Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/pvHiC0avr-pEE13rUV01M1hnl8I.roa
File: pvHiC0avr-pEE13rUV01M1hnl8I.roa (raw, json)
Hash identifier: kHLCKcIILe0I7j25BADw1ddfahg0Dr2chofY0Tz7UlY=
Subject key identifier: A6:F1:E2:0B:46:AF:AF:EA:44:13:5D:EB:51:5D:35:33:58:67:97:C2
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0185C9E9DA5405CD3BAF44A7D8AF78180D43
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/pvHiC0avr-pEE13rUV01M1hnl8I.roa
Signing time: Thu 19 Jan 2023 12:03:44 +0000
ROA not before: Thu 19 Jan 2023 12:03:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 89.46.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 08:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c9:e9:da:54:05:cd:3b:af:44:a7:d8:af:78:18:0d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 19 12:03:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6f1e20b46afafea44135deb515d3533586797c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1b:31:a7:52:1e:cb:86:e9:c8:43:a5:da:99:
ba:e6:cf:d3:4b:1a:e9:46:1d:04:34:2b:c8:f4:41:
96:f8:7f:a1:ee:64:65:4e:4d:b8:b7:68:a2:08:dc:
a4:4d:f3:e1:ae:db:9e:16:d1:9e:6d:6d:88:c8:36:
d8:14:dd:22:7a:20:35:f2:38:f1:0a:69:15:77:44:
99:c2:80:f5:1b:b6:21:15:f8:03:1b:a8:d6:f1:9b:
1e:94:fc:e0:64:68:c0:d0:ca:0d:16:d7:09:dc:54:
81:93:4f:16:f7:35:2b:64:23:23:c1:67:73:6e:86:
17:c6:05:44:dc:bd:b7:91:74:89:47:58:12:1f:27:
9f:45:3e:ab:55:59:95:74:67:07:a7:38:62:d9:fd:
36:f9:ed:44:74:0d:ac:d7:35:1b:1c:0f:22:41:d3:
c9:c5:60:3a:6f:a4:1b:3d:83:9e:38:ee:99:b9:b2:
58:90:f9:bb:4e:c7:af:17:65:79:76:fb:cb:a3:fc:
5c:a7:17:d3:4d:f3:e2:c2:fd:19:ea:8f:43:e4:c2:
7a:17:8f:d6:99:dc:c4:f6:52:fb:37:4c:ea:0c:8b:
85:1d:22:4a:d9:5e:96:af:68:c9:4c:c2:77:0f:c6:
52:93:ee:16:33:5e:e5:88:61:9c:4a:07:c6:d9:e2:
72:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F1:E2:0B:46:AF:AF:EA:44:13:5D:EB:51:5D:35:33:58:67:97:C2
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/pvHiC0avr-pEE13rUV01M1hnl8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.10.0/24
Signature Algorithm: sha256WithRSAEncryption
35:18:1a:20:20:c0:08:71:46:7f:90:02:8f:66:fc:39:dc:26:
33:88:09:61:1f:3d:c2:c7:e9:51:68:80:0d:47:22:09:b3:7b:
77:50:0f:b8:dd:d9:d6:43:0d:d3:49:72:b7:bf:10:dc:7a:ba:
24:c7:56:21:86:e5:49:af:cb:f3:91:b5:79:14:b0:bc:84:4b:
48:98:3c:77:f4:b8:37:a0:9a:30:12:41:c1:1e:96:2c:0c:1f:
56:72:6f:0d:36:32:93:77:75:e9:66:15:ba:5a:28:ca:95:9e:
e7:d5:be:59:5f:06:64:45:85:c9:86:12:16:07:38:91:ef:c1:
0d:08:b9:f9:ad:3b:7d:be:5a:a1:c4:c6:be:11:0b:19:26:2b:
00:0e:cf:4e:4b:8a:4b:ee:07:d2:66:a4:bf:7e:0a:62:58:3a:
3d:77:a5:0d:2b:e7:0b:eb:cd:54:82:fa:35:9d:ce:ca:8c:65:
8b:68:15:da:42:95:55:e2:4d:2d:89:64:c5:6e:33:16:a7:4b:
8f:0d:72:60:82:e0:b8:29:b1:49:b1:54:f2:d6:5f:d0:6f:3d:
32:2a:8c:9c:91:83:80:b8:04:09:c8:5a:d5:29:c3:21:da:f2:
eb:e8:af:a9:0b:89:f3:a7:76:2c:97:42:10:ba:e3:9d:66:e2:
f5:83:12:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:55 2024 by rpki-client on console-fra.rpki-client.org