Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/PhHI28-NLouDWEmJlzXyHXoTsVg.roa
File: PhHI28-NLouDWEmJlzXyHXoTsVg.roa (raw, json)
Hash identifier: OlhfpoIxbX4lYGzppeiIoXAtgJA9xEoz464jWMa0hbE=
Subject key identifier: 3E:11:C8:DB:CF:8D:2E:8B:83:58:49:89:97:35:F2:1D:7A:13:B1:58
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 0190D941AF257C1615632207A25C324B106B
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/PhHI28-NLouDWEmJlzXyHXoTsVg.roa
Signing time: Mon 22 Jul 2024 07:04:38 +0000
ROA not before: Mon 22 Jul 2024 07:04:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 185.126.158.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 07:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:41:af:25:7c:16:15:63:22:07:a2:5c:32:4b:10:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jul 22 07:04:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e11c8dbcf8d2e8b835849899735f21d7a13b158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:03:bb:52:7b:13:cb:db:df:90:bc:26:22:
63:25:b1:c1:78:dc:00:b8:ec:59:2d:36:3a:ad:55:
4c:4e:0b:39:20:42:85:6d:dd:b9:76:99:44:40:3e:
60:ec:51:ee:53:1d:e5:84:27:e5:8d:2c:39:a1:12:
9b:f0:91:29:b8:9c:19:2d:80:ad:2a:af:b7:ae:5a:
da:45:15:39:f8:02:07:24:bd:bf:f4:38:b3:90:8b:
af:89:ba:77:e2:5f:46:85:45:70:2f:ba:19:b0:a3:
85:c2:c3:1c:94:7a:2e:2c:62:1e:3f:86:01:38:39:
c9:c8:6b:8f:d5:47:45:b2:1f:7b:95:83:5e:b0:cf:
29:e6:d1:c9:4d:0d:9f:3d:9d:ba:04:47:59:0b:b7:
42:f9:43:1c:1f:87:68:5b:ba:ad:73:ac:36:e8:a5:
ac:87:38:b1:55:f7:24:f1:3c:37:55:54:a7:d1:d0:
bd:ac:34:bd:ba:84:87:10:69:ba:c4:8f:59:6f:07:
59:4a:15:94:5d:46:ab:45:a3:e2:04:6f:e0:9b:80:
22:43:ec:0a:55:c7:f1:45:fb:f8:f2:9c:93:69:0b:
bb:f3:c0:ba:48:ae:41:3a:69:4e:09:93:ea:4f:0e:
b6:d8:60:63:3d:aa:ed:06:d8:72:10:63:df:33:3d:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:11:C8:DB:CF:8D:2E:8B:83:58:49:89:97:35:F2:1D:7A:13:B1:58
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/PhHI28-NLouDWEmJlzXyHXoTsVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.158.0/23
Signature Algorithm: sha256WithRSAEncryption
28:29:47:aa:0e:e3:f3:34:a5:2c:7d:1e:00:bb:d7:5a:47:07:
20:2f:f6:21:a5:3e:4f:8e:22:47:3e:b8:6b:60:b2:3a:78:47:
09:1d:92:9c:ee:0a:89:76:35:c7:f6:6d:58:07:27:48:95:84:
00:1b:49:e4:6f:4c:9a:bb:71:3d:38:89:bb:b8:8d:71:5e:0e:
5a:da:61:a0:ff:97:2c:53:e9:03:a3:8b:57:44:ce:8e:46:b0:
4b:df:7d:98:d3:85:b2:1f:ce:8d:a7:bb:87:14:d7:6d:c6:4c:
a8:90:e7:46:55:14:87:ac:77:c4:81:75:cb:5d:92:b9:19:ac:
8d:c3:a2:90:c5:6b:b4:ad:d6:8f:4c:b3:d7:45:85:b6:af:65:
24:3c:66:83:ae:fa:6d:af:f9:5b:c3:18:75:c7:3d:5a:f3:cd:
a1:77:6a:98:da:ae:d5:08:6b:6d:59:ab:ec:05:35:c0:74:cb:
f2:6d:dd:ad:0a:e4:e4:9c:13:0e:a3:3f:a6:86:12:86:17:66:
59:66:38:4e:84:18:62:34:3e:b1:02:fe:ab:2d:ac:03:86:1a:
f6:36:11:8d:b0:93:1a:ab:40:f6:fc:db:3b:3d:2d:ac:bb:a5:
a7:0b:91:3e:4f:61:b2:03:5e:22:f9:dc:10:3a:60:47:42:69:
ae:f1:02:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDZQa8lfBYVYyIHolwySxBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl
MmExY2EwHhcNMjQwNzIyMDcwNDM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTExYzhkYmNmOGQyZThiODM1ODQ5ODk5NzM1ZjIxZDdhMTNiMTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8kDu1J7E8vb35C8JiJjJbHBeNwA
uOxZLTY6rVVMTgs5IEKFbd25dplEQD5g7FHuUx3lhCfljSw5oRKb8JEpuJwZLYCt
Kq+3rlraRRU5+AIHJL2/9DizkIuvibp34l9GhUVwL7oZsKOFwsMclHouLGIeP4YB
ODnJyGuP1UdFsh97lYNesM8p5tHJTQ2fPZ26BEdZC7dC+UMcH4doW7qtc6w26KWs
hzixVfck8Tw3VVSn0dC9rDS9uoSHEGm6xI9ZbwdZShWUXUarRaPiBG/gm4AiQ+wK
VcfxRfv48pyTaQu788C6SK5BOmlOCZPqTw622GBjPartBthyEGPfMz0K3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD4RyNvPjS6Lg1hJiZc18h16E7FYMB8GA1UdIwQY
MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt
YTZjYTQ1NGRiMmQ3LzEvUGhISTI4LU5Mb3VEV0VtSmx6WHlIWG9Uc1ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3
LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX6eMA0G
CSqGSIb3DQEBCwUAA4IBAQAoKUeqDuPzNKUsfR4Au9daRwcgL/YhpT5PjiJHPrhr
YLI6eEcJHZKc7gqJdjXH9m1YBydIlYQAG0nkb0yau3E9OIm7uI1xXg5a2mGg/5cs
U+kDo4tXRM6ORrBL332Y04WyH86Np7uHFNdtxkyokOdGVRSHrHfEgXXLXZK5GayN
w6KQxWu0rdaPTLPXRYW2r2UkPGaDrvptr/lbwxh1xz1a882hd2qY2q7VCGttWavs
BTXAdMvybd2tCuTknBMOoz+mhhKGF2ZZZjhOhBhiND6xAv6rLawDhhr2NhGNsJMa
q0D2/Ns7PS2su6WnC5E+T2GyA14i+dwQOmBHQmmu8QLF
-----END CERTIFICATE-----
Generated at Fri Nov 1 08:52:59 2024 by rpki-client on console-ams.rpki-client.org