Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/pl--tCBs-KXdJ-4jm4vOUXX8CAA.roa
File: pl--tCBs-KXdJ-4jm4vOUXX8CAA.roa (raw, json)
Hash identifier: pfqG6drRmu/dInkG6JLVnxnsbbqwe5RYrCElIAfMpWM=
Subject key identifier: A6:5F:BE:B4:20:6C:F8:A5:DD:27:EE:23:9B:8B:CE:51:75:FC:08:00
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0192F17D1D2461B7AA934AAE7A67D87E2705
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/pl--tCBs-KXdJ-4jm4vOUXX8CAA.roa
Signing time: Sun 03 Nov 2024 10:06:01 +0000
ROA not before: Sun 03 Nov 2024 10:06:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214526
IP address blocks: 109.122.252.0/24 maxlen: 24
109.122.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 09:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f1:7d:1d:24:61:b7:aa:93:4a:ae:7a:67:d8:7e:27:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Nov 3 10:06:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a65fbeb4206cf8a5dd27ee239b8bce5175fc0800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:a5:1a:f2:59:e3:5e:9a:02:63:67:94:14:
36:40:c5:1d:c5:78:60:92:3c:21:66:9f:0a:8d:d6:
8c:01:27:1c:96:b9:57:03:5c:16:86:de:2b:c2:9f:
bb:00:eb:30:36:20:7c:f0:4d:16:2c:d3:91:9a:3e:
34:0e:9f:05:ab:22:72:ad:2b:02:e8:30:65:e6:6d:
ee:2b:b9:c0:b6:2b:4e:e6:a3:49:cb:c9:37:c0:2c:
65:af:f1:54:ca:32:f6:5d:da:63:5b:b6:81:60:c8:
0f:0e:32:18:30:d1:86:5e:5d:70:26:f6:8a:9c:2f:
7d:79:9f:29:ed:d8:53:d7:14:27:68:87:42:f0:6c:
f6:8e:e0:7b:df:f6:21:e6:aa:7a:3a:6a:5b:15:66:
5b:3b:14:48:a0:6c:09:6f:1c:f4:9e:eb:09:37:e4:
9a:f7:95:89:99:ee:8f:93:f3:2a:62:c6:10:03:a1:
b9:1f:71:4e:62:83:ea:51:fb:b7:77:e1:bb:5a:47:
72:3b:65:49:40:bf:11:c5:4d:43:ae:70:f5:9e:23:
05:c9:49:f3:e7:2a:43:5e:c8:19:e1:0a:4e:83:15:
41:6f:40:17:fb:7e:5d:0a:90:d8:3d:4c:a8:c9:e8:
75:7a:90:30:23:bd:b0:57:0a:2f:27:e3:de:cb:fa:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5F:BE:B4:20:6C:F8:A5:DD:27:EE:23:9B:8B:CE:51:75:FC:08:00
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/pl--tCBs-KXdJ-4jm4vOUXX8CAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.252.0/23
Signature Algorithm: sha256WithRSAEncryption
37:9e:18:d2:9f:4d:8f:d1:80:70:57:d0:cf:89:f1:73:a4:dd:
ca:c4:03:93:26:3c:c8:0f:db:14:50:fc:79:19:e9:a9:14:45:
e7:60:ce:7b:27:60:fe:6d:d9:96:f1:01:5f:43:7a:4a:da:2e:
c7:3d:64:91:e4:dc:06:9e:fc:40:ef:ae:c2:dc:48:3f:05:3f:
cf:6d:a7:cf:7c:dc:40:56:fd:19:28:60:46:8a:b0:67:72:15:
ce:67:dc:67:e5:d3:7b:92:09:e9:9d:9d:84:08:1e:12:7b:d0:
40:d0:d1:cf:fe:00:2c:39:b0:3b:98:65:a9:fd:72:ed:a1:66:
49:15:6e:1d:9f:c5:67:79:ff:9d:dd:67:0f:d5:ad:49:f9:73:
72:ef:c9:d5:b4:7d:c6:00:0d:39:aa:28:2b:34:e5:23:ab:dc:
aa:02:1e:85:26:f0:eb:d9:00:e4:ad:9a:74:c9:7e:6b:09:54:
81:5c:67:7d:9a:09:3e:83:c7:20:5b:e9:08:a3:f6:3d:0b:d5:
b0:76:88:fe:31:6f:1f:19:6c:7e:d2:a5:91:b3:a8:30:c7:a2:
2f:2f:60:cb:26:22:04:e6:e1:2a:a7:0d:b7:24:c4:a0:ce:76:
37:39:08:d3:ef:66:98:9d:f2:0e:f8:2f:3b:3e:75:41:39:6b:
eb:ab:eb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 13:09:04 2024 by rpki-client on console-fra.rpki-client.org