.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:73:b1:07:66:a0:08:f1:d7:cb:f8:81:d1:19:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d5c1d53f2d8d9dc5801388bc4b89bd8af3ccd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e0:40:33:8c:a9:98:37:11:6e:f8:55:7e:75:
a3:55:3a:a2:be:39:a1:63:e6:6e:2f:76:99:99:82:
12:60:e3:41:9a:68:56:af:17:30:fe:d0:14:f2:b6:
49:f9:d1:d6:3b:bf:92:03:32:68:35:3a:06:12:db:
d6:ab:ee:3d:58:9a:3f:7e:61:dc:c4:f0:ef:14:a6:
25:49:05:c9:18:3b:89:4f:6f:78:e1:bc:84:41:bf:
99:4a:a5:3b:a8:5f:b5:2a:c5:de:bd:ab:9f:5d:18:
d7:87:e1:bd:99:da:ac:eb:8b:bd:fc:48:55:b0:bb:
74:04:0e:75:aa:95:55:fe:34:d1:22:6c:51:46:59:
52:80:8c:5f:ce:6f:f4:81:e3:3c:bb:6f:9c:ab:1c:
9b:44:73:9a:a3:da:c1:f7:bc:c0:4d:df:58:db:2a:
02:91:4a:07:b4:aa:e0:cf:2b:46:3f:38:1b:93:7f:
1e:29:e3:b0:fc:68:2a:3c:1c:17:c6:61:86:63:39:
c9:8b:de:56:ff:e2:9d:9a:be:c0:1a:64:10:f3:aa:
7c:c0:5f:b2:33:8a:a2:9f:1c:9e:be:73:d7:93:7c:
d4:0b:09:20:3c:ea:6f:6d:26:0d:dd:63:8a:8f:11:
be:43:1a:e8:b1:70:2b:23:d6:82:9a:3b:38:21:a1:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5C:1D:53:F2:D8:D9:DC:58:01:38:8B:C4:B8:9B:D8:AF:3C:CD:19
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/PVwdU_LY2dxYATiLxLib2K88zRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.247.104.0/22
Signature Algorithm: sha256WithRSAEncryption
97:3e:d1:4b:51:85:e8:67:7f:14:86:90:b4:5b:39:16:aa:2b:
2f:77:78:08:60:8b:41:2f:41:85:25:a4:7c:90:1b:e9:59:bd:
a1:89:41:32:e6:4d:7f:ac:9a:59:42:42:b2:5a:eb:0b:e9:cb:
41:03:8e:5d:85:6b:f8:d5:48:8c:23:22:7b:7b:31:30:05:f7:
37:c5:97:0b:24:1f:67:a3:3a:b2:a9:b8:54:c3:5b:10:6d:46:
c7:75:a2:1c:36:1a:83:05:8c:22:b0:a0:37:47:27:58:85:78:
06:f8:b5:f4:38:59:a8:dc:13:2a:e5:fa:c5:57:cb:16:41:73:
3e:48:30:fe:bd:f1:94:5e:d1:59:24:93:2b:e9:68:e2:cf:f6:
9f:15:e4:cf:9e:91:28:c6:80:51:81:f2:e1:f6:6d:13:2d:47:
d7:46:1b:fe:b0:03:c0:16:b6:a8:61:68:62:d2:9e:09:ae:c7:
cc:6f:e8:2a:45:18:4d:b5:83:da:86:7f:dd:10:27:b1:24:de:
db:a9:2e:e2:18:7a:75:db:50:34:01:b7:78:71:b0:aa:66:3f:
ed:4b:27:b5:58:52:6b:8c:90:61:67:74:96:90:1e:80:1e:f0:
72:2c:dc:e5:cd:61:70:69:7f:f4:72:1e:0b:5b:80:69:78:bc:
af:ae:af:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:00 2024 by rpki-client on console-fra.rpki-client.org