Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/PtV-4iNJCoGg12tW_2V6Sy5sET8.roa
File: PtV-4iNJCoGg12tW_2V6Sy5sET8.roa (raw, json)
Hash identifier: VMGuMymtuCefiya2tY55uo3f5UODJyXHsymSX7fEdtw=
Subject key identifier: 3E:D5:7E:E2:23:49:0A:81:A0:D7:6B:56:FF:65:7A:4B:2E:6C:11:3F
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 01856E1459FD723AA9DB5BDF8CDB5A784CE0
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/PtV-4iNJCoGg12tW_2V6Sy5sET8.roa
Signing time: Sun 01 Jan 2023 16:05:05 +0000
ROA not before: Sun 01 Jan 2023 16:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8870
IP address blocks: 91.222.67.0/24 maxlen: 24
91.222.66.0/24 maxlen: 24
91.197.130.0/24 maxlen: 24
91.197.128.0/23 maxlen: 23
91.197.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:59:fd:72:3a:a9:db:5b:df:8c:db:5a:78:4c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Jan 1 16:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ed57ee223490a81a0d76b56ff657a4b2e6c113f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:58:70:3e:02:01:c0:d8:6e:9c:ba:36:a8:af:
01:ff:d8:77:91:e7:7e:cd:7e:29:e0:6d:c2:c7:21:
51:05:c9:03:2a:90:bf:53:e1:14:58:b5:d4:7b:c8:
b5:00:d7:16:31:64:af:60:e0:5c:df:49:27:53:20:
d1:61:63:98:86:90:78:a7:74:a4:7a:f5:84:ac:d8:
bf:4e:6f:51:db:3d:46:3e:90:ba:5e:d7:5a:6a:ff:
47:1e:24:c0:8d:00:b2:f4:9d:c6:ff:c3:26:b4:a2:
af:64:ab:3d:b6:d5:b8:03:98:f7:94:e1:21:02:53:
5e:f9:11:5e:82:2a:46:ad:21:6c:5f:a3:38:c4:0a:
93:b7:40:2c:52:95:a6:e0:08:c3:ed:25:4a:c8:f9:
7b:d8:9d:af:45:06:b2:e3:32:65:93:c3:b6:ea:a2:
fb:0f:f9:94:9e:66:dc:f5:fa:53:ca:a5:21:ef:a8:
13:8a:0e:4d:c7:c7:fb:9a:82:98:34:03:36:76:ea:
27:67:91:1a:85:bc:f4:d2:f7:9b:86:0d:c8:23:d6:
44:13:4f:b4:8d:bf:75:fc:a2:51:27:4b:e2:e4:cc:
db:b1:6f:f1:42:18:57:50:a5:39:77:d1:a0:db:91:
10:4c:02:28:36:d6:f3:1c:07:2b:67:ae:41:34:29:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D5:7E:E2:23:49:0A:81:A0:D7:6B:56:FF:65:7A:4B:2E:6C:11:3F
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/PtV-4iNJCoGg12tW_2V6Sy5sET8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.128.0/22
91.222.66.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:89:ba:15:58:27:bc:0c:08:a9:59:16:26:4e:40:c4:0f:b2:
85:49:6d:2c:2d:50:2c:03:04:80:c6:2a:42:e6:a3:ef:02:14:
00:16:6c:97:b2:39:a8:e2:31:07:27:45:ab:97:9a:80:a2:4c:
8b:b8:cb:6b:76:5d:80:59:8d:17:a2:20:21:2f:4e:69:d2:bd:
19:72:bf:c8:f8:d4:a7:cb:a9:e2:6b:18:aa:a3:1b:b6:fa:94:
2b:28:54:72:09:d9:18:31:de:34:89:f5:25:dc:57:55:ef:27:
23:8b:e3:e4:10:33:6e:39:45:e4:c4:47:5c:99:ca:57:f7:7c:
18:02:28:a6:20:3c:56:77:68:c3:ef:c5:6b:40:9f:43:e4:9b:
42:c7:c5:ef:1e:c5:43:1c:47:76:60:a3:6d:f8:6e:e1:d8:5e:
ce:9d:8d:24:f3:f5:e8:17:cf:68:27:d4:6d:c7:ed:33:12:5a:
47:5f:0c:97:04:f7:b6:e5:5e:ce:5f:87:f5:36:55:cc:6f:50:
b8:f4:4f:8c:92:20:ff:ee:9d:cf:e1:c6:67:4b:62:2c:6a:bd:
18:cf:27:5f:c0:f6:3c:0b:f5:05:2b:4f:3d:ec:2a:1d:0e:f4:
64:f9:e3:8b:e0:b5:d4:d0:b1:2e:2f:c6:f9:73:4e:47:3f:c9:
df:3e:cd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:20 2024 by rpki-client on console-fra.rpki-client.org