Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/Pgw9FngG55BWzh0RhylfxabYN34.roa
File: Pgw9FngG55BWzh0RhylfxabYN34.roa (raw, json)
Hash identifier: Kq2exKEy5wtLc2yjda3JS2yjN1SbE5ZHOnQOg4viTgE=
Subject key identifier: 3E:0C:3D:16:78:06:E7:90:56:CE:1D:11:87:29:5F:C5:A6:D8:37:7E
Certificate issuer: /CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Certificate serial: 018572FA89C802FF993F3416F0474D06023E
Authority key identifier: BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/Pgw9FngG55BWzh0RhylfxabYN34.roa
Signing time: Mon 02 Jan 2023 14:54:59 +0000
ROA not before: Mon 02 Jan 2023 14:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33918
IP address blocks: 194.6.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:89:c8:02:ff:99:3f:34:16:f0:47:4d:06:02:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Validity
Not Before: Jan 2 14:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e0c3d167806e79056ce1d1187295fc5a6d8377e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:eb:33:59:35:6f:db:e5:ff:45:82:46:a8:
72:92:4c:bd:43:df:cc:37:e6:99:11:d3:09:3e:9c:
ec:1a:2c:63:8e:bd:09:3e:37:7b:52:b1:3b:dc:77:
a3:5b:78:99:79:22:56:98:d9:fa:4a:f4:4b:93:f6:
fa:a9:42:9e:3c:50:fd:15:8a:96:82:fa:fe:51:4a:
3c:93:b7:d7:51:c3:82:18:d5:8a:66:ab:9e:72:11:
12:cc:c4:e9:21:fd:7a:b6:61:02:24:ea:c5:4b:02:
21:01:8a:05:57:3b:c0:c2:65:ec:b9:0e:8a:49:54:
fe:a7:ce:17:f3:75:83:fe:4c:19:5c:c6:13:6b:0d:
a5:c1:30:03:79:48:a3:51:24:23:d8:e1:c8:e7:74:
9b:dd:19:76:a7:51:75:49:a7:62:02:99:1d:e9:3f:
77:d0:e3:18:b4:49:44:d8:c1:65:6f:f9:e8:97:00:
7f:93:62:8e:13:8a:3f:e2:89:7d:8d:4a:4e:ea:a1:
56:02:77:be:1c:9b:d5:e1:3c:8a:39:b3:9b:7c:ce:
be:b8:31:42:87:8d:3f:ca:30:87:4d:f9:47:28:10:
1e:b2:43:a0:39:c2:12:9f:47:46:ea:43:d8:17:fc:
c9:f6:dd:81:18:68:23:be:a6:6f:f7:0f:b1:08:74:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0C:3D:16:78:06:E7:90:56:CE:1D:11:87:29:5F:C5:A6:D8:37:7E
X509v3 Authority Key Identifier:
keyid:BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/Pgw9FngG55BWzh0RhylfxabYN34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.242.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:14:a4:5f:a3:3f:39:c5:7f:8e:c6:b3:c3:42:ee:da:52:e3:
90:07:f4:7f:58:8d:f8:8d:c1:ce:c4:ac:87:c2:f4:49:f5:9c:
a9:39:68:f8:a7:cb:55:ad:33:a6:75:cb:23:ad:16:a8:d8:84:
ef:ff:b4:d7:b0:67:e6:6f:1c:8b:f6:ae:ac:81:ed:17:3b:16:
88:9c:ad:42:7c:db:a8:7e:e3:38:4e:2e:6e:2c:28:e0:ce:68:
d5:78:9d:ff:b6:0f:99:ec:ef:2c:c4:a6:c5:d8:d3:00:8b:3b:
ca:b2:6a:3b:ce:6f:9e:3f:71:6e:21:23:ba:6e:17:f3:c7:d3:
a7:18:34:d0:38:e3:a2:bd:83:69:99:81:0a:76:6b:46:13:0a:
fe:1f:d7:ae:55:38:ff:88:93:f5:a9:7d:3c:b7:5b:aa:0f:91:
2c:5a:d3:0e:40:e5:09:bb:d0:dd:bf:d2:17:42:bd:94:7a:2e:
bb:89:74:78:ac:8c:08:42:d6:f4:39:a3:58:af:2b:bc:c7:a5:
90:e2:cd:b0:f6:4d:66:f6:e0:be:50:fb:c0:7c:87:7e:0a:98:
9c:40:a1:35:7b:b8:d3:6b:1a:93:55:14:af:98:30:67:d8:02:
f3:71:01:83:0c:bc:97:cc:0b:f0:40:71:79:1a:19:a5:2d:03:
83:7b:f3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:05 2024 by rpki-client on console-fra.rpki-client.org