Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/PJlrxUI_pSJ8bRCR4Hf3J1jxccA.roa
File: PJlrxUI_pSJ8bRCR4Hf3J1jxccA.roa (raw, json)
Hash identifier: DaNtrKfTQpm5dY6UgsaNYwB+3L2KBumhmPaai/ilFZ4=
Subject key identifier: 3C:99:6B:C5:42:3F:A5:22:7C:6D:10:91:E0:77:F7:27:58:F1:71:C0
Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Certificate serial: 018E383CAFBACC315DAEFD900F0B2AB365A4
Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/PJlrxUI_pSJ8bRCR4Hf3J1jxccA.roa
Signing time: Wed 13 Mar 2024 14:34:44 +0000
ROA not before: Wed 13 Mar 2024 14:34:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29314
IP address blocks: 213.92.128.0/17 maxlen: 17
213.92.128.0/18 maxlen: 18
213.92.192.0/18 maxlen: 18
Validation: Failed, certificate revoked on Wed 12 Jun 2024 09:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:3c:af:ba:cc:31:5d:ae:fd:90:0f:0b:2a:b3:65:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Validity
Not Before: Mar 13 14:34:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c996bc5423fa5227c6d1091e077f72758f171c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:49:df:31:73:de:54:7d:d5:28:0f:2c:fd:
90:29:73:14:a7:60:35:15:e2:ec:aa:55:bc:d7:4f:
46:a8:16:18:b1:d4:29:85:fe:f1:8d:6a:63:77:8f:
30:1d:a3:d6:34:98:13:33:1c:24:4d:2e:29:bc:ed:
2e:93:3a:b6:2c:bf:a6:a8:ac:c1:3c:4b:3d:ad:b3:
91:86:47:49:04:00:d2:c9:49:8a:24:03:22:18:43:
75:cf:69:46:3f:1f:e8:7b:b6:bc:40:e3:46:98:ef:
d4:4c:48:e9:61:8f:b2:9f:fe:70:9a:8a:9b:3d:f3:
8a:d5:66:af:a5:a4:b4:55:f6:f9:fd:52:eb:c6:29:
f5:05:bf:8f:08:6c:26:05:0d:64:61:4e:71:62:69:
d2:7f:94:c7:c7:59:b4:7f:81:97:44:e5:a7:0c:84:
c6:e7:59:7f:97:df:3d:0b:d0:6e:26:b3:1c:82:dd:
a8:6f:fb:66:42:d1:06:17:56:9c:6b:2e:d3:90:a3:
92:cc:c6:f5:88:83:51:8e:9b:64:c6:79:e2:27:48:
f3:50:f0:eb:b0:e0:d8:07:31:4a:9e:55:33:d0:c3:
3c:a5:86:22:81:e6:19:63:32:f5:ae:13:75:45:4f:
42:bb:d6:18:e1:07:66:6f:7f:59:25:77:66:43:a4:
18:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:99:6B:C5:42:3F:A5:22:7C:6D:10:91:E0:77:F7:27:58:F1:71:C0
X509v3 Authority Key Identifier:
keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/PJlrxUI_pSJ8bRCR4Hf3J1jxccA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.92.128.0/17
Signature Algorithm: sha256WithRSAEncryption
02:94:c9:f1:86:43:07:13:7c:10:0a:81:88:91:43:3e:44:53:
c8:37:2c:aa:ef:4d:d0:75:e1:e8:03:f3:15:66:ca:58:3b:e6:
cf:22:2b:1d:ed:ee:a1:c3:f9:5c:dd:99:ea:39:51:3b:19:97:
6c:8a:de:44:cb:4e:7e:85:64:bb:ce:4d:bc:66:13:22:f5:e4:
62:a6:66:94:24:fb:7d:0b:9a:fa:e8:9d:e6:55:ab:d4:19:76:
3a:37:0b:e9:d9:65:06:0c:92:e7:09:0d:f8:30:41:ed:42:3b:
2d:c4:80:49:d0:5f:fd:e5:f2:56:16:6a:58:d6:e0:4d:96:2a:
81:2d:45:8e:c7:df:c8:0e:2a:b7:7c:ee:bd:be:20:54:93:81:
84:b4:ef:7b:21:55:1c:07:69:8f:2a:5f:ea:e6:7c:a0:4e:8c:
ef:47:55:b8:d6:40:c0:ff:e8:ef:de:08:73:40:f2:8b:49:40:
93:33:8e:67:a1:6e:5d:c1:b1:2c:1c:03:e2:fe:64:f8:95:d2:
9f:c4:4f:0b:01:98:96:b3:a6:0c:cf:a8:c4:34:96:eb:d2:3e:
b9:5a:f9:9e:9c:c1:14:ac:d5:2a:78:f2:69:60:4f:0a:0b:a3:
3b:69:98:1b:f6:f7:76:e6:99:7d:d6:d0:e6:8e:e8:c4:b8:de:
66:48:d7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 14:31:34 2024 by rpki-client on console-ams.rpki-client.org