Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/Pmgyh7tKdfx9BFqZFen3bZrSHCY.roa
File: Pmgyh7tKdfx9BFqZFen3bZrSHCY.roa (raw, json)
Hash identifier: 2KijouHwmFlmd3HVp/o4HIlxuKgCuK0pucTXh7cNTsI=
Subject key identifier: 3E:68:32:87:BB:4A:75:FC:7D:04:5A:99:15:E9:F7:6D:9A:D2:1C:26
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01872DAC744851D2532EBF9A520429E16184
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/Pmgyh7tKdfx9BFqZFen3bZrSHCY.roa
Signing time: Wed 29 Mar 2023 14:01:29 +0000
ROA not before: Wed 29 Mar 2023 14:01:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 194.107.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:ac:74:48:51:d2:53:2e:bf:9a:52:04:29:e1:61:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Mar 29 14:01:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e683287bb4a75fc7d045a9915e9f76d9ad21c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7b:5f:09:77:55:49:bf:95:b7:47:24:ab:27:
9f:99:40:aa:51:86:f3:75:89:e5:19:8b:5e:6a:69:
a0:11:ac:9a:ea:61:2f:2d:74:3d:45:33:f2:ce:32:
e9:9f:57:c8:31:fb:65:ab:df:d7:95:32:e7:26:af:
bf:5b:a4:bf:55:23:f0:41:13:35:89:9c:ef:d4:9a:
9e:95:bc:2e:5e:63:7b:1e:fd:53:ad:aa:a0:16:e0:
cd:b8:46:b4:3e:10:5a:73:07:10:98:60:04:7c:42:
d2:3d:40:de:d3:2b:d2:3a:7d:82:91:c8:9b:ac:3f:
67:e2:74:9a:9a:04:ba:97:49:ef:8e:ec:23:64:42:
b8:c2:40:b1:e9:a3:d4:f3:71:b2:51:84:79:01:03:
36:cd:db:5a:bc:51:4d:d2:7e:5b:39:dc:d7:c8:10:
0a:99:c1:70:14:e0:f0:16:1d:df:30:79:a7:df:fb:
11:e4:e8:05:e4:08:40:6b:69:45:14:10:ff:fc:97:
06:2e:d7:0a:f4:99:c6:3d:f0:fc:00:cc:87:a1:02:
e7:7f:a1:2f:79:87:7b:83:c9:83:85:59:0c:7f:f7:
fe:52:c6:c9:1a:a7:8a:87:e5:8d:49:be:2a:46:fc:
92:99:99:d3:91:b9:f0:ab:78:14:85:40:b1:55:25:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:68:32:87:BB:4A:75:FC:7D:04:5A:99:15:E9:F7:6D:9A:D2:1C:26
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/Pmgyh7tKdfx9BFqZFen3bZrSHCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.162.0/24
Signature Algorithm: sha256WithRSAEncryption
80:3b:30:fb:13:4b:16:e2:83:e4:81:9b:d3:d1:44:4f:6d:80:
6c:b7:62:0a:52:49:85:1a:a0:96:3e:bc:5f:af:bf:ee:37:d8:
33:19:13:3f:80:29:c4:ae:68:da:78:f3:7f:5e:16:a2:3e:c8:
5f:5a:7c:05:ea:8b:10:3b:70:51:6f:1a:9b:1f:39:d5:dd:1b:
71:0d:da:94:01:31:01:3d:e0:2f:ac:fe:c3:3d:3c:3f:f2:a2:
af:58:93:af:76:32:75:d6:fa:a8:35:52:70:46:43:65:7f:0a:
b9:e4:36:71:e7:d8:8f:d8:9b:e7:c5:06:45:a5:29:67:4e:d2:
6d:83:f3:25:d6:ac:0f:84:a0:93:44:50:75:76:1d:11:6b:6f:
ce:22:a8:8f:8c:7a:fd:56:f4:04:7c:2c:b3:2a:61:e8:a5:fe:
a1:41:b4:ad:5b:1a:c0:60:3c:f6:3e:de:54:8a:23:fd:04:fa:
55:57:da:94:08:80:24:e2:85:35:33:f0:8e:87:2d:c9:50:de:
93:46:b8:6e:fb:39:78:77:5a:8f:06:d7:f6:6e:6b:e5:80:48:
d5:70:7a:63:ff:95:3a:1d:a8:24:59:7e:16:4f:e2:a5:92:2b:
e1:2a:6e:fb:10:1a:15:5e:17:c2:88:4b:e7:59:f0:0b:ff:7f:
81:01:44:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:50 2023 by rpki-client on console-ams.rpki-client.org