Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/pgvcmth1eGZcIubKEdZvwrBxH3M.roa
File: pgvcmth1eGZcIubKEdZvwrBxH3M.roa (raw, json)
Hash identifier: Cp292gK5hgSfF0f62IZ1GJDoscdiKnypAEcnGXpMw9g=
Subject key identifier: A6:0B:DC:9A:D8:75:78:66:5C:22:E6:CA:11:D6:6F:C2:B0:71:1F:73
Certificate issuer: /CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Certificate serial: 0186451B650AFD0D25360EAE6227EECED80A
Authority key identifier: 79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/pgvcmth1eGZcIubKEdZvwrBxH3M.roa
Signing time: Sun 12 Feb 2023 10:11:08 +0000
ROA not before: Sun 12 Feb 2023 10:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208006
IP address blocks: 130.185.123.0/24 maxlen: 24
130.185.122.0/24 maxlen: 24
130.185.120.0/22 maxlen: 24
185.215.232.0/22 maxlen: 24
185.215.235.0/24 maxlen: 24
185.215.234.0/24 maxlen: 24
185.204.168.0/22 maxlen: 24
2a0d:4ac0::/48 maxlen: 48
2a0d:4ac0:3::/48 maxlen: 48
2a0d:4ac0:1::/48 maxlen: 48
2a0d:4ac0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 20 Feb 2023 14:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:45:1b:65:0a:fd:0d:25:36:0e:ae:62:27:ee:ce:d8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Validity
Not Before: Feb 12 10:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a60bdc9ad87578665c22e6ca11d66fc2b0711f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:14:6d:01:cc:8b:53:07:26:1e:5b:a9:4c:
05:d2:3b:68:0e:a9:3a:02:f8:85:e4:1b:2d:17:83:
09:81:0c:e7:b1:4f:c6:18:f6:37:46:fa:78:dd:31:
ad:72:18:25:5c:45:4d:f8:f4:f6:27:9d:28:ed:65:
e1:e6:1b:5b:1e:ac:c2:3e:36:ae:c6:3e:11:cb:bd:
b0:0d:62:f7:f7:15:10:7d:7d:f4:6b:94:ce:ac:a4:
4a:c6:6e:4d:28:a8:df:a9:f8:59:22:a5:5c:c9:2e:
21:2a:a9:58:29:32:1a:d8:8c:25:70:55:0c:8f:09:
59:e5:15:dd:ad:4a:a9:0d:c5:85:50:b0:82:20:8c:
7e:1f:0f:ab:a2:d2:30:9d:89:9f:db:64:65:2d:49:
06:5e:49:0b:e0:89:a7:07:53:ea:04:da:54:05:7a:
c8:66:68:16:49:5e:2a:22:35:3c:5c:5f:6a:a6:64:
5b:4d:69:1b:b5:2b:62:b0:2b:92:0e:be:41:c0:79:
a6:61:c9:25:eb:64:8f:f4:4c:d0:74:0a:13:c3:30:
ce:cf:f6:97:8c:3c:71:fe:3d:23:56:de:3f:a5:53:
93:a2:7c:b1:da:ab:5a:60:b9:13:fb:7e:fc:9a:03:
70:ad:d7:46:a4:8e:bf:ce:c5:01:ab:eb:56:73:f8:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0B:DC:9A:D8:75:78:66:5C:22:E6:CA:11:D6:6F:C2:B0:71:1F:73
X509v3 Authority Key Identifier:
keyid:79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/pgvcmth1eGZcIubKEdZvwrBxH3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.120.0/22
185.204.168.0/22
185.215.232.0/22
IPv6:
2a0d:4ac0::/46
Signature Algorithm: sha256WithRSAEncryption
90:d2:98:b4:c0:f5:3b:bb:d5:36:e5:7e:71:68:61:9e:04:6f:
48:35:1b:1a:86:28:be:6b:bf:f2:11:b9:d6:75:9f:fa:87:05:
8d:d4:63:ff:d6:06:54:8a:0f:8d:d3:ac:33:d9:87:fb:ca:f5:
eb:63:f0:bd:bb:b0:9b:7d:b1:6f:57:5e:0c:72:f2:d8:d9:d9:
39:17:af:a9:1e:8e:7f:fc:92:d5:a4:be:be:ab:e2:f6:59:50:
38:1a:1c:cd:35:28:5a:6c:30:64:6f:b5:6e:a3:b1:70:31:3a:
3c:8e:97:96:28:11:fd:b3:c0:c1:0e:71:ab:f9:07:b9:93:bd:
e3:df:60:e5:4f:53:7b:e7:b0:c7:1b:52:3d:b1:af:e4:b3:3f:
e6:56:f9:e4:5f:a1:f9:34:38:fd:37:d0:b3:44:20:5d:ec:af:
9e:24:40:c2:b5:7c:09:21:e7:3d:4f:86:fb:42:35:c7:3a:5b:
69:92:1c:f5:f9:5d:d8:77:2e:dc:16:b3:0e:02:c2:5d:43:23:
ab:f8:22:92:a1:48:12:7a:c6:62:22:14:03:ae:5c:f9:c7:c8:
2a:a7:c0:24:33:5e:80:81:61:26:61:16:90:1f:a9:a1:92:4e:
a8:e3:71:35:00:75:5d:7d:2a:14:b6:78:c8:0b:07:7a:c6:9b:
b6:37:e2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:11 2024 by rpki-client on console-ams.rpki-client.org