Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/PEhjbR6DCfrOhFEGW9OCnwO5sOE.roa
File: PEhjbR6DCfrOhFEGW9OCnwO5sOE.roa (raw, json)
Hash identifier: cNs/aM1joSV56b+5gER/ZuzCO95ws9n9seIg7565ZKc=
Subject key identifier: 3C:48:63:6D:1E:83:09:FA:CE:84:51:06:5B:D3:82:9F:03:B9:B0:E1
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 018CC2DB2E4D9742CD4730333A0632693A3C
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/PEhjbR6DCfrOhFEGW9OCnwO5sOE.roa
Signing time: Mon 01 Jan 2024 02:29:53 +0000
ROA not before: Mon 01 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20811
IP address blocks: 147.189.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2e:4d:97:42:cd:47:30:33:3a:06:32:69:3a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c48636d1e8309face8451065bd3829f03b9b0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:05:4f:42:40:87:fc:0f:05:30:2e:01:10:
90:4c:bb:38:fb:1d:ee:48:9b:a7:a9:a4:d0:36:d8:
26:b7:ef:a6:44:72:06:c2:a9:8f:5b:5a:bd:e7:99:
b5:74:02:be:1c:dd:8f:3a:62:42:eb:ee:8d:18:4d:
d3:0c:c3:22:e9:22:92:86:f2:ae:39:85:86:18:ef:
ee:9f:01:61:db:a6:1d:ba:cf:1c:88:a2:ef:25:af:
ac:16:fa:9e:cd:eb:59:e2:c4:41:18:49:6c:d1:40:
58:b8:23:ff:3a:fe:c0:58:2b:5d:80:f6:b6:c4:d8:
d6:69:c4:64:a0:6f:0b:5f:c5:07:8f:7c:a1:59:d4:
29:6f:3a:f2:3c:8f:5a:bb:e6:9f:d5:1a:88:30:c3:
49:4b:e8:f5:ab:71:6d:0b:e7:c9:5b:2c:25:09:ef:
b8:ad:a9:d8:0a:d6:13:e0:20:17:f9:84:1c:ab:21:
84:ac:b7:2f:89:2e:c5:03:cb:21:e3:88:07:83:17:
d3:33:a0:6a:07:e4:85:bd:a5:95:52:6d:62:c1:fd:
b0:f2:7e:f0:2f:96:45:be:7f:aa:d2:ed:2c:79:ab:
98:60:10:eb:2d:c6:c4:fa:a4:e4:7a:cb:90:80:62:
06:6c:20:3c:38:02:96:49:6b:45:5f:df:18:b3:cf:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:48:63:6D:1E:83:09:FA:CE:84:51:06:5B:D3:82:9F:03:B9:B0:E1
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/PEhjbR6DCfrOhFEGW9OCnwO5sOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.208.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:b2:f4:fa:88:ca:94:3f:94:ee:fb:96:43:7b:3d:8b:06:b2:
ae:fb:2d:46:b8:ff:47:9f:78:a4:f6:fc:40:be:d2:01:bb:0f:
cb:1f:5b:0c:9d:9e:c7:20:ce:92:14:da:36:24:e1:14:2b:ae:
f8:57:a9:72:36:c3:cc:51:d1:09:69:3f:e9:ef:fb:0c:b3:be:
38:e4:95:12:fd:07:33:85:ea:19:79:a4:34:d6:14:f5:3d:12:
f4:4b:c5:0b:31:87:4e:40:85:d2:49:6d:b0:91:0b:bf:7e:b1:
c1:b1:5f:77:b4:0b:ea:8c:b8:d2:42:10:93:e8:4a:a0:1c:19:
c0:76:c4:d1:84:32:02:db:a9:4b:96:51:ff:d8:9d:43:d2:60:
fd:d3:6c:c4:ff:d9:b4:ba:e0:46:43:0a:37:b9:a5:a4:6d:78:
5e:99:cc:cd:3e:8f:e3:1a:73:54:57:c4:1f:73:a7:f5:31:22:
f8:89:d4:70:7e:38:47:6e:2e:ac:a8:36:58:47:2d:43:53:ca:
bc:07:7e:9a:cf:d5:12:62:ba:f2:73:97:49:7a:4d:71:e9:35:
89:ef:45:38:f6:ae:5e:02:98:9c:5c:7a:d3:7a:07:b4:15:fb:
0e:6d:c8:04:db:1d:75:9a:85:1f:dc:99:e7:ab:cc:7c:74:38:
fd:78:e2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:27 2025 by rpki-client