Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/PNvn-jAGCbp17QLob4r7h5Hr3Js.roa
File: PNvn-jAGCbp17QLob4r7h5Hr3Js.roa (raw, json)
Hash identifier: PXqUq9WIvsVgw/k6vrF7C4K7g09iapQPQVaiHrDIWqA=
Subject key identifier: 3C:DB:E7:FA:30:06:09:BA:75:ED:02:E8:6F:8A:FB:87:91:EB:DC:9B
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01856F42D4FF88F6291132F61E099828F8C8
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/PNvn-jAGCbp17QLob4r7h5Hr3Js.roa
Signing time: Sun 01 Jan 2023 21:35:28 +0000
ROA not before: Sun 01 Jan 2023 21:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208763
IP address blocks: 2a0e:8f02:21a0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d4:ff:88:f6:29:11:32:f6:1e:09:98:28:f8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 21:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cdbe7fa300609ba75ed02e86f8afb8791ebdc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:30:24:c5:10:42:c5:2b:63:d0:54:72:1a:43:
49:db:4c:1b:2c:55:62:48:e7:b8:b6:b6:d2:e6:04:
7e:36:7f:21:da:14:49:97:57:5a:5b:68:d4:9a:90:
4a:ef:68:0f:2f:92:3f:fd:38:76:28:c3:9a:e4:e9:
62:ac:85:a2:4e:7d:6b:68:f2:15:57:72:df:cd:ab:
95:ff:54:f4:88:dd:ab:04:01:50:75:85:7a:75:61:
f4:47:4f:61:78:ef:65:72:3d:63:8d:05:de:19:4e:
a9:95:b8:96:e8:7b:5a:67:c5:9b:27:e5:db:29:84:
5d:58:19:03:c9:e4:92:a5:28:0d:2b:60:43:fd:5d:
ac:6a:1f:cf:e0:79:5b:34:32:61:00:51:53:a4:07:
94:ff:d7:fc:a7:dc:39:03:6c:d9:e7:26:d3:41:77:
bf:ce:6f:1e:d6:b0:b8:aa:ae:ae:95:d0:57:e1:9c:
ff:27:c9:e5:13:f5:61:9f:f9:5a:2b:7d:d2:75:91:
fc:91:e4:d6:a1:3c:9a:c2:43:ba:d0:29:33:8e:63:
a7:0b:7e:70:14:e9:76:22:e8:95:84:b5:3b:c5:6c:
55:7c:8f:8c:b3:2c:d8:f8:1e:36:22:cb:53:d7:cd:
08:60:f8:50:06:cd:cb:a0:fa:f3:8c:b5:56:10:14:
45:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DB:E7:FA:30:06:09:BA:75:ED:02:E8:6F:8A:FB:87:91:EB:DC:9B
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/PNvn-jAGCbp17QLob4r7h5Hr3Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:21a0::/44
Signature Algorithm: sha256WithRSAEncryption
35:40:da:d6:6c:59:2e:40:7d:71:04:89:80:55:34:cb:84:19:
63:64:fd:d4:f4:a4:45:33:dc:1b:33:41:83:c2:c1:6e:5c:29:
b5:42:42:4d:53:77:0f:26:8e:90:88:be:71:9a:36:94:cb:1d:
28:06:1d:56:fd:f6:80:84:3b:2f:cd:b2:74:0a:d6:6c:0b:ab:
73:ea:fa:35:45:e0:f9:45:a6:d8:b3:a8:5b:24:c1:97:6b:c8:
9d:cc:1b:9c:19:72:f0:ed:64:f4:cf:3f:f7:35:e1:4b:0e:3a:
ae:93:3e:a1:10:e8:1b:19:30:cc:c5:6e:5c:a1:a0:30:15:62:
14:1b:95:54:c6:a4:f9:31:ea:5e:bc:67:ee:bd:4e:ae:4f:12:
19:80:85:3f:49:18:1a:09:eb:25:9a:5e:ef:e2:92:35:05:af:
89:ff:cf:25:f6:b1:cf:63:33:3e:e7:b8:a2:38:4d:2f:ac:40:
9f:e4:ab:10:10:9c:72:fe:b1:90:fc:61:ef:60:cf:4d:8f:b2:
80:12:1e:22:d7:d4:14:bb:2c:76:74:7b:f2:49:db:33:22:24:
c4:14:a8:fa:04:f7:ab:73:6e:3f:6d:26:2a:56:13:19:15:e2:
90:1d:6a:b1:51:f5:be:0c:a2:6f:8b:26:9d:68:47:b4:da:da:
72:4e:d2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:52 2024 by rpki-client on console-fra.rpki-client.org