Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-PCQ68JPw9Ns7Uh3mh6Eg8TlS9Y.roa
File: 1-PCQ68JPw9Ns7Uh3mh6Eg8TlS9Y.roa (raw, json)
Hash identifier: Nsk2Atx0Tau15z5LlMkqmvOQtJd0OZ5Np83viRITydc=
Subject key identifier: F8:F0:90:EB:C2:4F:C3:D3:6C:ED:48:77:9A:1E:84:83:C4:E5:4B:D6
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D7A931B10FDB0DD12F9068C9D470C599E
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-PCQ68JPw9Ns7Uh3mh6Eg8TlS9Y.roa
Signing time: Mon 05 Feb 2024 18:41:17 +0000
ROA not before: Mon 05 Feb 2024 18:41:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 2.59.48.0/24 maxlen: 24
45.14.221.0/24 maxlen: 24
94.158.188.0/24 maxlen: 24
194.32.240.0/24 maxlen: 24
195.69.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 18:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7a:93:1b:10:fd:b0:dd:12:f9:06:8c:9d:47:0c:59:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 5 18:41:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8f090ebc24fc3d36ced48779a1e8483c4e54bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:9e:1e:13:9d:71:db:fb:73:e0:99:b5:24:
47:7a:3e:3b:20:ec:6c:ec:63:35:c5:f4:d3:aa:49:
60:79:4c:f2:e7:ec:22:62:46:c4:83:d4:84:8c:94:
cb:72:22:a9:3b:38:92:b3:c7:54:34:c0:02:29:c2:
29:fb:eb:74:41:b1:ba:71:39:49:3a:36:b8:77:cd:
03:e5:c9:34:f0:b9:a6:60:a2:45:1f:b8:6b:b2:09:
b3:07:8d:8c:af:c9:ef:9a:ea:f7:ee:c7:1e:7f:fe:
ce:ac:38:71:46:30:3a:28:c2:e0:52:62:32:89:68:
23:d7:74:ed:0b:59:38:4f:f5:16:dc:07:3a:79:42:
16:c8:aa:29:f4:01:bf:a3:f9:0b:7f:f4:4a:ca:39:
a4:22:d2:fa:68:18:3a:5e:13:8b:76:06:24:8e:72:
5c:d4:67:a0:56:85:17:54:35:34:49:8c:7d:66:a1:
e8:65:ab:79:39:eb:79:4b:3e:24:c4:f5:5e:e4:63:
92:d3:12:9f:cc:6f:d9:ff:53:20:d1:13:88:f5:e2:
6f:40:44:95:6d:55:0a:4b:66:d2:5a:99:fb:34:3a:
cc:cb:0d:e9:5c:20:75:04:58:91:f4:c5:a8:f6:3b:
1f:86:90:ad:eb:18:2e:ec:1f:fa:16:04:6e:55:c6:
94:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F0:90:EB:C2:4F:C3:D3:6C:ED:48:77:9A:1E:84:83:C4:E5:4B:D6
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-PCQ68JPw9Ns7Uh3mh6Eg8TlS9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.48.0/24
45.14.221.0/24
94.158.188.0/24
194.32.240.0/24
195.69.148.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:33:05:ba:40:74:b7:71:68:58:46:a1:55:cd:1b:e3:5b:03:
a3:36:72:df:c5:25:3d:f6:f5:a1:0a:be:73:ba:b7:10:75:37:
41:b6:0b:5d:9b:be:6b:9c:8f:aa:e0:ff:85:5e:88:39:3f:f5:
13:cb:16:40:17:fe:5c:60:9d:65:60:9e:c0:d4:8d:e6:c7:ab:
aa:0a:c7:be:5c:39:b5:48:ce:86:07:13:5a:34:82:99:08:f8:
34:9a:3c:6a:72:83:22:e3:bc:1c:11:d0:fe:b1:1f:13:68:bf:
a5:f3:54:50:20:b5:60:7c:50:74:d9:05:3e:4d:2d:ba:4d:42:
7c:a0:ea:69:9f:a0:28:ff:e8:b4:68:6e:08:51:71:08:2d:b1:
6d:b9:3b:31:af:a8:e2:14:23:69:08:56:a6:48:ec:5a:12:c5:
28:21:08:ae:36:1c:0c:6d:01:ff:37:c2:8a:e2:fa:a4:a1:9d:
73:33:7a:57:d2:33:99:56:af:e2:ae:e4:ef:8d:38:7f:21:18:
bb:21:29:a1:29:52:46:c8:a3:35:9d:5e:45:c0:fc:a8:df:3e:
27:ef:05:f7:a6:5e:44:58:e0:68:da:0a:a6:45:74:00:36:c4:
9c:b5:08:6a:94:b9:7a:5a:38:47:3a:74:be:42:42:b5:0d:55:
b1:bd:ea:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:48 2024 by rpki-client on console-ams.rpki-client.org