Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/PVwkKlIi7dWahQDi8DY-dehee0k.roa
File: PVwkKlIi7dWahQDi8DY-dehee0k.roa (raw, json)
Hash identifier: rFKBnA4KoEbzUV+mpPCtdSyazEvvT7oAQDy48fUV/yU=
Subject key identifier: 3D:5C:24:2A:52:22:ED:D5:9A:85:00:E2:F0:36:3E:75:E8:5E:7B:49
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE60E5FD88FC55813548033777E80E6
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/PVwkKlIi7dWahQDi8DY-dehee0k.roa
Signing time: Sun 01 Jan 2023 10:34:54 +0000
ROA not before: Sun 01 Jan 2023 10:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23422
IP address blocks: 152.89.252.0/24 maxlen: 24
45.10.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:0e:5f:d8:8f:c5:58:13:54:80:33:77:7e:80:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d5c242a5222edd59a8500e2f0363e75e85e7b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:55:1c:97:b1:3a:6c:e3:a9:93:19:ef:1e:
16:d4:3c:22:2e:1d:1b:db:b7:11:f0:15:c3:5d:42:
8f:8c:4a:40:3d:26:5d:6e:0c:43:85:ce:4b:fb:85:
a6:0d:61:0f:ef:65:39:a3:62:99:7c:09:ff:04:10:
5b:ed:9e:2f:31:b2:5b:96:37:0b:c0:0b:6c:f9:64:
74:ef:84:1d:c9:1b:f7:25:d0:dc:81:e4:15:38:46:
41:9d:6c:52:2a:0a:a8:90:a9:53:88:d3:06:02:69:
52:63:54:98:9c:41:bf:47:9a:ab:3f:ff:41:d8:13:
51:94:7f:84:a2:17:20:20:f7:16:6a:73:18:3e:81:
13:77:87:12:53:9b:38:ca:91:6c:d5:65:24:a3:c6:
e8:ae:6f:3c:5f:0d:f4:25:c1:d6:ee:a3:d0:c6:5e:
1f:c4:32:30:c2:2a:cc:fd:41:50:f8:dc:ea:4d:36:
79:a5:83:1e:84:be:97:95:12:72:e9:7d:48:bb:cb:
ea:38:c5:c0:7c:35:b6:7e:26:64:ec:ef:72:ef:28:
d9:9e:68:7d:5b:2e:27:bf:b1:ee:f1:55:f4:4a:f2:
ad:67:e8:85:5b:9a:d6:f5:06:92:21:97:1e:e5:6d:
99:e5:fd:9b:49:fc:33:33:43:f8:2b:57:89:bd:53:
32:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5C:24:2A:52:22:ED:D5:9A:85:00:E2:F0:36:3E:75:E8:5E:7B:49
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/PVwkKlIi7dWahQDi8DY-dehee0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.21.0/24
152.89.252.0/24
Signature Algorithm: sha256WithRSAEncryption
80:58:70:21:49:4d:15:2b:05:62:91:e2:8c:8a:99:c4:15:29:
30:2e:09:4c:20:45:9f:e3:db:bc:31:5d:54:ed:3b:90:c3:c2:
ea:99:2b:24:ac:3a:9b:63:f1:e5:a1:42:57:c9:bc:fd:50:ca:
f7:58:db:b8:ad:c2:d2:ac:6f:f6:5b:20:22:f6:3c:60:ee:15:
91:c6:a2:02:1e:5e:28:2d:a6:fb:07:7a:2c:fe:f5:54:62:f0:
dc:9f:d6:c1:f7:fe:9f:c5:8b:af:7f:88:1c:65:24:fa:bb:5e:
e1:ab:50:31:2f:20:06:98:5e:4e:fc:fd:2d:7f:b8:76:ac:f5:
ca:f2:1a:1f:80:0a:26:15:7d:4b:56:3b:6a:ff:34:ca:0e:d0:
26:b6:f2:3e:c5:56:60:b6:8b:3c:3a:18:e9:06:0d:17:ba:ae:
f8:e6:70:3c:61:5f:a5:25:9f:bb:1b:4e:1b:ba:f9:3b:df:e9:
c1:ef:5c:ce:c6:5f:9b:88:e8:3e:b8:03:db:9c:c7:20:bb:c9:
6a:8f:4f:39:29:93:ff:87:db:1d:cf:72:19:16:52:a7:9e:84:
c0:06:e1:ba:bf:58:f3:fb:71:14:e3:74:0d:9f:0a:0d:5e:02:
b6:96:2a:65:8c:1f:dd:93:89:97:b6:32:9c:83:97:c9:fc:f0:
22:ca:6f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org