Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/pnsBfDH05Te5GTQmopHgCyDyyGg.roa
File: pnsBfDH05Te5GTQmopHgCyDyyGg.roa (raw, json)
Hash identifier: wi81sTdDec6H13969moNOnJbd0Oct53LKexWKIpWAwI=
Subject key identifier: A6:7B:01:7C:31:F4:E5:37:B9:19:34:26:A2:91:E0:0B:20:F2:C8:68
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01888C382ECC0851B46EB1E0BD9AC9450FCE
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/pnsBfDH05Te5GTQmopHgCyDyyGg.roa
Signing time: Mon 05 Jun 2023 15:41:12 +0000
ROA not before: Mon 05 Jun 2023 15:41:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207710
IP address blocks: 194.28.158.0/24 maxlen: 24
194.28.156.0/24 maxlen: 24
194.104.4.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
194.104.6.0/24 maxlen: 24
194.104.5.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8c:38:2e:cc:08:51:b4:6e:b1:e0:bd:9a:c9:45:0f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jun 5 15:41:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a67b017c31f4e537b9193426a291e00b20f2c868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:2b:77:70:eb:3e:b6:41:91:6b:dd:28:66:
79:83:23:d3:83:ce:83:1a:e8:41:d7:05:4d:40:97:
e1:fc:7a:e6:9e:e6:8c:09:9e:4e:08:90:03:f8:0f:
63:dd:47:ca:4f:ec:7e:88:3b:4d:a2:5f:ca:60:89:
44:4d:6d:41:6c:a7:16:b6:8b:40:fa:33:a1:54:5c:
bf:c9:40:a4:ab:d2:c0:63:42:da:78:d2:d9:89:40:
ca:46:04:99:d0:29:9d:03:a5:ae:6d:07:ee:b6:25:
76:99:06:c1:5e:de:50:55:8f:98:95:5c:2d:d2:77:
21:8c:19:a8:09:18:f5:93:9c:c2:80:09:3a:b4:f4:
99:1f:cf:11:c3:47:0c:a6:ee:bd:3c:90:6e:c2:d8:
27:a5:67:cb:a8:60:a7:f0:09:82:be:0a:97:34:ae:
27:e4:1c:6a:b9:93:2a:84:c2:5a:73:0b:de:9e:a0:
3e:13:f8:56:e3:ec:e8:70:93:8a:ef:ec:68:be:0f:
85:32:3f:91:95:dd:24:6f:1f:26:03:1f:47:5d:08:
dc:77:7c:52:67:d7:1d:10:62:bb:3c:fb:28:8d:42:
1f:63:fb:2a:84:ab:d4:bf:89:db:ba:e7:95:77:a3:
5d:da:58:3a:4f:40:f3:cf:5f:83:0b:93:31:22:48:
ec:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7B:01:7C:31:F4:E5:37:B9:19:34:26:A2:91:E0:0B:20:F2:C8:68
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/pnsBfDH05Te5GTQmopHgCyDyyGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.156.0/24
194.28.158.0/24
194.104.4.0-194.104.6.255
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
37:5a:0d:26:e0:9f:5c:fd:17:a4:b5:58:60:ff:1f:dd:1f:1c:
b1:20:2b:13:4f:b9:d1:4c:09:7b:66:c5:ef:b2:80:17:1a:ef:
03:b9:d4:de:e9:b3:8b:78:e4:d8:f4:ff:2d:32:2f:f8:d2:24:
3a:42:1c:0a:87:03:bc:a7:41:b7:78:cb:64:a3:01:fa:e5:4d:
79:c5:20:5c:32:22:c5:75:e4:7b:57:11:8e:a3:b2:8e:6e:ea:
b1:cb:c8:c6:6c:03:1b:16:7e:7a:ca:ba:52:c1:7a:7a:b6:55:
a1:0e:f9:d0:bc:66:7f:a6:5b:ab:10:5c:77:de:c6:d9:16:31:
15:14:a6:84:d8:6e:e3:03:8a:99:73:d8:07:b6:70:d0:8e:b0:
65:36:e6:c3:b8:68:b0:34:b7:c2:1b:86:1e:d4:85:25:df:b1:
2d:b6:74:d6:d5:c1:0d:10:dc:78:77:f8:29:a0:0d:4e:b1:b8:
3c:2a:5f:84:57:22:6f:c7:99:09:47:de:0f:3f:1b:56:a6:d2:
7a:16:61:ea:32:1f:5e:2e:16:f6:f9:7d:8f:c8:b9:69:4b:ba:
ef:29:98:bc:67:d9:d5:8e:4b:d5:2c:25:38:17:2e:22:24:b1:
6e:7e:4b:0c:19:8b:22:dc:e3:94:10:0d:d9:23:8a:fe:9b:7b:
92:41:cf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:39 2024 by rpki-client on console-ams.rpki-client.org