Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/PcHGPua-N83JbzBonGfB1uXrYJs.roa
File: PcHGPua-N83JbzBonGfB1uXrYJs.roa (raw, json)
Hash identifier: z2C9B5vvMGsmTZYwz2FUoL2Gf39u1F3zK8l4IFF5vWA=
Subject key identifier: 3D:C1:C6:3E:E6:BE:37:CD:C9:6F:30:68:9C:67:C1:D6:E5:EB:60:9B
Certificate issuer: /CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Certificate serial: 018572B4323A9630CE741850CFD98F3F3DC1
Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/PcHGPua-N83JbzBonGfB1uXrYJs.roa
Signing time: Mon 02 Jan 2023 13:38:09 +0000
ROA not before: Mon 02 Jan 2023 13:38:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210755
IP address blocks: 193.200.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:32:3a:96:30:ce:74:18:50:cf:d9:8f:3f:3d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Validity
Not Before: Jan 2 13:38:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dc1c63ee6be37cdc96f30689c67c1d6e5eb609b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:1d:b7:dc:a3:83:65:fe:e6:3a:b6:32:eb:
93:e1:d3:e9:73:b3:38:a3:bb:e4:07:2d:95:e1:10:
85:13:42:87:a2:cc:cc:bc:c9:0c:4f:24:96:49:cd:
6a:eb:b4:a0:2b:89:4b:f4:24:a4:35:ec:60:15:8e:
9e:9b:ca:41:9e:c4:c8:72:6d:0b:cd:1d:44:62:83:
4c:02:ae:3c:6a:e5:8c:58:d4:53:ac:90:11:7b:18:
de:c1:ed:a9:13:e6:8c:4c:de:20:68:dd:f8:e3:bf:
a3:83:c0:38:6d:52:ee:70:4a:2f:5e:b6:de:73:f8:
2d:82:4c:cd:ae:14:00:2f:1f:fb:97:d1:f1:08:fa:
0d:a3:bf:40:6f:2d:b3:87:fb:2c:f1:e1:3a:76:a7:
f9:6b:59:18:40:34:b6:f1:06:27:20:4b:dc:94:76:
b9:d1:19:8e:6c:9e:b3:41:96:99:be:0f:07:3b:cd:
d2:91:86:7b:1c:8d:88:4f:7f:36:31:77:f8:da:01:
42:ae:24:fe:69:e7:64:94:fa:d9:34:70:c1:d1:b7:
f6:a6:5b:97:42:96:f0:44:ae:ea:ed:30:c4:79:56:
fe:d2:ee:73:fa:bf:4a:1b:47:e8:bd:a1:a4:9b:59:
a7:31:ad:dc:62:7a:bc:56:50:52:4b:a9:63:1a:ee:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C1:C6:3E:E6:BE:37:CD:C9:6F:30:68:9C:67:C1:D6:E5:EB:60:9B
X509v3 Authority Key Identifier:
keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/PcHGPua-N83JbzBonGfB1uXrYJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.32.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:a6:12:33:49:47:84:97:35:eb:9a:2b:c7:47:c4:58:17:e2:
6e:bd:3c:22:ba:90:a7:60:9c:6c:ad:22:57:e2:eb:f2:95:c7:
c1:74:6a:bd:ae:c8:a8:c4:7b:32:ef:40:1c:d6:62:93:88:30:
65:ef:5a:d9:f6:82:12:8f:d0:d6:4f:67:40:72:d8:d4:2d:f6:
a5:7d:b0:97:81:70:be:9f:fd:a1:b4:8e:54:5c:7f:6d:8d:28:
5e:84:80:70:6d:21:81:dc:94:ab:3d:f3:11:fa:a3:e6:94:7e:
eb:03:c9:c2:a1:91:c5:9e:92:f7:ed:af:97:21:39:e0:e4:f8:
82:1a:c0:9b:90:87:04:c1:f5:63:29:a6:7c:03:41:47:9c:19:
99:4d:d1:f8:30:b3:17:6a:65:4d:56:fa:b3:f2:55:aa:f5:f1:
72:57:d1:a5:a4:dc:d9:d7:66:11:f9:f4:6e:74:3a:f6:dc:d8:
25:f4:93:1b:7f:62:28:2e:aa:eb:6a:5e:d0:33:b7:1b:65:41:
26:94:c9:e2:6f:dc:ec:32:75:41:07:b4:0d:a5:98:6a:b3:2d:
d0:7e:4d:33:c6:6f:39:44:42:2e:2c:f1:39:d7:ca:67:ac:16:
e2:40:4b:b5:56:b9:17:c2:fc:eb:2a:35:e5:f3:b2:fe:02:59:
3d:a6:84:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:03 2024 by rpki-client on console-fra.rpki-client.org