Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Pmmjc8OZMM1GP05_9GMSOABcV-w.roa
File: Pmmjc8OZMM1GP05_9GMSOABcV-w.roa (raw, json)
Hash identifier: gTlsOb00+GBFRngQmdiwJN7zxqrMsFZ/K/TB+OPY6xI=
Subject key identifier: 3E:69:A3:73:C3:99:30:CD:46:3F:4E:7F:F4:63:12:38:00:5C:57:EC
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0188A78466F1755195F094FC0ED0605B1948
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Pmmjc8OZMM1GP05_9GMSOABcV-w.roa
Signing time: Sat 10 Jun 2023 22:54:12 +0000
ROA not before: Sat 10 Jun 2023 22:54:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 194.146.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 16:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a7:84:66:f1:75:51:95:f0:94:fc:0e:d0:60:5b:19:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 10 22:54:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e69a373c39930cd463f4e7ff4631238005c57ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b1:0a:cf:dc:88:18:e7:e2:62:a2:66:04:ee:
5d:78:51:17:76:b1:30:87:2d:ac:70:37:ed:f6:06:
90:96:dc:e1:14:e7:11:4b:7f:77:4c:a1:82:c6:58:
ce:82:4e:fa:af:d4:5f:57:b8:24:5e:4b:87:f0:6a:
6a:26:41:f9:f4:59:e7:09:1d:d3:5b:79:1c:76:fe:
73:a1:79:2f:44:24:3e:ad:92:15:dc:7d:9e:af:b0:
d4:60:4c:a3:c5:d5:7c:31:dc:11:c7:02:7c:14:08:
d0:38:0e:57:01:0b:ae:32:f4:2b:67:df:7c:8f:cd:
c4:d7:e0:89:30:ed:da:b5:ff:33:4f:31:69:d9:50:
9d:d5:36:36:4c:c1:c5:aa:e5:6c:03:97:ec:a9:13:
3e:83:08:c5:d5:c8:a8:7c:11:7f:79:7c:2a:ee:be:
da:10:1c:c1:ba:0b:c3:7a:f1:fb:73:e6:a1:2f:3e:
ab:af:e1:c3:92:43:fd:10:ff:84:e3:a4:7e:d2:0d:
3e:ac:7b:c9:32:8b:6d:e3:b6:86:40:eb:c9:31:e1:
45:16:ac:b8:53:29:75:b4:92:c3:9e:21:24:c9:ee:
98:f1:20:30:e2:43:9f:37:d1:ec:8b:df:1e:35:f3:
a2:5d:ba:cb:e3:19:53:7c:f8:68:3c:1c:74:2b:05:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:69:A3:73:C3:99:30:CD:46:3F:4E:7F:F4:63:12:38:00:5C:57:EC
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Pmmjc8OZMM1GP05_9GMSOABcV-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.92.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:6d:24:fe:1d:0d:45:eb:a1:f0:96:d6:75:a1:25:05:6c:78:
90:11:d9:ce:52:e1:ff:dd:d5:72:5c:be:f0:62:24:3a:55:3a:
56:dd:d2:fc:ce:a1:08:28:fd:dd:c8:13:6b:32:4b:eb:12:8f:
5a:d4:4a:a4:5e:93:85:50:3d:41:6a:40:1a:af:3d:95:44:a5:
66:36:2f:32:f2:8e:b5:2e:4b:99:37:a1:73:95:49:43:99:87:
ce:d0:7e:b4:31:7c:24:a7:aa:de:e2:b1:96:ea:f8:a0:13:ab:
62:2b:48:43:e1:ae:28:e4:6c:4c:f0:ac:fb:b7:2d:a8:e5:85:
0c:ce:0f:38:ce:4c:0d:56:39:ec:35:8c:31:e8:2c:bb:e7:72:
c2:62:4a:06:97:d8:a4:52:ce:49:08:da:c1:e7:69:35:36:12:
1f:dd:78:f8:29:34:e5:24:f2:f2:c5:70:23:f1:db:5a:78:05:
02:bf:84:45:3b:bd:24:5c:df:0c:23:57:ca:6b:50:3c:29:50:
3e:ad:d3:59:37:9a:ee:e8:9a:e4:da:88:3d:19:0c:91:87:d9:
73:49:d9:58:9c:54:0e:3b:41:97:22:97:94:09:0f:7b:d8:fb:
71:4a:b0:62:8c:aa:45:0b:71:a3:2b:db:a0:fc:f1:a0:07:d4:
fc:d4:ef:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org