Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/PgJ8tqaFeuUPDhzuUoqNsqdB_Ho.roa
File: PgJ8tqaFeuUPDhzuUoqNsqdB_Ho.roa (raw, json)
Hash identifier: kpWapWidylOCEfajAabtRPXRXA/LlygLj6E8EleKbXQ=
Subject key identifier: 3E:02:7C:B6:A6:85:7A:E5:0F:0E:1C:EE:52:8A:8D:B2:A7:41:FC:7A
Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361
Certificate serial: 0191BEC4530EF157359AA105A3A5DB02CD24
Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/PgJ8tqaFeuUPDhzuUoqNsqdB_Ho.roa
Signing time: Wed 04 Sep 2024 20:40:22 +0000
ROA not before: Wed 04 Sep 2024 20:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57219
IP address blocks: 176.97.48.0/24 maxlen: 24
185.144.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:be:c4:53:0e:f1:57:35:9a:a1:05:a3:a5:db:02:cd:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361
Validity
Not Before: Sep 4 20:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e027cb6a6857ae50f0e1cee528a8db2a741fc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b7:e8:dd:09:2f:08:07:6c:c4:a2:44:0f:16:
ec:af:ec:00:2e:18:dd:7a:d1:e8:17:10:1a:f2:4f:
85:36:77:6a:15:ee:f5:cd:95:59:5e:42:f8:c1:3a:
d6:6c:d5:86:49:2a:e1:e2:57:2d:80:48:9b:8a:8a:
ae:d5:f2:8c:4b:90:cd:49:b1:e7:bd:2b:87:81:97:
e5:b5:9d:8b:5a:5e:3b:ee:69:51:4b:fb:45:f9:04:
dc:ca:78:bd:7f:e6:5e:8b:d7:95:90:07:dd:a3:cc:
3f:85:0b:88:d1:f9:79:01:96:7f:64:3d:47:a4:e0:
d0:50:01:7b:6d:ca:97:52:4e:7a:d3:c9:a4:5f:13:
3f:61:e6:71:e3:23:1a:9b:c0:cb:71:bb:9d:99:b3:
00:b9:4e:ac:6d:0b:6a:56:ea:7c:01:b2:7c:b3:7a:
0d:71:7f:12:5f:fd:19:4a:b8:84:4a:42:70:c8:2d:
79:ad:77:14:77:21:45:19:1d:92:36:94:a5:c6:1b:
a9:f5:3f:73:f8:81:e1:b7:2d:b5:73:f9:c3:01:ef:
c6:ca:ae:e8:a6:ad:fa:cf:86:78:da:5c:d8:da:49:
49:c7:40:fc:ab:8f:37:5e:a5:7f:6b:aa:b1:02:f1:
fe:c3:88:b7:d8:26:63:7e:39:e7:71:1d:1a:22:3d:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:02:7C:B6:A6:85:7A:E5:0F:0E:1C:EE:52:8A:8D:B2:A7:41:FC:7A
X509v3 Authority Key Identifier:
keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/PgJ8tqaFeuUPDhzuUoqNsqdB_Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.48.0/24
185.144.113.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c1:b8:a2:85:3e:cc:fe:c2:80:0a:1a:36:64:6f:24:54:5f:
b0:ba:2a:64:87:11:65:78:ee:cc:ae:90:46:63:93:c9:a5:7b:
a6:1d:80:64:9a:b5:dd:42:4d:1f:e6:a3:5b:a6:91:8e:64:73:
77:13:fe:85:d4:1d:63:1b:87:46:17:7b:6e:9d:c9:07:a2:4d:
84:f7:9e:5e:6c:aa:35:2a:0c:5b:f3:1a:06:24:fb:a9:87:18:
2f:13:85:4e:e1:f9:f9:87:0d:8f:08:4f:6b:48:91:53:44:dd:
78:67:a4:fb:3d:f4:ad:a3:ca:37:19:6f:8b:63:e7:d3:fb:a2:
c4:20:c0:ec:c4:30:39:b2:1b:bb:1d:2f:0e:b6:0a:8e:ce:1d:
9c:73:71:9f:ec:4c:cc:23:7e:34:7f:8e:19:9e:4b:2a:1c:16:
ee:b6:75:d1:26:29:e6:67:5a:29:c2:a1:1b:09:aa:5b:0d:10:
7d:1d:55:5d:55:10:cf:5e:33:a4:4f:84:4a:6d:a9:5c:1c:73:
74:09:6d:d5:f7:d0:7d:8a:17:ec:27:99:fe:cc:10:b1:dd:ef:
f6:0c:af:2b:16:ed:b4:0a:f7:34:73:21:a5:14:ba:ff:ba:17:
5b:33:a4:75:52:44:ee:26:69:ef:99:f6:44:69:7d:e5:4e:98:
2c:75:62:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:06 2025 by rpki-client