Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/pfqEPR5542UNVKiGa4Mw_pufwLQ.roa
File: pfqEPR5542UNVKiGa4Mw_pufwLQ.roa (raw, json)
Hash identifier: mzx8mqWCspz6WKUJ0TGuJ1opcvD/Yesy1OPtBJe57ic=
Subject key identifier: A5:FA:84:3D:1E:79:E3:65:0D:54:A8:86:6B:83:30:FE:9B:9F:C0:B4
Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Certificate serial: 0185714C1D55A702EE59F5E24C7E4160BD52
Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/pfqEPR5542UNVKiGa4Mw_pufwLQ.roa
Signing time: Mon 02 Jan 2023 07:04:51 +0000
ROA not before: Mon 02 Jan 2023 07:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51412
IP address blocks: 193.150.152.0/21 maxlen: 21
193.150.156.0/22 maxlen: 22
193.150.160.0/22 maxlen: 22
193.150.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:1d:55:a7:02:ee:59:f5:e2:4c:7e:41:60:bd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Validity
Not Before: Jan 2 07:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5fa843d1e79e3650d54a8866b8330fe9b9fc0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:32:d6:9b:40:2c:da:61:c1:6f:dd:8d:21:
11:8e:d6:5e:5f:aa:91:fd:77:46:11:6b:98:2d:7f:
54:09:af:28:bb:e1:3d:54:c8:5d:ad:47:c6:2c:ba:
33:f5:d1:6e:be:4c:ed:f7:9f:f4:e3:e5:96:f3:a9:
f2:f2:17:7e:a3:ce:2f:a3:fe:60:20:73:50:62:4a:
3a:be:54:61:a0:56:fe:19:7b:02:e9:56:60:3a:1d:
46:d5:a2:8b:a8:c4:b8:86:32:8b:67:06:54:93:0d:
f9:a0:bf:a1:bd:a6:3a:03:17:27:ab:05:bf:15:5b:
89:1a:50:25:71:f6:fb:88:ec:3c:25:70:0e:e6:80:
b9:2e:8e:c5:d8:6f:02:c1:67:a0:c8:e7:cf:03:fa:
86:e0:d4:f9:8d:83:ad:88:d3:91:33:3b:2a:a8:5f:
9f:a6:b2:b9:ae:1e:e2:83:cb:25:20:b8:1c:4e:fa:
0e:44:e9:4f:1a:80:dd:69:fe:39:21:0a:b0:27:f5:
53:f8:d0:ac:49:40:a7:b3:32:48:30:c0:ac:ad:8e:
ae:cf:fd:8f:61:47:7c:4d:3f:f4:d5:7d:ba:51:6f:
20:b5:9a:f7:ce:10:6e:0a:a2:e0:69:1d:6e:04:80:
21:16:29:99:76:29:58:b4:d8:a6:dd:d5:82:ff:64:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FA:84:3D:1E:79:E3:65:0D:54:A8:86:6B:83:30:FE:9B:9F:C0:B4
X509v3 Authority Key Identifier:
keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/pfqEPR5542UNVKiGa4Mw_pufwLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.152.0-193.150.164.255
Signature Algorithm: sha256WithRSAEncryption
21:53:2d:cc:aa:ec:a7:b2:ed:c5:b6:fb:74:4b:52:cd:40:83:
bb:8e:8e:c0:13:c7:0d:de:7e:e7:c4:99:1d:3b:e5:51:69:88:
70:eb:48:d6:c8:e3:1e:64:50:91:b5:dd:3e:0d:79:f6:20:8b:
7b:a3:cf:c2:44:5d:b6:73:db:89:68:01:78:4f:34:90:71:82:
52:c7:28:08:b3:5f:24:92:7c:5f:e4:6c:88:4a:b1:7f:63:7b:
6f:a1:5c:82:4d:33:92:62:ab:0c:eb:29:4b:6d:2c:fd:35:74:
b7:ec:96:b4:8d:48:58:41:46:00:ad:ee:eb:f0:9e:2f:d6:f2:
bd:59:e1:ae:9f:d0:07:3e:1e:45:85:78:ef:19:df:45:c1:a7:
5f:e8:1e:7e:c1:bc:37:fe:51:a8:2e:50:b2:b1:95:3f:41:fe:
db:34:a2:3d:40:8f:dc:9b:cd:76:37:61:80:54:19:6f:97:fc:
c1:d2:a5:40:f1:f3:9a:a0:aa:68:8f:da:e6:06:f6:c9:09:a8:
b6:08:51:1b:1e:d0:da:bb:fd:f3:a2:10:93:b9:5d:50:18:c7:
0a:75:e0:e5:e4:06:59:b0:5d:5b:f1:ec:b7:57:18:3a:23:35:
bf:47:87:6f:3f:67:54:f4:ff:bf:42:73:2b:14:2b:49:a2:99:
3d:1b:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:36 2023 by rpki-client on console-ams.rpki-client.org