Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/PVUcULaCRWoy1SH4VxiDEC2sqzw.roa
File: PVUcULaCRWoy1SH4VxiDEC2sqzw.roa (raw, json)
Hash identifier: lEcUkqpP9Z4o4hpTz1E6qYVOGVt4PaRgUC2QgkfQpeQ=
Subject key identifier: 3D:55:1C:50:B6:82:45:6A:32:D5:21:F8:57:18:83:10:2D:AC:AB:3C
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0190A82CEBB11C822061AF5BF925FCC0BCC6
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/PVUcULaCRWoy1SH4VxiDEC2sqzw.roa
Signing time: Fri 12 Jul 2024 18:20:34 +0000
ROA not before: Fri 12 Jul 2024 18:20:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 89.44.242.0/24 maxlen: 24
89.46.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jul 2024 10:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a8:2c:eb:b1:1c:82:20:61:af:5b:f9:25:fc:c0:bc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jul 12 18:20:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d551c50b682456a32d521f8571883102dacab3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:86:eb:4a:6d:cf:7c:50:3c:b9:cc:9a:9b:
34:56:22:6b:9e:ed:25:7b:ee:6a:dc:2d:f4:4a:56:
91:09:8b:64:b7:bc:0c:c8:77:e6:11:57:f7:a4:ac:
ef:50:ad:17:92:bb:1c:9e:71:8c:85:73:a5:07:51:
ef:41:86:17:02:75:2b:a7:6b:43:4b:3f:76:5e:85:
08:00:2a:62:be:9d:fa:e8:b8:c5:88:50:97:24:da:
98:03:c9:6c:42:ee:28:9c:a2:b2:cd:46:18:ec:fe:
c5:ad:83:39:31:e5:16:78:83:ad:60:47:63:59:4d:
9e:0a:ad:f0:dd:00:c3:4f:34:ff:87:4f:c6:c2:db:
1e:f0:2b:0a:ea:c1:c9:24:60:ca:d5:d3:72:f8:6a:
b8:91:9f:70:d7:13:2a:9b:7d:62:9b:63:13:5b:5a:
37:49:42:80:74:6e:52:aa:69:d1:b2:5b:40:d3:67:
e4:e1:65:5b:57:94:d5:26:02:7b:5e:c6:c7:20:49:
53:cf:77:00:6b:0c:51:d7:ee:42:04:b3:1f:8e:10:
94:8d:87:73:31:c8:4c:d4:78:cd:27:63:91:0e:43:
16:e3:64:ec:c3:3e:96:70:ad:ce:36:61:f3:49:9b:
88:99:c8:07:27:0f:37:0f:46:33:91:78:ec:7d:da:
23:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:55:1C:50:B6:82:45:6A:32:D5:21:F8:57:18:83:10:2D:AC:AB:3C
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/PVUcULaCRWoy1SH4VxiDEC2sqzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.242.0/24
89.46.217.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:78:7e:41:45:d3:24:0a:1b:22:d3:03:7d:95:68:78:1b:1b:
87:9e:e8:de:db:1d:24:e5:62:24:c5:02:f1:6e:b4:b0:78:c2:
c1:cc:9d:81:cb:2a:cf:49:00:5a:d4:9a:f5:9f:6d:df:3a:bb:
c1:1f:3a:79:e1:c5:58:3e:1f:20:4f:25:4f:25:bb:26:da:00:
98:3b:ae:c8:56:be:27:eb:7f:56:95:d9:f4:09:e1:49:f2:41:
6d:a4:e6:e3:99:71:d0:48:3b:25:96:b0:18:d6:3e:78:01:47:
f1:f6:ee:ed:4f:67:49:2a:4d:bc:af:44:95:27:50:ec:86:ce:
bd:3f:5c:a3:bd:27:03:db:b3:5b:19:e1:08:50:33:6a:98:b7:
a3:e6:4a:a2:88:f1:41:81:9c:c9:e0:8f:7e:0a:8b:91:ce:22:
74:86:e5:4d:0f:65:08:6b:84:b6:39:8c:3d:05:4c:3d:9b:6d:
08:b9:af:4b:e7:96:12:58:f3:8d:e1:b4:36:9d:fd:4f:0b:47:
a5:d5:96:f9:73:91:8b:fb:7c:a9:c2:5f:38:0b:2b:13:b4:d9:
71:92:43:f7:d0:ed:da:1f:26:f4:e3:db:ed:a2:f1:a3:03:69:
27:39:32:d4:4e:7d:f2:78:95:da:df:9b:48:76:a8:8b:79:cb:
65:37:5a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 13 13:55:39 2024 by rpki-client on console-ams.rpki-client.org