Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/PDuk1J0D8frdDzF6EKJi_iXz_8Y.roa
File: PDuk1J0D8frdDzF6EKJi_iXz_8Y.roa (raw, json)
Hash identifier: pD77g2B09VfpZAyzfIH9qTFLyu2tJst4qRKfNyyRNP0=
Subject key identifier: 3C:3B:A4:D4:9D:03:F1:FA:DD:0F:31:7A:10:A2:62:FE:25:F3:FF:C6
Certificate issuer: /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Certificate serial: 018848915750717AE4CB8EA87D4639D8E767
Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/PDuk1J0D8frdDzF6EKJi_iXz_8Y.roa
Signing time: Tue 23 May 2023 12:24:24 +0000
ROA not before: Tue 23 May 2023 12:24:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9989
IP address blocks: 193.24.65.0/24 maxlen: 24
139.123.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:91:57:50:71:7a:e4:cb:8e:a8:7d:46:39:d8:e7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Validity
Not Before: May 23 12:24:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c3ba4d49d03f1fadd0f317a10a262fe25f3ffc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:21:2c:3a:8f:2a:31:56:55:f7:c2:49:7d:
6e:4c:1a:ad:35:0f:66:07:2f:a2:c2:56:36:90:c7:
c4:61:14:db:45:6e:54:86:f9:f8:c1:d4:d4:0b:f8:
5b:55:4f:e0:c4:ce:bd:a0:99:91:8c:bf:4d:c9:46:
2b:fb:dc:c3:5b:b8:a9:b1:90:09:f5:29:fd:63:c3:
04:71:53:b6:ac:d6:42:3b:66:9a:35:35:65:6d:c4:
fa:7e:45:59:12:bd:62:df:73:2e:aa:22:cf:71:de:
59:08:a0:0b:1b:64:93:07:79:bf:d6:9f:76:ae:d8:
ef:7b:ef:13:d8:55:fc:5d:11:fa:c8:ac:27:e5:d8:
0f:fe:bb:3f:e3:72:b7:21:53:4e:e5:48:cf:94:97:
21:76:ff:12:b3:98:2b:a3:82:b3:25:03:00:76:0b:
f6:f1:4f:6a:90:1e:60:b8:4e:a3:46:cd:84:c7:9f:
c5:c2:4c:22:cc:71:de:49:8d:88:4a:70:42:d2:75:
5f:34:6e:3e:ed:21:2f:9b:b7:b6:29:f5:3b:17:fc:
3a:b8:1e:ef:d0:c7:f7:d5:93:8c:10:49:14:6b:12:
1d:e5:63:bd:a1:25:7f:b1:5b:c8:84:b1:e6:61:5a:
e7:62:5c:f8:29:c5:53:d7:26:04:a0:39:81:5a:bd:
a5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3B:A4:D4:9D:03:F1:FA:DD:0F:31:7A:10:A2:62:FE:25:F3:FF:C6
X509v3 Authority Key Identifier:
keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/PDuk1J0D8frdDzF6EKJi_iXz_8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.123.232.0/24
193.24.65.0/24
Signature Algorithm: sha256WithRSAEncryption
28:28:82:c2:36:74:1f:34:ad:ae:99:15:f1:78:9d:d1:74:96:
5b:bd:e9:5c:e4:ac:35:1a:45:a1:90:a6:b0:73:0c:2f:01:ab:
d2:81:58:ec:d4:0b:6f:9e:e0:aa:c7:09:9f:49:61:88:f9:bc:
b5:5b:50:6f:7f:1f:1e:2a:35:ae:d5:d0:1f:77:05:f6:58:72:
ab:cb:82:16:ab:db:e7:3b:eb:0b:68:81:a9:3b:e9:25:d5:97:
98:13:70:8f:53:64:d1:ae:1b:88:8c:36:eb:86:82:ea:d6:94:
5a:41:2b:73:1f:df:dc:af:da:4a:86:84:d5:03:89:8b:53:c7:
a5:71:64:82:0b:79:97:b9:fd:87:cd:30:8b:1d:c1:a5:b3:35:
60:83:f7:3a:bc:4d:32:76:57:92:16:6a:3e:ae:c7:c8:b9:87:
64:ce:cc:b5:2e:fe:27:91:60:fe:4a:b5:14:17:a1:ef:bd:11:
d0:19:1b:75:d1:f9:4d:e8:e5:fd:68:f0:60:99:de:8c:31:a7:
b8:26:52:cd:2a:64:1d:2b:01:99:e2:50:1d:7a:95:88:b9:32:
d2:92:40:9a:df:1b:85:98:f6:c4:88:c4:cf:66:31:62:c6:7a:
63:8d:6a:5e:85:da:e9:22:bc:9a:1d:5f:28:83:cf:20:4c:fa:
91:0f:69:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:26 2024 by rpki-client on console-ams.rpki-client.org