Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/PnMtBv0-BJypJL-1YrwtHMUAUL8.roa
File: PnMtBv0-BJypJL-1YrwtHMUAUL8.roa (raw, json)
Hash identifier: 4BI2bfxo9CV5U86Hwy6Js0NWZOxsnqtG7NtyD4Rzfu8=
Subject key identifier: 3E:73:2D:06:FD:3E:04:9C:A9:24:BF:B5:62:BC:2D:1C:C5:00:50:BF
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0188F738849749F26250D0F07F59F9EC015F
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/PnMtBv0-BJypJL-1YrwtHMUAUL8.roa
Signing time: Mon 26 Jun 2023 10:20:56 +0000
ROA not before: Mon 26 Jun 2023 10:20:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 109.122.40.0/24 maxlen: 24
109.122.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Nov 2023 05:45:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f7:38:84:97:49:f2:62:50:d0:f0:7f:59:f9:ec:01:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 26 10:20:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e732d06fd3e049ca924bfb562bc2d1cc50050bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:09:30:ad:52:32:d3:b4:8c:44:b9:e0:15:41:
fd:2b:f1:30:43:f3:aa:3e:51:06:fd:0e:4a:b1:e0:
61:01:46:49:79:44:b7:19:49:84:51:08:a1:ce:79:
ce:e9:e8:b3:d0:4b:c1:d9:15:4b:35:f8:c2:5f:eb:
59:b8:06:cf:6e:84:f6:9f:74:55:90:c5:c3:1e:05:
6e:01:ea:e8:12:2d:53:3f:f4:16:95:f4:a4:1c:6f:
1d:68:8e:a5:db:f7:1d:d6:10:23:1a:71:14:ac:0e:
af:e5:64:bd:3a:6f:ed:88:89:6f:82:dc:a4:df:db:
ad:38:a6:bb:17:c0:86:5f:ee:34:ab:2f:bb:75:af:
4b:5a:4f:c1:bb:39:34:90:11:e7:95:87:b4:72:59:
81:3c:d4:f2:7c:b0:79:de:96:cd:c8:be:5c:ca:0b:
29:f4:5d:09:f0:3c:88:24:12:e3:0e:f0:9a:b2:f5:
89:ad:e4:25:a2:66:c4:55:50:d4:0a:d0:08:65:3e:
45:ed:34:23:78:a8:17:93:81:ad:5a:64:38:9a:29:
26:1f:54:be:30:51:43:b3:3d:2f:1a:e1:48:98:65:
19:7f:bd:4e:bc:69:8a:59:40:58:75:b1:6e:c1:f4:
a6:43:7d:d6:d0:3c:f7:7f:29:ec:3a:fd:b2:ad:4d:
3c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:73:2D:06:FD:3E:04:9C:A9:24:BF:B5:62:BC:2D:1C:C5:00:50:BF
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/PnMtBv0-BJypJL-1YrwtHMUAUL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.40.0/24
109.122.45.0/24
Signature Algorithm: sha256WithRSAEncryption
72:74:00:af:73:a8:94:55:73:83:bc:b5:4f:92:2e:ec:83:34:
75:60:d1:cd:d4:13:69:0f:66:c3:c5:1d:17:7d:cc:b3:f4:85:
25:71:95:f7:0f:c9:13:65:a0:b7:63:ae:46:66:64:ec:93:3d:
26:6e:6e:1d:84:85:4e:e2:74:c3:6c:f5:9d:c1:00:5c:2e:7d:
ce:f0:4f:a1:20:33:31:ba:20:e0:6f:82:a8:05:52:8f:96:50:
3a:8d:2b:5f:34:92:94:db:f0:0d:b9:30:83:ee:30:28:86:88:
9a:35:67:ca:9b:cc:af:07:a9:ea:da:7c:24:ed:7e:22:2b:2b:
c8:db:fa:bb:e4:be:e6:4e:75:b8:31:4a:55:e2:58:ce:06:ce:
d2:96:01:c7:3d:ae:16:eb:ae:56:95:62:17:b1:d1:76:87:5f:
e7:1c:71:25:82:95:10:9b:ab:aa:ec:30:11:65:67:50:be:c9:
ca:7e:3d:54:34:a5:6b:7b:be:82:5c:8a:fd:07:96:9c:36:b0:
c9:95:a6:c6:32:48:fa:fc:1f:65:19:f2:7a:f7:26:86:55:f5:
ab:c0:79:6f:d4:82:35:9a:d5:61:47:f5:16:34:ec:54:89:ba:
40:4e:ac:62:ae:98:4c:b2:55:14:37:92:65:c8:e2:ec:ad:4a:
af:7a:62:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org