Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/PDINSplE9ANOyMG46OMtvyPogjQ.roa
File: PDINSplE9ANOyMG46OMtvyPogjQ.roa (raw, json)
Hash identifier: TPxLQq5qAmk8sXL7d0P3xuKPcKDRhTGWmV2qZyI9HP4=
Subject key identifier: 3C:32:0D:4A:99:44:F4:03:4E:C8:C1:B8:E8:E3:2D:BF:23:E8:82:34
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 018B03CF5F7DD6E16E40ADDAFACEE51B1273
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/PDINSplE9ANOyMG46OMtvyPogjQ.roa
Signing time: Fri 06 Oct 2023 07:06:43 +0000
ROA not before: Fri 06 Oct 2023 07:06:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.160.102.0/24 maxlen: 24
193.160.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:cf:5f:7d:d6:e1:6e:40:ad:da:fa:ce:e5:1b:12:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Oct 6 07:06:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c320d4a9944f4034ec8c1b8e8e32dbf23e88234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:2a:88:d3:59:c1:dd:c4:d8:70:50:4e:2b:
ea:a4:71:8c:c7:be:c2:85:f1:b1:7e:a9:89:c9:4b:
a1:b1:19:c4:93:48:ae:d8:51:8f:d6:a5:06:55:c3:
37:93:b1:de:d7:a8:ac:6a:be:03:f5:8d:c4:6b:a5:
48:1b:c9:5a:3c:98:fd:98:2d:5d:05:c4:95:de:63:
73:85:ed:9e:19:9d:4e:18:db:eb:c4:ea:74:43:b4:
d5:e9:0f:86:c0:30:7e:96:6d:ea:83:32:8f:cf:9a:
79:f2:06:fd:95:cd:d5:c0:1b:b3:33:4a:4c:90:e1:
cc:d9:41:f3:2b:b8:52:d8:18:73:8a:66:6a:33:b3:
c5:01:0e:51:5f:ad:9a:86:4e:8d:c8:70:8e:d6:a0:
3d:b2:20:a8:0a:e2:0a:32:72:5b:e8:f5:e0:75:f9:
5d:5c:11:da:34:1f:7e:95:88:cb:db:7f:ec:fa:6e:
0e:f8:65:40:26:d1:26:59:0b:d6:fd:de:f3:1c:d5:
19:1c:f1:9c:1b:b8:d1:a5:09:8d:5e:64:3f:e6:a5:
cc:6d:c0:0a:5d:48:d4:03:fa:80:a3:fb:57:f1:d7:
bd:02:2d:58:69:47:7c:71:d3:1c:78:41:36:c4:d2:
b4:66:90:22:b2:20:a9:a1:91:5b:57:14:39:dc:b4:
df:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:32:0D:4A:99:44:F4:03:4E:C8:C1:B8:E8:E3:2D:BF:23:E8:82:34
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/PDINSplE9ANOyMG46OMtvyPogjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.102.0/24
193.160.113.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e6:27:8f:c2:32:9f:bb:85:f3:d0:a7:6d:2b:78:f1:83:d2:
0d:87:5e:39:82:a3:cf:4d:a3:e8:c6:31:9a:30:45:08:bf:d4:
fe:77:b4:31:c1:e6:93:8c:b8:8f:cf:42:9b:95:6f:09:46:cd:
88:fa:79:5c:ff:a8:ee:47:91:f9:22:7b:ce:de:2b:6d:f3:e5:
5e:28:c0:7b:22:51:df:a7:71:90:ec:3b:de:e8:b5:e3:d4:04:
b6:c2:f3:cb:e1:d5:2b:cd:c9:5d:fd:a5:f5:c3:10:ac:a8:9e:
88:1e:5b:72:67:9a:e9:1d:83:ec:33:42:95:10:3b:8a:a9:30:
a6:51:b6:4a:bf:44:c3:8e:70:83:16:ec:96:5d:14:96:a6:41:
73:09:74:73:59:13:0a:c7:fb:b0:e8:80:dd:02:6c:67:bf:52:
0c:54:bf:a8:70:70:82:d6:f2:32:69:ec:8e:e9:8f:c2:1c:75:
5c:31:ab:04:90:7c:41:3d:ee:52:53:9b:37:0a:c9:1f:84:4f:
b8:92:e9:3d:fa:6c:b7:a2:e0:f0:cd:b8:fe:b2:ce:34:73:3b:
94:80:d0:d5:19:6d:54:86:89:ad:7a:69:65:7c:ab:33:07:d0:
1f:63:f4:7c:1e:7d:90:b4:24:bf:f0:3e:6c:44:5c:1f:45:0c:
b3:2d:88:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:38 2024 by rpki-client on console-ams.rpki-client.org