Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/PCqkto-YffgnfJHQo47T4EcC4VM.roa
File: PCqkto-YffgnfJHQo47T4EcC4VM.roa (raw, json)
Hash identifier: o+NJECl0+Ep2ABSFM6A1tgGq/Xx+soe0ce0PtWpgw9c=
Subject key identifier: 3C:2A:A4:B6:8F:98:7D:F8:27:7C:91:D0:A3:8E:D3:E0:47:02:E1:53
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 01856D4AD037D5168B4D5BEEC2387DE80400
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/PCqkto-YffgnfJHQo47T4EcC4VM.roa
Signing time: Sun 01 Jan 2023 12:24:57 +0000
ROA not before: Sun 01 Jan 2023 12:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 185.126.156.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:d0:37:d5:16:8b:4d:5b:ee:c2:38:7d:e8:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 1 12:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c2aa4b68f987df8277c91d0a38ed3e04702e153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:9b:15:42:d3:5c:00:9a:1d:79:f0:9d:69:
c7:d9:36:a3:22:7f:a9:96:a5:4e:2d:31:96:03:9b:
94:ab:a5:ae:33:aa:22:de:3b:65:76:04:c6:36:ff:
65:83:aa:bf:6e:22:19:fd:fd:af:e0:9a:fa:b4:0d:
e5:02:7f:90:fa:d1:4f:99:6c:29:9d:4e:3e:9f:52:
f4:3b:58:83:da:13:26:20:33:9c:e6:c4:ad:8f:15:
0f:e9:2f:13:dd:95:0d:6c:42:ce:95:7a:14:f7:f7:
a0:ff:9a:5e:d1:e7:cb:05:9e:c1:a2:6b:e6:fd:3d:
ac:4b:7c:96:fa:79:7e:9f:b3:58:7a:da:12:64:0c:
5a:63:5b:2b:d8:24:ef:9f:d5:65:d3:d0:c0:da:e7:
29:f1:ee:e4:77:bd:b3:6e:d6:46:90:ec:8d:e9:44:
26:fa:01:dd:f0:34:f5:a5:fd:c7:f9:19:d8:d8:72:
66:e5:b5:a4:0b:49:6d:ad:d4:4a:1c:4f:0a:43:e7:
be:ee:fc:83:3d:a2:5c:30:79:a1:79:9d:b2:1c:d8:
4a:a1:42:c1:02:35:de:e4:e0:ef:cc:c3:1a:7f:57:
ee:4a:99:a4:f3:08:49:99:ea:8b:2d:0b:bc:58:b2:
3e:91:e0:27:f0:ad:ea:59:b3:af:be:22:9a:ea:2e:
02:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2A:A4:B6:8F:98:7D:F8:27:7C:91:D0:A3:8E:D3:E0:47:02:E1:53
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/PCqkto-YffgnfJHQo47T4EcC4VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.156.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:66:2b:07:5e:ec:bd:09:3b:f1:37:8b:80:f5:90:6d:f0:3e:
ea:b0:77:3d:94:29:85:a7:f3:ec:ab:32:aa:14:2e:03:e4:e3:
ff:b7:c8:b7:41:d1:4b:6f:9d:d9:47:fe:ef:ae:37:f5:86:d5:
87:dd:44:ef:27:0c:8d:3d:b6:9c:7d:1b:62:0d:17:4a:45:2a:
9d:0d:61:86:ad:88:87:39:77:40:9c:b7:03:36:83:8f:86:84:
af:6a:f8:e7:50:73:f7:1d:5c:68:8e:87:49:0f:d7:1f:51:f5:
c4:5e:2f:e2:96:fa:5d:35:db:b6:ad:ed:b2:b5:0c:96:db:9d:
1d:ed:88:fb:fe:7d:ab:2c:4a:ea:1d:ef:9d:18:2a:a6:b3:63:
16:5c:36:ef:b8:1b:05:62:2a:7b:16:a4:c9:b8:58:75:19:a9:
e7:fd:ab:43:a6:f3:dc:8a:c0:29:be:19:6e:80:50:61:be:37:
9c:ef:25:5c:33:77:8c:a9:b0:80:93:96:c4:ca:e4:bc:83:74:
a0:3f:2e:4a:b2:a4:29:2e:70:7e:27:03:73:b2:83:8c:6f:21:
9a:e6:cf:36:11:93:47:70:a8:67:27:c9:de:e8:43:41:ff:fc:
c3:a5:c1:56:76:dd:8d:a2:86:74:a3:1c:48:3b:b4:ab:98:1f:
b4:5c:54:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:45 2024 by rpki-client on console-fra.rpki-client.org