Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/PCChp2kMcQt8WygVaHBJXqb2DkY.roa
File: PCChp2kMcQt8WygVaHBJXqb2DkY.roa (raw, json)
Hash identifier: mwo92vu+9nftPl3K+ST/3TmNg9+s+ZQnFY9XFx/9QEM=
Subject key identifier: 3C:20:A1:A7:69:0C:71:0B:7C:5B:28:15:68:70:49:5E:A6:F6:0E:46
Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial: 01856FCBB96B24D2C3E2A12FCBF881BDAE33
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/PCChp2kMcQt8WygVaHBJXqb2DkY.roa
Signing time: Mon 02 Jan 2023 00:05:00 +0000
ROA not before: Mon 02 Jan 2023 00:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43444
IP address blocks: 178.159.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:b9:6b:24:d2:c3:e2:a1:2f:cb:f8:81:bd:ae:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Validity
Not Before: Jan 2 00:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c20a1a7690c710b7c5b28156870495ea6f60e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:4c:05:c4:a0:c7:ae:3c:8b:94:b6:a3:cd:
87:2b:51:f7:94:14:a6:95:20:fb:f6:8a:0f:d6:75:
ec:61:15:5c:f5:a0:f9:5b:16:1a:05:75:65:b1:a9:
a0:c0:cd:48:b4:4b:01:ad:d2:49:1e:16:43:8c:f4:
3a:89:2c:d7:0f:d0:0c:0d:4e:c8:56:c4:41:3c:9b:
ca:07:22:e4:57:b0:37:d8:18:bf:5e:15:f8:b7:20:
a8:f0:25:b6:42:3c:7a:9d:9f:04:26:8c:e2:c4:92:
bb:44:f7:ce:6b:24:ae:bc:9a:91:ea:b6:28:41:e9:
16:4f:7b:96:1a:21:a0:f5:75:f2:00:56:88:f3:c3:
72:8d:8f:ff:1c:28:3c:7b:8b:81:e3:8a:ff:fc:80:
ae:87:5b:fc:db:b5:25:db:c8:20:a0:7a:b5:c5:ef:
3b:1b:05:1d:7d:54:26:01:ce:c1:c7:e3:67:a1:4a:
c0:07:c9:00:f9:50:69:fe:59:28:b5:01:7e:97:d6:
08:c4:3d:05:a1:cf:c1:86:f2:40:71:bf:bc:3d:92:
58:5a:a3:36:1d:87:52:31:07:ec:ea:3d:7c:71:6c:
bd:78:b0:d1:58:2e:96:40:0b:ea:80:92:da:ae:7a:
82:ab:2b:75:bc:5c:6a:98:25:03:63:18:b0:7f:0c:
2f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:20:A1:A7:69:0C:71:0B:7C:5B:28:15:68:70:49:5E:A6:F6:0E:46
X509v3 Authority Key Identifier:
keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/PCChp2kMcQt8WygVaHBJXqb2DkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.99.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f0:9a:45:e7:c8:b8:6f:33:5f:c9:cc:d5:cb:23:18:43:69:
80:ed:ec:92:25:43:47:ad:31:2b:65:1d:40:0e:76:7c:4a:30:
1e:29:9a:ab:43:74:db:16:ff:ef:89:21:00:08:6b:82:25:25:
b7:22:02:f7:08:07:2b:d9:42:14:9b:4e:e3:4d:e1:e6:9e:6f:
ee:a2:ee:44:2f:b9:64:3a:5e:4c:87:cb:f1:a9:53:d3:a9:07:
f8:e0:21:56:23:4b:bb:ed:ec:23:c9:78:25:26:aa:3b:2f:37:
ac:e8:85:6f:2a:99:3e:4b:62:ef:ea:a0:ba:1c:02:1c:e2:d6:
22:fb:91:a0:ed:74:a6:39:17:08:26:96:7e:b5:2e:5a:ee:4c:
4c:f3:e6:4f:27:7a:74:e3:45:b8:7a:56:12:29:8e:76:e9:1d:
6c:14:8f:06:6b:8a:77:64:35:64:c2:9e:1f:31:33:4f:a4:5a:
c7:87:af:ad:b8:cc:ef:e2:30:83:1c:a5:bc:67:8d:38:e4:f8:
81:9f:a9:03:2b:10:99:cf:74:8d:ac:14:fa:07:34:46:2b:6f:
f9:c9:9e:17:7b:4a:a7:c8:81:6d:7e:dc:ed:c5:36:d9:39:fb:
72:2d:ad:eb:4e:38:ab:b4:69:dc:2f:89:d6:4a:c0:c4:23:78:
6c:96:9f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:17 2024 by rpki-client on console-ams.rpki-client.org