Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pnw2o4yr3TzR5MVDBLHliL5mNmc.roa
File: Pnw2o4yr3TzR5MVDBLHliL5mNmc.roa (raw, json)
Hash identifier: +9h6KttXbw0TPH47NOdoTiEIkF2wLD9CSNvd95d2DsY=
Subject key identifier: 3E:7C:36:A3:8C:AB:DD:3C:D1:E4:C5:43:04:B1:E5:88:BE:66:36:67
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018713799107117CAB68AA0C2263D95F3837
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pnw2o4yr3TzR5MVDBLHliL5mNmc.roa
Signing time: Fri 24 Mar 2023 11:55:46 +0000
ROA not before: Fri 24 Mar 2023 11:55:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 212.69.10.0/23 maxlen: 23
178.253.237.0/24 maxlen: 24
109.121.0.0/19 maxlen: 19
Validation: Failed, certificate revoked on Wed 21 Jun 2023 07:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:13:79:91:07:11:7c:ab:68:aa:0c:22:63:d9:5f:38:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 24 11:55:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e7c36a38cabdd3cd1e4c54304b1e588be663667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dc:f6:1d:73:a5:38:62:c4:f8:72:44:88:65:
bd:9c:b0:e6:68:7e:2b:16:f9:a6:c7:3e:79:fe:39:
c6:fc:55:a4:6d:a0:fe:cc:12:e6:cc:35:fa:8f:0e:
ce:2a:9a:cc:e8:93:b4:99:d2:2a:29:95:ca:d7:80:
82:64:d3:ce:30:5a:8a:b4:7d:25:6e:c2:21:90:48:
e5:71:2d:20:e3:fd:d6:36:90:46:e2:66:14:59:ae:
4d:42:e1:24:56:5c:05:9d:1c:19:52:ba:06:50:8d:
f6:c4:1e:67:65:4a:eb:c3:b7:b9:f9:4d:fd:fa:dd:
56:2c:d2:26:d7:d0:1a:52:f4:32:fa:88:e1:37:2e:
9e:e6:8e:ad:40:4e:9a:b4:4d:0b:8b:f3:7e:17:bf:
04:76:06:5a:a9:33:da:38:13:20:47:d3:47:41:2b:
3d:34:63:b7:2c:dc:10:81:9b:9b:46:d0:03:a4:88:
da:bd:5b:ff:c5:37:35:69:6d:48:7e:0a:88:5e:0f:
2e:98:bc:17:b6:53:69:e7:4b:2e:8e:11:98:b1:74:
83:8c:33:2a:1e:3f:8c:76:eb:37:60:33:b5:d7:7b:
d7:32:c6:3d:42:e2:98:dc:1d:76:c3:9e:ce:86:16:
66:eb:62:3b:38:fa:ea:92:44:a7:d3:b6:ce:91:ae:
bd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7C:36:A3:8C:AB:DD:3C:D1:E4:C5:43:04:B1:E5:88:BE:66:36:67
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pnw2o4yr3TzR5MVDBLHliL5mNmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.0.0/19
178.253.237.0/24
212.69.10.0/23
Signature Algorithm: sha256WithRSAEncryption
84:4a:bc:a8:32:b2:99:ba:5b:0b:97:0c:d9:b9:d6:1d:3c:9b:
28:f9:88:55:38:9a:fe:6c:4c:7a:a7:b5:b7:66:5e:d4:bd:c0:
ee:ef:2c:ab:d2:d4:c3:25:97:1d:1d:c6:59:90:5f:78:c5:8e:
5f:14:aa:38:a7:ad:c1:64:46:58:2b:a2:d5:63:ae:e1:52:17:
97:6b:28:fd:ba:76:5c:ad:5b:42:ac:b0:ba:18:6b:e8:e2:ab:
6e:c8:6f:db:9b:af:eb:20:ed:66:8b:81:87:c0:35:4c:c4:99:
b8:73:ec:c8:5d:9e:5d:b3:ef:14:bf:4c:8a:74:b3:a7:12:88:
d0:f2:57:f0:6c:13:e8:c4:71:fd:73:f9:e2:40:60:c2:b6:3c:
c0:de:64:93:64:8d:0d:f9:4c:d1:40:3d:d5:cb:75:f0:5f:26:
0a:5d:13:70:8a:dd:7d:f3:d7:3d:b9:49:d1:ac:50:f7:85:1d:
a3:93:ee:9a:9e:fe:e4:13:9a:c5:2d:73:92:b8:3c:84:21:35:
e9:a8:3f:f9:83:f7:bb:e7:6a:80:a4:f5:99:20:04:cf:f5:10:
90:4a:02:ba:86:fa:5b:95:ca:dd:42:34:ca:a1:17:7a:2d:b1:
63:0e:77:24:5d:fd:50:6e:5b:1f:c5:04:a1:ea:35:72:d5:76:
26:38:3c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:04 2024 by rpki-client on console-ams.rpki-client.org