Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PAHVru_6JJr_lUdV40Em2hJGcJI.roa
File: PAHVru_6JJr_lUdV40Em2hJGcJI.roa (raw, json)
Hash identifier: Y9/dpfZ3zY6n/1WIT0rsCuSw9JnIsuZtQOFxQ7j3LLY=
Subject key identifier: 3C:01:D5:AE:EF:FA:24:9A:FF:95:47:55:E3:41:26:DA:12:46:70:92
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0187C2A7AE18748D95DE47D78A11540AC7FB
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PAHVru_6JJr_lUdV40Em2hJGcJI.roa
Signing time: Thu 27 Apr 2023 12:19:41 +0000
ROA not before: Thu 27 Apr 2023 12:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 188.255.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:a7:ae:18:74:8d:95:de:47:d7:8a:11:54:0a:c7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 27 12:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c01d5aeeffa249aff954755e34126da12467092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b1:0b:c2:49:cf:f2:30:d9:5f:c7:0d:52:9c:
4b:2d:9e:e9:db:9c:09:27:77:5c:3f:f1:72:62:e7:
bb:ed:f1:3b:21:67:10:89:0a:50:44:5c:ba:1c:2e:
4c:7a:47:5d:79:51:30:9e:21:84:77:7b:b2:f0:21:
12:4f:bc:7d:ae:6a:c9:58:8f:91:ce:4f:a3:6a:e1:
ac:8f:40:3f:74:97:95:38:91:51:db:66:41:bb:ea:
1c:cf:1e:eb:15:17:7a:0c:90:94:e4:cc:ca:cb:bb:
7d:32:29:24:38:5c:cf:6e:01:55:03:33:2d:91:07:
13:b2:35:20:53:ae:f4:a4:84:f7:e7:32:be:d4:18:
92:76:e6:01:b9:69:c2:9f:37:72:8c:fe:4b:ec:af:
aa:a6:67:7c:af:4f:ee:2d:07:7a:b0:d7:eb:72:58:
8c:1d:75:e9:5e:27:d7:f7:ff:9a:2d:eb:50:d8:32:
b0:8a:a9:7d:2b:e5:b6:7e:b6:19:29:c8:91:6d:87:
6b:f6:b9:dd:10:5b:62:8b:fd:5f:b9:86:5d:00:fa:
f7:62:7f:3d:87:65:95:5f:bf:e8:80:63:c9:92:95:
d9:26:5c:a2:2e:55:6f:78:f4:a2:c1:cd:c5:a2:77:
17:36:cd:db:44:f4:52:e7:67:7f:b5:ac:d2:0f:a7:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:01:D5:AE:EF:FA:24:9A:FF:95:47:55:E3:41:26:DA:12:46:70:92
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PAHVru_6JJr_lUdV40Em2hJGcJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.140.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:fd:28:5b:fa:bc:4a:6b:d9:10:74:af:0e:e8:d2:47:ce:d9:
44:20:dd:28:ce:e5:d3:00:5a:f7:94:0c:aa:bb:25:a7:4b:4e:
25:99:2b:44:ec:7e:ba:4f:41:ad:79:30:71:87:e1:1b:7a:82:
e3:ab:9a:6d:c0:51:a1:c8:8f:fc:c5:7e:1f:e8:8e:3a:f5:bf:
b5:ce:52:d3:58:ff:c9:19:96:ac:6d:a1:2d:a6:ed:54:43:59:
72:d4:94:40:aa:34:40:9a:a3:85:12:32:c8:99:29:25:10:39:
95:ff:38:36:9e:68:26:5d:63:f9:b2:57:85:c5:4a:b5:25:6b:
0b:e6:b3:f6:d4:e3:95:a3:8f:14:62:7a:8b:ba:18:3c:d5:ef:
f3:08:ef:da:a6:71:9c:7f:94:23:66:4b:b3:40:a1:19:bc:1b:
7d:17:cb:32:73:cb:92:20:ee:48:89:85:72:1c:7b:53:ad:a1:
2c:3d:87:de:ba:92:15:c5:77:45:21:4b:8f:70:73:b4:8f:bf:
60:d1:55:6b:78:81:73:7f:03:6a:52:73:18:b1:cb:ba:96:be:
dc:bd:58:cf:35:6b:21:7c:dc:43:2e:44:a5:41:4b:93:e4:29:
28:c4:52:a0:36:cd:02:5b:fe:28:2f:96:ae:93:ff:db:ca:53:
54:cb:e7:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfCp64YdI2V3kfXihFUCsf7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwNDI3MTIxOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzAxZDVhZWVmZmEyNDlhZmY5NTQ3NTVlMzQxMjZkYTEyNDY3MDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLELwknP8jDZX8cNUpxLLZ7p25wJ
J3dcP/FyYue77fE7IWcQiQpQRFy6HC5MekddeVEwniGEd3uy8CEST7x9rmrJWI+R
zk+jauGsj0A/dJeVOJFR22ZBu+oczx7rFRd6DJCU5MzKy7t9MikkOFzPbgFVAzMt
kQcTsjUgU670pIT35zK+1BiSduYBuWnCnzdyjP5L7K+qpmd8r0/uLQd6sNfrcliM
HXXpXifX9/+aLetQ2DKwiql9K+W2frYZKciRbYdr9rndEFtii/1fuYZdAPr3Yn89
h2WVX7/ogGPJkpXZJlyiLlVvePSiwc3FoncXNs3bRPRS52d/tazSD6fuOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDwB1a7v+iSa/5VHVeNBJtoSRnCSMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvUEFIVnJ1XzZKSnJfbFVkVjQwRW0yaEpHY0pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP+MMA0G
CSqGSIb3DQEBCwUAA4IBAQCK/Shb+rxKa9kQdK8O6NJHztlEIN0ozuXTAFr3lAyq
uyWnS04lmStE7H66T0GteTBxh+EbeoLjq5ptwFGhyI/8xX4f6I469b+1zlLTWP/J
GZasbaEtpu1UQ1ly1JRAqjRAmqOFEjLImSklEDmV/zg2nmgmXWP5sleFxUq1JWsL
5rP21OOVo48UYnqLuhg81e/zCO/apnGcf5QjZkuzQKEZvBt9F8syc8uSIO5IiYVy
HHtTraEsPYfeupIVxXdFIUuPcHO0j79g0VVreIFzfwNqUnMYscu6lr7cvVjPNWsh
fNxDLkSlQUuT5CkoxFKgNs0CW/4oL5auk//bylNUy+cq
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org