Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/PLjQrQNSBok701kBsPIWkB_YpU0.roa
File: PLjQrQNSBok701kBsPIWkB_YpU0.roa (raw, json)
Hash identifier: DdcitKJdD4mXP5cj4q72aLodfGDQEv7rQ3ooOz7Z8Bc=
Subject key identifier: 3C:B8:D0:AD:03:52:06:89:3B:D3:59:01:B0:F2:16:90:1F:D8:A5:4D
Certificate issuer: /CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
Certificate serial: 01856F547E1E0B6049FEA9275C1245BF8C8D
Authority key identifier: 5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/PLjQrQNSBok701kBsPIWkB_YpU0.roa
Signing time: Sun 01 Jan 2023 21:54:46 +0000
ROA not before: Sun 01 Jan 2023 21:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211268
IP address blocks: 193.32.59.0/24 maxlen: 24
193.56.132.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:7e:1e:0b:60:49:fe:a9:27:5c:12:45:bf:8c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
Validity
Not Before: Jan 1 21:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cb8d0ad035206893bd35901b0f216901fd8a54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:20:e1:70:61:be:d1:06:e5:6a:5c:bd:bf:e8:
98:37:d5:d1:7f:e6:9f:72:6d:67:96:49:43:23:ab:
d4:6a:33:82:4a:0c:c4:b9:d7:9d:a2:66:0d:b5:39:
db:8e:da:36:f8:4b:66:e1:cf:f0:44:4f:fc:76:84:
af:18:f8:27:c8:55:1b:e0:f7:30:e4:3b:f1:91:a4:
4e:8b:27:f3:58:bb:ab:69:5b:6e:d9:26:84:64:9d:
d8:66:9f:69:e1:ac:90:b8:fd:6f:4d:9c:03:e6:a3:
db:0a:60:40:0d:a7:5e:76:c6:36:8a:5c:7a:3b:28:
83:bd:cc:e4:18:37:2a:14:8e:1e:40:74:79:7b:e4:
0a:05:5e:98:2f:48:8b:39:b6:23:ec:0c:4b:73:68:
0c:12:c9:49:76:2d:94:65:36:e3:2a:1b:01:97:65:
8e:26:84:11:b8:6b:b1:13:bb:1a:1d:69:8d:db:b4:
92:90:3e:3e:5c:ee:40:25:0b:4b:24:27:1a:29:be:
52:49:be:7a:78:bb:ba:97:95:6d:67:4a:b1:a5:e7:
34:b9:f3:98:d5:7e:54:0b:8f:2b:0a:8e:ed:62:e4:
3e:21:00:9a:1c:32:b0:eb:f9:ca:c4:84:c2:d1:27:
83:f9:0d:06:ff:4b:eb:d5:df:23:b5:36:5e:02:c1:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B8:D0:AD:03:52:06:89:3B:D3:59:01:B0:F2:16:90:1F:D8:A5:4D
X509v3 Authority Key Identifier:
keyid:5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/PLjQrQNSBok701kBsPIWkB_YpU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.59.0/24
193.56.132.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d0:5e:3c:b0:f6:8b:5c:e5:b8:d6:9a:31:2b:b4:30:fe:9f:
85:16:eb:90:78:67:3e:9c:c2:17:cc:6e:40:07:a9:94:ca:56:
5b:6b:7b:81:96:08:1b:aa:15:42:0b:bf:4b:9e:66:6c:c4:6d:
f3:2a:30:c1:e2:9c:bd:a5:bf:b3:dd:b3:72:a0:5a:86:4c:cc:
36:c4:2e:45:ce:32:b5:17:ce:3f:b5:2b:ce:32:0c:b0:64:d4:
c7:2c:0b:30:aa:33:36:49:cf:f2:59:3f:0b:c1:a4:5a:05:a6:
f4:e7:f7:d1:ce:fe:f9:d0:b5:90:bb:8f:49:c2:5e:d4:43:1f:
cf:9a:2e:e0:2a:5a:3c:5d:77:2d:5b:fd:9b:bc:33:b6:c5:f6:
e8:b9:8e:64:42:88:0f:a3:69:ec:35:a9:55:d9:47:c8:66:79:
60:83:8b:26:46:24:1c:9e:fb:aa:f1:87:42:ef:3d:fb:a8:a6:
5f:67:94:eb:b8:6d:d9:1c:e8:26:f6:05:86:2c:30:94:b0:0e:
e0:58:f7:6b:f9:bb:de:3b:a2:e3:ee:ce:01:93:05:f2:ef:8c:
46:31:b3:8e:e9:80:b6:42:02:fa:5e:78:b0:c2:05:f2:1c:18:
2d:ef:b8:24:3f:69:f9:84:88:75:e6:d6:ec:c2:69:6f:a4:cd:
63:53:59:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:46 2024 by rpki-client on console-ams.rpki-client.org