Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/PPhfPTd8sTjyPFIBM053SPRdTfo.roa
File: PPhfPTd8sTjyPFIBM053SPRdTfo.roa (raw, json)
Hash identifier: gxZGtRYVZkoGlhJkMnpnFIIUotReg6q0gyIjcNz0+BY=
Subject key identifier: 3C:F8:5F:3D:37:7C:B1:38:F2:3C:52:01:33:4E:77:48:F4:5D:4D:FA
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 01857169BCA5DADE2E2F8BD4FDBEF2FBD739
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/PPhfPTd8sTjyPFIBM053SPRdTfo.roa
Signing time: Mon 02 Jan 2023 07:37:13 +0000
ROA not before: Mon 02 Jan 2023 07:37:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197099
IP address blocks: 193.7.192.0/24 maxlen: 24
193.7.194.0/24 maxlen: 24
193.7.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Aug 2023 08:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:bc:a5:da:de:2e:2f:8b:d4:fd:be:f2:fb:d7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Jan 2 07:37:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cf85f3d377cb138f23c5201334e7748f45d4dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:64:c5:40:6e:3e:61:82:2a:48:e3:a7:87:28:
73:e5:84:ea:5d:d0:c2:9d:5a:ff:8b:28:13:f3:2d:
fa:54:ef:45:60:47:bb:b5:06:8b:6e:8d:24:dc:58:
0f:7b:9f:3f:66:7d:4c:56:ae:9e:dd:2d:20:9b:3e:
48:94:82:e9:11:71:e3:0a:fd:5d:6d:ee:d6:8f:fb:
39:c4:12:32:e2:b0:a3:37:6d:dc:b4:74:f6:c7:85:
30:28:26:f3:be:cd:94:3b:27:e0:66:58:97:f9:30:
1f:fc:91:33:3a:20:b5:02:63:db:85:58:b4:70:c8:
8c:4b:26:a3:d6:a9:32:ab:61:68:4b:29:94:33:f3:
55:ad:7d:ee:a6:9c:41:50:0e:1b:47:d6:ef:d1:08:
fd:23:bd:4c:a4:3b:2c:c5:06:e8:df:d6:36:b7:eb:
52:72:bb:c4:5f:f6:a2:58:dc:c0:8d:02:8e:9e:bd:
be:91:3f:97:82:cf:d3:05:33:ad:39:d5:40:e3:82:
c7:6d:b1:77:f7:59:80:e7:42:e7:4c:4e:0b:26:14:
43:4b:f6:e6:2e:b6:8e:2b:87:90:bc:c9:fb:4c:2a:
49:b9:bc:7f:48:75:2a:4d:e1:1c:0f:e0:3d:0c:27:
2c:21:bc:ff:86:c7:f8:23:0f:91:3b:73:a7:25:24:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F8:5F:3D:37:7C:B1:38:F2:3C:52:01:33:4E:77:48:F4:5D:4D:FA
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/PPhfPTd8sTjyPFIBM053SPRdTfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.7.192.0-193.7.194.255
Signature Algorithm: sha256WithRSAEncryption
07:7b:b3:a8:76:29:c9:b4:47:e5:0e:13:5e:49:b3:6b:d9:d4:
61:ad:12:96:94:c5:5d:56:dc:9e:8a:b9:de:39:62:11:89:31:
7e:1a:6d:8a:21:2d:f1:4c:c6:13:df:8b:59:5e:4c:23:05:15:
42:f1:8d:2b:1c:a1:a8:62:8f:37:de:6d:15:53:8e:f0:5b:af:
45:65:77:b4:83:4e:3c:24:b4:ce:5e:0f:ac:69:7e:84:15:e4:
e0:5b:85:d7:bf:92:d5:af:c0:93:1e:9d:7f:dc:51:be:73:d9:
f4:b6:53:c8:5d:11:a1:cd:82:de:91:97:47:81:dc:14:a6:8b:
03:ba:bf:0a:23:74:ba:88:23:60:1c:43:81:05:a8:79:06:db:
c4:13:fb:57:a1:e0:b4:36:a4:20:03:22:15:fb:5a:e9:dc:48:
69:43:86:ae:98:00:c4:e6:77:78:98:c5:78:49:60:07:8d:4e:
eb:c2:fa:60:5a:b6:e7:7b:45:07:73:59:62:b8:37:6e:27:2e:
13:15:12:ac:25:b0:c6:c1:b6:a4:68:71:7b:f6:ea:bc:32:0a:
77:bb:4e:d1:81:cd:74:fb:71:da:42:f5:a7:97:24:20:f0:db:
ad:d7:65:54:ff:e8:1a:da:81:df:ba:a6:3f:b7:db:c5:ef:1c:
a1:dd:39:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org