Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Pb4jn_VjBesEm2_hjVhyivdKocU.roa
File: Pb4jn_VjBesEm2_hjVhyivdKocU.roa (raw, json)
Hash identifier: km0eFCsRIWoG/X8OxXMuLmTDAfL3Pt0n9iYp8XjZ2rg=
Subject key identifier: 3D:BE:23:9F:F5:63:05:EB:04:9B:6F:E1:8D:58:72:8A:F7:4A:A1:C5
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018C68ED88F5E429286827E8D9D15055298F
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Pb4jn_VjBesEm2_hjVhyivdKocU.roa
Signing time: Thu 14 Dec 2023 15:24:06 +0000
ROA not before: Thu 14 Dec 2023 15:24:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216127
IP address blocks: 147.45.197.0/24 maxlen: 24
147.45.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:ed:88:f5:e4:29:28:68:27:e8:d9:d1:50:55:29:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Dec 14 15:24:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dbe239ff56305eb049b6fe18d58728af74aa1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:0a:60:d1:8d:ec:61:46:4f:e7:bf:21:a8:
14:4c:61:d6:51:ba:70:91:04:80:25:b8:4f:bb:e8:
05:bd:b9:cb:cb:70:82:ff:48:d5:c5:9b:4b:c9:3f:
80:41:72:e7:d7:5e:19:71:19:7d:ec:dd:41:0c:60:
a5:85:62:03:00:5c:e9:b2:4c:3d:73:18:b4:f4:ae:
8d:df:8c:81:75:f4:9c:86:32:34:ad:49:37:40:28:
a7:41:bd:d6:65:74:8b:67:4b:7a:33:fe:0a:f6:9a:
bf:a2:24:b7:4c:b8:ce:46:3b:32:a4:c4:60:20:6c:
53:08:83:70:2e:bf:91:0f:22:3c:07:60:f7:18:e1:
f1:8f:d5:ec:f0:4f:a5:97:29:29:b3:f4:c2:23:e4:
e6:b4:71:15:07:1d:67:97:3b:71:91:ca:36:29:ac:
a1:f5:48:20:f2:68:cc:fa:69:f6:45:68:a1:80:d4:
1a:ed:79:82:b0:ea:28:45:62:87:1e:ce:ce:cb:af:
37:0c:59:38:a5:7b:9c:c1:72:cf:ae:27:94:10:4d:
22:f8:27:42:c9:2e:ff:55:ef:36:8b:81:6e:9d:f3:
2d:f6:26:de:78:12:b8:96:01:00:a3:fb:f0:04:bf:
70:c6:86:f1:ad:5f:53:32:21:02:ec:e7:c3:5c:d5:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BE:23:9F:F5:63:05:EB:04:9B:6F:E1:8D:58:72:8A:F7:4A:A1:C5
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Pb4jn_VjBesEm2_hjVhyivdKocU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.196.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:8e:e6:25:98:2b:f7:d8:50:54:31:c3:79:3d:31:e5:d1:a8:
5c:6c:c0:72:a1:0f:c6:51:a9:23:f2:f8:11:36:7f:6c:a9:74:
57:38:25:8b:61:cd:0d:0d:60:2e:59:26:fc:5f:c4:c3:24:65:
1e:71:45:91:89:f3:46:a6:69:63:b5:e4:51:1c:7a:bd:c8:98:
17:bc:9a:ec:ee:06:ea:00:4d:68:e4:45:1b:8e:ea:ac:b9:86:
54:11:79:c8:53:f9:6a:45:75:ce:0e:9c:fe:90:af:ad:cb:b5:
d3:f1:c2:16:f7:f7:c6:d0:7d:a7:bb:9d:21:f4:7e:5a:72:2f:
b4:93:9b:35:5a:76:bd:a2:d8:ec:bc:ee:ac:e3:3d:3b:4f:78:
27:e2:d9:d4:88:51:01:08:ee:09:f9:dc:5e:e7:da:18:f2:c2:
c3:9d:39:83:b3:76:70:36:19:71:9a:b9:67:2a:b1:72:fe:ed:
61:42:43:7d:a7:58:3d:03:49:1c:44:dc:26:49:2f:6b:97:12:
8f:aa:a9:79:2e:b1:dc:de:fb:9b:30:83:2a:8a:1a:e1:35:9f:
cd:5a:c3:25:c0:45:c3:95:31:e5:84:8d:fa:ca:79:4f:80:b9:
4a:3e:ac:d8:b6:07:32:47:11:21:86:62:7c:fb:4f:d6:bc:f9:
ad:8d:e8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:32 2024 by rpki-client on console-ams.rpki-client.org