Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/PteLvsGo0VTtZbpxA8UT-oh-2RI.roa
File: PteLvsGo0VTtZbpxA8UT-oh-2RI.roa (raw, json)
Hash identifier: Y6axiJsuuLU6qx0Blt0v0HvZjhozMI3Zky8ssNE52h8=
Subject key identifier: 3E:D7:8B:BE:C1:A8:D1:54:ED:65:BA:71:03:C5:13:FA:88:7E:D9:12
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018BDD4DBE70F991B59630BE54602B5E1854
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/PteLvsGo0VTtZbpxA8UT-oh-2RI.roa
Signing time: Fri 17 Nov 2023 12:42:21 +0000
ROA not before: Fri 17 Nov 2023 12:42:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.41.0/24 maxlen: 24
94.154.40.0/22 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:4d:be:70:f9:91:b5:96:30:be:54:60:2b:5e:18:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Nov 17 12:42:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ed78bbec1a8d154ed65ba7103c513fa887ed912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:0b:ca:c7:b5:3c:3e:44:e8:e1:b9:45:c4:
ce:69:c8:b0:b1:fe:7a:d8:b2:c5:ef:0b:db:0d:13:
d8:35:96:68:09:3f:5d:8a:12:61:f0:d0:f9:96:32:
7a:e8:66:28:e4:1c:29:b8:9e:62:86:40:b5:40:e9:
d1:f9:f4:ba:42:b7:cf:6a:0e:c8:82:42:11:72:22:
8f:ff:85:a9:b9:b3:06:e5:3f:5d:02:d4:18:11:cb:
0a:08:e8:74:e8:68:78:a7:33:f0:d2:df:c8:e1:cb:
8b:af:59:c5:41:d2:cd:a7:74:db:76:bb:e5:b1:c4:
8c:b6:ae:11:4c:47:07:fd:e7:3f:ca:af:71:f1:d1:
0d:4b:bc:d2:53:aa:23:96:a8:d0:4b:0c:da:cf:6e:
41:f9:67:1f:30:97:45:2c:65:ce:6b:e9:2c:11:b9:
8b:9d:db:2c:f1:62:41:d6:5e:ed:44:75:f4:3b:b7:
c9:5c:8c:b6:25:13:9a:81:4d:bd:bf:45:d0:ec:09:
00:55:47:6e:b7:ec:c3:c7:47:b6:c6:92:e3:7b:01:
16:ca:c5:8f:ce:70:9e:ab:a9:11:53:cd:9b:0d:1e:
9c:78:57:69:dd:fa:38:ce:ee:44:7d:4c:dc:a7:7a:
c1:47:52:5c:eb:d4:f2:3e:c3:e5:85:6c:33:6c:72:
19:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D7:8B:BE:C1:A8:D1:54:ED:65:BA:71:03:C5:13:FA:88:7E:D9:12
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/PteLvsGo0VTtZbpxA8UT-oh-2RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
87:a7:55:f1:7a:a8:f4:59:f4:f9:41:03:01:d4:43:25:dd:71:
d8:f1:98:f2:94:05:80:27:21:96:dc:09:e2:79:8d:d9:0f:a6:
97:47:db:e8:53:31:e2:e7:ff:d8:77:ef:c9:e4:19:e9:3c:cd:
bd:09:a6:89:ba:74:e8:b1:6e:90:79:4a:d4:0e:46:e8:3e:3a:
c9:d6:5a:e0:1d:e4:73:0b:55:9c:cd:1e:39:f8:98:5b:1a:2c:
dc:0c:cb:da:d4:e7:c9:f3:05:ba:cb:59:3e:05:f3:59:87:23:
21:56:7b:ce:c9:63:32:9d:90:58:8e:33:ff:fc:02:ff:2c:66:
c1:7c:ca:3c:fd:76:5f:ef:e2:ea:d9:09:12:22:d9:15:99:a8:
c9:b6:09:52:c5:ae:6d:21:58:f2:d4:9e:a4:43:1e:55:30:3e:
8f:c0:25:f4:dc:84:92:12:7f:fb:db:84:6a:90:fc:26:a3:ad:
7f:30:4e:2d:cd:dc:99:09:22:f7:4a:f0:2d:22:d3:27:e4:2b:
f0:30:fc:d9:3d:6f:41:aa:a1:a4:78:be:4e:c1:d5:f0:0d:c5:
1f:bc:85:97:34:ca:b4:78:87:1c:92:89:46:87:31:a3:8f:66:
a0:a7:e2:2c:aa:6a:8b:a0:a3:d5:dc:19:43:9c:dc:5f:7e:2f:
06:4c:82:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 22 09:16:35 2023 by rpki-client on console-ams.rpki-client.org