Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/PKUBHLnabVf8LTsPWZL5YCGlSGA.roa
File: PKUBHLnabVf8LTsPWZL5YCGlSGA.roa (raw, json)
Hash identifier: cL63ckUVuKCvq63ZGX/oKuBFJ4ZSfg2Z8qov/rHM/fo=
Subject key identifier: 3C:A5:01:1C:B9:DA:6D:57:FC:2D:3B:0F:59:92:F9:60:21:A5:48:60
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018F9F868608BEF82C1BDA46DA669FA7825F
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/PKUBHLnabVf8LTsPWZL5YCGlSGA.roa
Signing time: Wed 22 May 2024 08:59:04 +0000
ROA not before: Wed 22 May 2024 08:59:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62163
IP address blocks: 45.140.10.0/23 maxlen: 23
46.161.216.0/24 maxlen: 24
46.161.217.0/24 maxlen: 24
46.161.218.0/24 maxlen: 24
46.161.219.0/24 maxlen: 24
193.56.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 08:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:86:86:08:be:f8:2c:1b:da:46:da:66:9f:a7:82:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: May 22 08:59:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ca5011cb9da6d57fc2d3b0f5992f96021a54860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a9:db:9b:70:85:98:1b:d0:24:3a:6c:e6:01:
fb:66:12:93:1e:21:7c:cb:74:4b:5c:78:4d:3a:71:
55:42:dc:4f:f1:9a:38:0b:7e:b7:82:2d:71:36:23:
c4:b2:d1:ac:05:0b:61:36:06:40:fa:d3:b2:0d:95:
8b:e5:b2:37:97:75:ae:d5:bf:ad:85:9d:a4:d0:ba:
d7:50:51:60:fe:b0:7e:2b:9d:8d:57:6e:00:71:ee:
b5:ad:4d:e1:db:94:00:44:bd:c6:03:be:1c:c8:ff:
69:71:c5:db:ac:25:dc:29:7a:85:71:48:01:e8:ff:
0f:aa:2b:4b:f0:ea:e9:ef:1a:5b:73:74:8a:6f:21:
85:25:a1:5a:07:ac:71:30:32:3e:fb:78:f6:c3:82:
b0:5c:db:3f:30:b0:c1:66:e4:0a:25:45:80:43:ed:
4a:17:7e:7e:23:d4:6c:25:9c:c6:85:28:1e:f3:3b:
7f:d5:98:87:50:77:45:a1:46:35:59:cc:31:8c:57:
e2:9e:da:ba:25:38:b4:5b:cf:a4:89:f1:e8:08:2d:
46:ed:56:2a:a7:75:d0:22:ce:c9:c5:9e:3c:05:1e:
1c:aa:4a:6e:80:62:5e:0b:27:72:3b:c1:c9:cb:ce:
44:24:26:93:b5:a2:1b:ae:ba:e9:51:10:74:92:94:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A5:01:1C:B9:DA:6D:57:FC:2D:3B:0F:59:92:F9:60:21:A5:48:60
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/PKUBHLnabVf8LTsPWZL5YCGlSGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.10.0/23
46.161.216.0/22
193.56.239.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e9:62:35:40:7b:46:6d:a6:4e:a7:4c:1f:1d:42:b0:7f:d1:
9f:af:76:25:f1:b3:d6:a4:80:d9:e2:63:f1:ea:1b:6a:a6:b9:
98:cd:4d:55:21:29:1e:58:b0:b3:a0:f9:cc:91:46:b4:db:11:
da:ba:ae:a7:b3:d5:fc:5b:10:4a:0e:d6:40:51:7f:9c:cc:7a:
18:df:40:17:ae:cb:f2:b1:b1:97:ab:b4:e9:27:82:d9:45:02:
bb:71:3b:8f:27:1c:27:10:0c:cf:a0:86:e7:4b:df:ce:d1:b1:
c3:2c:a7:ae:75:a5:10:d2:65:c5:f4:ea:63:4d:a4:3c:82:ad:
7c:13:f9:30:30:06:43:ae:f4:9f:14:a7:a3:81:f0:cb:46:9e:
21:22:cf:8d:a0:3e:e1:30:87:ac:ad:92:03:53:30:9e:2d:c2:
50:71:7f:f7:3f:1a:f3:14:12:06:d2:fc:83:5f:cf:6c:80:9b:
f3:dd:33:e9:49:89:2e:4d:96:6e:9c:8a:aa:ed:90:e9:98:1c:
44:66:43:fb:7d:0b:b3:40:29:09:d8:8f:5e:d3:75:8a:4e:08:
e3:36:c4:3e:3c:01:64:97:77:42:05:28:5a:e2:cc:c3:02:b4:
69:bf:04:79:fe:a2:9a:34:66:46:d6:d6:9f:ba:81:ca:7c:05:
a0:50:6a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 12:04:28 2024 by rpki-client on console-fra.rpki-client.org