Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/PdvT49mtel__1nWCVgfgGPYa69I.roa
File: PdvT49mtel__1nWCVgfgGPYa69I.roa (raw, json)
Hash identifier: MHp2Vtl+JjIN8tIB4GoL5nLnDcCLOKuwMpqkJ0UOb0c=
Subject key identifier: 3D:DB:D3:E3:D9:AD:7A:5F:FF:D6:75:82:56:07:E0:18:F6:1A:EB:D2
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 01856ECB8EED2489F12078AC211D2CF8EF4C
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/PdvT49mtel__1nWCVgfgGPYa69I.roa
Signing time: Sun 01 Jan 2023 19:25:12 +0000
ROA not before: Sun 01 Jan 2023 19:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133944
IP address blocks: 160.19.92.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:8e:ed:24:89:f1:20:78:ac:21:1d:2c:f8:ef:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jan 1 19:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ddbd3e3d9ad7a5fffd675825607e018f61aebd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:80:a4:91:70:27:7f:29:8c:28:c2:ce:c2:
af:84:ab:02:ae:1d:3d:49:ee:2f:e6:8f:f2:56:20:
55:f6:ec:04:dc:c4:30:ad:9e:41:2a:8b:04:25:93:
a0:fc:e3:5a:47:d5:f2:2c:5f:dd:c9:08:3d:7e:8a:
01:14:58:f4:cd:f9:fa:82:b0:f1:13:4a:84:99:6a:
42:11:67:37:27:2a:96:15:70:16:fe:e2:10:45:ee:
b5:aa:0d:8c:7f:34:b5:98:8e:19:60:a8:57:d8:f6:
dd:39:71:c8:e0:76:4b:a8:1c:ef:be:67:87:bc:f2:
4f:ac:8a:2b:d9:da:1a:89:5d:b8:6a:2d:e9:69:ac:
74:f7:c3:15:7a:b8:50:fc:e3:b6:42:94:9f:ef:0c:
f5:00:ee:74:e7:20:27:4d:d5:a2:58:6f:8e:42:c2:
62:7b:f7:00:37:9f:b0:0f:42:8a:c4:27:ec:8d:a5:
0d:8a:54:43:0f:37:68:b7:4a:d7:bc:26:0a:70:51:
85:0a:f0:62:8a:51:15:15:bc:26:7b:9f:94:c3:a0:
05:2a:b2:1b:c3:6b:43:d4:b4:f4:dc:b0:f1:9c:4c:
c2:1b:a9:fe:83:d4:1b:fc:15:68:53:7c:b2:da:3d:
57:6c:da:ff:7a:fe:b6:29:98:c9:42:0d:37:da:54:
e2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DB:D3:E3:D9:AD:7A:5F:FF:D6:75:82:56:07:E0:18:F6:1A:EB:D2
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/PdvT49mtel__1nWCVgfgGPYa69I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.92.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:d0:a3:86:6c:1f:f4:14:f9:77:00:38:c0:56:45:4c:6d:a4:
33:72:a5:30:34:87:9b:e7:e2:d0:58:9c:dc:c9:e2:51:12:14:
e4:ff:22:a7:c5:f4:f7:08:ff:af:39:ff:75:37:0a:90:4d:d6:
49:fa:ee:fd:24:e1:5c:fa:c6:47:42:02:41:a2:65:05:c2:8a:
9b:26:44:fa:ba:c3:b8:19:5d:36:4e:75:ae:ca:f5:cc:41:ac:
e7:40:37:d8:b0:4b:18:e8:8b:de:7e:48:e3:11:35:e6:ae:17:
95:86:ed:78:75:ad:34:21:b8:0a:94:c2:81:07:f8:6f:9d:a4:
c2:72:d6:b9:24:8e:76:92:0d:01:89:8a:38:10:c8:5d:f1:66:
0e:b9:61:50:ad:c8:6e:c9:72:e3:1d:3c:e4:1d:01:b6:44:a3:
3f:2a:ef:de:8f:92:9c:d6:6a:1f:c8:10:12:46:f1:5d:e0:e4:
7c:f7:0c:cf:8d:82:5f:17:7c:69:8f:f3:c3:0f:c8:38:2e:b2:
a5:1a:81:4d:d1:8f:ee:3f:e1:9d:3a:6d:9c:18:d7:cb:7a:7d:
80:69:b5:c2:5a:77:56:fb:55:d4:52:d1:18:07:40:67:fd:2e:
f8:f0:1e:99:4d:42:60:e8:29:d6:78:0c:d5:71:61:4f:16:01:
ed:e6:58:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:44 2024 by rpki-client on console-ams.rpki-client.org