Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/t-pgeB-4vuLlySnLVrxNpRrgz-8.roa
File: t-pgeB-4vuLlySnLVrxNpRrgz-8.roa (raw, json)
Hash identifier: gDLlCQrUjcviO9WM7IbNNp4GGyC1mxEpoug6TCW+ZsI=
Subject key identifier: B7:EA:60:78:1F:B8:BE:E2:E5:C9:29:CB:56:BC:4D:A5:1A:E0:CF:EF
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 01856FC291BC3660E37568837B93BDEC7007
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/t-pgeB-4vuLlySnLVrxNpRrgz-8.roa
Signing time: Sun 01 Jan 2023 23:55:00 +0000
ROA not before: Sun 01 Jan 2023 23:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211450
IP address blocks: 193.36.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Apr 2023 14:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:91:bc:36:60:e3:75:68:83:7b:93:bd:ec:70:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Jan 1 23:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7ea60781fb8bee2e5c929cb56bc4da51ae0cfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a3:ba:65:47:60:7d:b2:a2:50:bc:6d:62:b8:
91:30:29:de:8e:e3:8a:01:2b:78:fe:b4:f2:8c:bd:
6e:6f:94:89:16:0c:9c:a4:a2:11:2a:50:54:81:38:
62:15:ea:90:b2:21:f9:15:f2:85:a9:63:eb:75:d9:
68:db:93:94:9e:00:8e:f8:c0:a0:77:4c:70:90:51:
8e:df:7c:e1:59:e4:51:b9:0f:32:2e:24:3f:4a:df:
5d:2b:06:7e:e7:0e:72:f8:0c:cf:5b:f8:bf:35:34:
3c:7e:58:3c:44:8c:18:2c:89:b1:a0:83:4b:3f:e4:
2f:01:d0:40:23:53:8c:41:b2:a1:e8:36:39:e1:79:
e8:bb:d6:f5:2f:a0:8c:44:d4:f3:79:7e:0c:06:9f:
cc:e0:43:1d:5b:40:32:f4:08:78:f8:a8:e2:5c:3c:
5d:9a:c3:79:3e:fe:da:f8:a3:49:66:bc:a1:44:a0:
59:7c:2e:0f:66:be:c8:ef:ca:4f:db:f5:70:3b:12:
8e:53:fe:a2:6a:16:2c:fd:c4:95:72:16:e6:e2:a1:
9c:67:be:ba:36:7b:ce:36:5f:fd:0d:77:b9:96:86:
5e:49:5c:fc:58:5d:e1:a1:e1:87:b3:b9:7b:96:0b:
e4:8e:1d:c2:f1:9e:64:58:43:8f:90:33:08:c5:fb:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EA:60:78:1F:B8:BE:E2:E5:C9:29:CB:56:BC:4D:A5:1A:E0:CF:EF
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/t-pgeB-4vuLlySnLVrxNpRrgz-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.90.0/24
Signature Algorithm: sha256WithRSAEncryption
36:46:08:2c:e5:2f:88:d6:e4:da:07:29:99:56:8c:21:ff:98:
33:0b:26:a7:df:2f:62:42:84:aa:a9:d8:32:2f:ef:e5:43:e0:
d2:b0:23:85:b5:88:7b:c8:c2:0b:bf:90:3e:0e:d9:e3:86:f2:
6c:69:78:b9:27:40:89:bf:39:3a:8f:82:e4:cd:aa:d4:c6:4d:
97:4d:1a:62:75:0f:83:79:a3:47:7b:22:58:55:04:89:11:3f:
4b:55:ce:3d:3a:c1:0c:c4:45:5a:f8:a6:3c:2c:e4:a8:43:1d:
3d:27:05:8e:e6:28:9e:1f:44:3c:bf:56:8f:ba:03:2c:38:48:
80:7b:aa:36:07:e9:a9:35:59:aa:af:8c:98:bf:52:61:43:80:
33:5e:69:a9:80:a8:e2:6f:50:f7:a5:3a:4a:29:de:4d:a5:23:
b6:20:17:4d:50:6a:f5:a2:90:86:22:20:87:5b:a3:d6:ae:bb:
22:55:05:68:6d:a4:76:64:19:7a:a2:ea:00:92:e5:0b:33:aa:
5f:4a:ed:10:e7:bc:23:29:6f:e0:56:b3:07:52:61:2f:4c:ed:
96:46:0d:f1:cd:e1:f5:29:58:3b:2a:a0:5e:b0:21:b5:43:b9:
94:8a:39:35:7c:b4:b3:30:20:1d:27:6c:82:3d:09:79:a1:d0:
80:f2:82:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:06 2024 by rpki-client on console-ams.rpki-client.org