Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/ppl36SVePcCwJfVfYcfNml1plBk.roa
File: ppl36SVePcCwJfVfYcfNml1plBk.roa (raw, json)
Hash identifier: VwFkWpL7EFGtuYIO/uHhSVUxI4eSBbpJqdUTJWebfU8=
Subject key identifier: A6:99:77:E9:25:5E:3D:C0:B0:25:F5:5F:61:C7:CD:9A:5D:69:94:19
Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial: 01856E78E153B5BF52E6007E7505A1DACE4D
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/ppl36SVePcCwJfVfYcfNml1plBk.roa
Signing time: Sun 01 Jan 2023 17:54:53 +0000
ROA not before: Sun 01 Jan 2023 17:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196945
IP address blocks: 91.217.155.0/24 maxlen: 24
185.106.16.0/22 maxlen: 22
2a06:3ac0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:e1:53:b5:bf:52:e6:00:7e:75:05:a1:da:ce:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Validity
Not Before: Jan 1 17:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a69977e9255e3dc0b025f55f61c7cd9a5d699419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b7:e8:a8:b7:59:20:f4:98:04:bf:f3:b5:d6:
20:e9:44:ed:8e:72:d9:0d:b9:06:35:cc:f5:6d:70:
7b:a1:8e:b5:8b:eb:fa:17:66:05:df:62:a3:9b:dd:
35:0d:19:8b:16:36:dd:d2:36:a6:c6:6d:74:c8:39:
2b:f1:47:d0:32:47:b1:bd:25:69:06:cf:2b:e7:a1:
ce:c3:5a:96:16:79:5c:8c:70:d0:87:b3:6e:34:20:
33:bb:c8:02:72:88:a5:58:c2:43:bb:bd:81:cd:46:
00:94:04:81:7f:e3:55:29:7e:fe:f5:9f:cf:96:0e:
d3:0d:0d:58:03:ab:7a:ff:af:66:85:f3:37:8f:34:
d6:7a:69:0d:95:c3:10:5d:04:2f:81:f8:8c:19:32:
fd:90:09:89:ac:6a:66:0b:11:d7:68:5e:b3:c4:4c:
d7:7d:17:18:11:b6:f9:de:a0:62:1b:e6:e4:62:a5:
62:45:89:c8:f7:65:fe:f6:61:c1:bc:09:33:95:8f:
05:a0:ef:7b:68:97:05:58:cf:6a:aa:1b:2f:95:ec:
51:e7:48:d0:77:51:47:e9:21:8a:16:9a:bc:6f:dd:
0a:e1:3a:ae:b9:f7:d5:7b:11:88:f1:28:4e:2d:24:
ff:1a:3a:67:ba:ce:44:ff:a3:bd:ae:1f:5a:b1:fa:
9f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:99:77:E9:25:5E:3D:C0:B0:25:F5:5F:61:C7:CD:9A:5D:69:94:19
X509v3 Authority Key Identifier:
keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/ppl36SVePcCwJfVfYcfNml1plBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.155.0/24
185.106.16.0/22
IPv6:
2a06:3ac0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:d9:e7:bc:ad:5a:0a:5a:83:e0:29:86:a5:26:55:d1:16:5c:
d0:6f:82:c0:8a:94:cf:9a:87:ff:25:84:2c:82:45:f0:ea:69:
4c:d6:41:09:43:97:ed:c8:34:c5:7c:87:b6:87:eb:8c:45:06:
9c:6e:4f:65:25:61:1b:77:d9:8d:a4:75:d5:06:90:6c:bb:47:
ad:4a:83:a4:a2:f0:e7:69:6a:b6:a6:ca:f4:c5:67:c8:07:0c:
b5:97:25:ae:2c:cd:11:2d:71:a4:d0:b9:1d:f4:ba:ec:59:9e:
75:3c:5f:e1:43:b3:3b:89:14:d1:d3:4e:9f:d2:2f:3c:0c:bd:
fc:e4:71:b5:4d:79:67:77:3a:6d:02:85:f0:a5:ac:2e:d0:41:
d4:44:09:dd:45:2d:40:d9:e3:a8:e3:fa:df:c0:c6:63:ea:9d:
fd:18:6f:93:f5:17:e3:3e:42:38:2a:db:e2:e9:08:6f:3e:4c:
31:97:80:e5:ff:98:42:24:26:0f:9f:27:b0:0e:f1:de:7a:52:
b7:59:69:a0:99:74:e6:f6:55:1f:2d:da:29:49:f2:29:ff:ca:
43:52:9f:41:87:c9:14:80:32:7d:13:29:b6:58:10:a4:55:c9:
2a:2a:a9:10:96:cd:76:22:7f:85:d3:7e:0f:08:19:bd:25:39:
94:58:9c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:06 2024 by rpki-client on console-ams.rpki-client.org