Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/PVLtX7f2_A4XA50jchcDMBsExnA.roa
File: PVLtX7f2_A4XA50jchcDMBsExnA.roa (raw, json)
Hash identifier: jz44KHsaT9To+cdMjjz+uHW4ZeJk0okbZLr8Kwr5+CM=
Subject key identifier: 3D:52:ED:5F:B7:F6:FC:0E:17:03:9D:23:72:17:03:30:1B:04:C6:70
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019427472C5110F14FB664EA293FF4F48DAA
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/PVLtX7f2_A4XA50jchcDMBsExnA.roa
Signing time: Thu 02 Jan 2025 13:49:23 +0000
ROA not before: Thu 02 Jan 2025 13:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60721
IP address blocks: 93.190.13.0/24 maxlen: 24
185.98.61.0/24 maxlen: 24
185.141.34.0/24 maxlen: 24
185.185.232.0/24 maxlen: 24
185.243.182.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
194.62.53.0/24 maxlen: 24
194.62.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:2c:51:10:f1:4f:b6:64:ea:29:3f:f4:f4:8d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d52ed5fb7f6fc0e17039d23721703301b04c670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:af:f8:74:9b:6b:57:54:9b:75:78:e5:04:
9b:5e:3e:6b:96:9e:51:70:e0:78:b9:81:83:43:36:
18:cd:c0:4e:3b:74:0b:54:b4:66:9e:e3:85:7e:90:
b1:47:55:df:1b:d8:2d:7c:6b:65:78:6d:3b:7a:b8:
b7:81:96:ec:0c:ee:dc:42:96:6d:3f:12:3b:9a:7d:
82:63:25:8c:66:99:b3:f2:4f:0c:5d:c9:6e:41:5e:
83:56:f1:03:0a:34:78:87:ed:da:e7:db:04:71:b4:
e9:90:1c:73:2b:75:ae:0d:50:05:53:88:ed:66:d2:
4f:ec:01:95:c1:1e:19:32:e7:72:0b:c7:ba:7d:d2:
84:5f:fb:84:85:09:5e:c0:31:64:6d:80:36:3c:e0:
98:82:0c:0f:9f:3b:c9:b9:ab:0b:a1:a7:9e:ed:6e:
29:92:14:6b:5b:be:d0:e7:29:09:53:96:9f:21:de:
21:fd:83:1b:2d:08:48:f1:bd:ae:f6:09:a7:c2:71:
69:0b:fd:c4:1f:34:55:1a:b8:af:26:ed:3b:04:b3:
fa:1d:ee:e4:6b:70:1f:3e:ca:d8:63:d6:69:c1:e8:
f0:88:79:61:a7:50:cd:8f:a2:9d:88:f1:43:40:49:
18:09:ea:16:0b:b0:29:98:de:3d:11:e0:4f:08:0d:
cb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:52:ED:5F:B7:F6:FC:0E:17:03:9D:23:72:17:03:30:1B:04:C6:70
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/PVLtX7f2_A4XA50jchcDMBsExnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.13.0/24
185.98.61.0/24
185.141.34.0/24
185.185.232.0/24
185.243.182.0/24
193.160.142.0/24
193.223.104.0/23
194.62.53.0/24
194.62.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ff:c3:f8:d0:f6:45:54:04:9c:eb:04:9e:7d:55:c1:72:09:
ae:f5:25:16:50:e8:c3:a3:7e:16:f2:7b:9f:07:b2:59:c9:89:
7f:06:85:c8:fa:59:23:7e:54:d1:23:39:41:e7:3c:a0:8e:32:
a2:04:6c:6c:ce:02:0d:43:7b:9a:98:85:7b:ca:aa:02:59:c5:
72:6f:24:8a:f1:08:8a:e4:19:20:ce:2e:10:54:23:9a:75:dd:
7d:cd:ef:02:e4:a4:bc:42:9b:1f:9b:22:a1:ca:cb:9c:36:ca:
f1:80:86:43:7c:fc:57:c7:eb:e6:50:b4:b0:a6:21:d2:02:9d:
6e:02:63:3d:d1:db:7e:c9:32:60:ff:ae:14:bc:bc:8f:47:00:
95:2e:47:67:e9:07:88:76:39:a5:7c:64:fc:4b:1b:2c:f8:38:
ac:93:3a:e2:97:fd:33:b7:55:09:81:17:2d:9d:57:fe:d3:c5:
96:52:a8:b0:60:f5:d8:bc:b5:63:f5:1f:d5:3b:d4:55:cd:67:
72:38:fa:51:fb:a4:2e:7b:13:30:a0:72:ce:32:35:86:27:f1:
0f:96:91:4c:b6:95:38:5a:9f:29:ca:24:c8:bb:19:57:40:96:
2f:9b:c5:b5:cb:26:aa:75:9f:67:7c:17:94:cd:0d:e3:61:a4:
bb:72:05:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:54 2025 by rpki-client