Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Pcnu_AyMms_X0ojmVLaC0RDtwxk.roa
File: Pcnu_AyMms_X0ojmVLaC0RDtwxk.roa (raw, json)
Hash identifier: kGM8vdJeinCjgu2DRZiQ8B3/ZFZ5tVImDI0r+/Y41O4=
Subject key identifier: 3D:C9:EE:FC:0C:8C:9A:CF:D7:D2:88:E6:54:B6:82:D1:10:ED:C3:19
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CE484F6E1DE56AB4EC991524A03E5C2B4
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Pcnu_AyMms_X0ojmVLaC0RDtwxk.roa
Signing time: Sun 07 Jan 2024 15:22:48 +0000
ROA not before: Sun 07 Jan 2024 15:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 193.30.241.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
193.57.41.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 11:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e4:84:f6:e1:de:56:ab:4e:c9:91:52:4a:03:e5:c2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 7 15:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3dc9eefc0c8c9acfd7d288e654b682d110edc319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:05:2a:e9:21:62:b8:e4:3b:20:39:a9:10:ff:
37:c4:f5:53:1e:27:2d:fa:8e:57:f6:92:f7:cd:65:
34:06:33:ae:16:44:4f:21:99:42:2a:a1:b7:db:9c:
74:e2:68:31:b8:c2:04:ec:e4:7c:2a:6f:8a:4a:35:
3e:60:c0:3b:46:32:ad:d1:8a:91:76:7a:fb:6c:4d:
2b:f7:03:fc:4e:9e:6f:53:a2:1c:a0:81:39:27:2e:
65:8e:c5:a1:d9:45:06:14:2e:d2:1d:0c:14:c5:74:
9a:a3:00:f3:dd:f7:91:24:10:3c:cf:e3:ac:6b:69:
24:36:6e:86:86:43:d7:79:fc:11:9f:23:cd:15:a3:
f6:43:8c:58:41:3c:ba:e0:75:bf:3d:81:38:88:7f:
f9:e1:c6:91:ac:2c:0e:c6:25:8c:9e:fb:db:92:32:
51:78:18:10:16:68:3e:56:91:31:38:ea:f5:b7:31:
95:12:d6:11:e0:d9:f9:2f:cd:df:e2:3d:fb:91:93:
57:d5:62:80:c1:8a:f6:8d:9f:f3:93:5d:1c:3a:64:
ca:13:a3:74:30:5a:b9:89:8f:2f:94:9d:c0:38:a3:
b7:a4:67:e0:29:43:bd:20:ca:13:4c:2c:8a:ba:c3:
0c:ef:a8:1c:c2:45:8b:86:3b:83:a9:74:01:61:58:
bb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C9:EE:FC:0C:8C:9A:CF:D7:D2:88:E6:54:B6:82:D1:10:ED:C3:19
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Pcnu_AyMms_X0ojmVLaC0RDtwxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.115.0/24
45.88.139.0/24
45.94.170.0/23
85.209.120.0/23
146.19.125.0/24
193.30.241.0/24
193.57.41.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
72:dd:1b:52:40:4c:6c:e1:da:fb:7b:ae:0d:68:4a:63:a8:a6:
5c:b0:3c:40:5a:25:3f:19:07:e4:88:9f:bb:01:7b:3a:b1:85:
2b:cc:37:0a:ac:66:bd:ad:16:6a:dc:fe:94:0f:e3:09:97:70:
1c:dd:fa:f4:2a:aa:fe:7b:57:42:ef:04:dc:01:09:ab:04:bf:
a4:6e:42:d8:02:d9:e3:88:11:d2:58:23:4a:16:ad:ad:18:bc:
05:aa:c0:e1:14:ec:91:7f:6c:16:00:11:ea:8b:03:6b:7b:7c:
32:a8:ef:5f:ae:bb:11:90:83:12:6a:37:e7:07:3b:ff:fb:21:
f1:b9:c5:a2:0e:8e:b5:70:bf:95:74:cd:ea:1c:d6:0f:85:21:
ba:bb:42:16:73:d8:12:d9:62:dc:c6:c2:5c:58:fa:93:9d:f6:
db:c6:85:68:e4:c3:fa:df:94:b7:3e:40:df:91:2a:15:e6:7e:
d6:5f:d8:24:0c:6c:c9:bf:ad:4f:dd:dc:c3:54:18:0d:4f:89:
b4:73:e0:1b:52:35:0f:33:13:b8:e2:ca:79:99:b5:59:63:c6:
99:21:a2:c5:73:f8:d5:c5:9b:0d:eb:6d:f0:77:b6:c2:22:a3:
50:48:6d:ff:16:a6:0a:07:ca:85:9b:84:ea:68:74:bc:f0:2c:
52:41:6b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 14:55:21 2024 by rpki-client on console-ams.rpki-client.org