Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/PnMiqoNya2uq647AXQjujQeBJro.roa
File: PnMiqoNya2uq647AXQjujQeBJro.roa (raw, json)
Hash identifier: v+i6ZOuqZXoh2lmuhYfI8HQvRGMgfdStJ/InUG/yq4E=
Subject key identifier: 3E:73:22:AA:83:72:6B:6B:AA:EB:8E:C0:5D:08:EE:8D:07:81:26:BA
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 018CCC4143BC2C5799811F208E9008DB15E1
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/PnMiqoNya2uq647AXQjujQeBJro.roa
Signing time: Tue 02 Jan 2024 22:17:58 +0000
ROA not before: Tue 02 Jan 2024 22:17:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 94.199.7.0/24 maxlen: 24
45.159.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jan 2024 20:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cc:41:43:bc:2c:57:99:81:1f:20:8e:90:08:db:15:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Jan 2 22:17:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e7322aa83726b6baaeb8ec05d08ee8d078126ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b3:f9:b5:f6:d5:a2:d4:12:12:52:1b:4c:67:
6c:d1:5b:fb:76:bf:3b:20:f8:61:8e:de:67:09:c3:
0e:65:ee:b5:36:49:3e:56:b6:50:91:5c:84:61:ff:
a3:8f:da:9a:21:c9:80:f1:e2:e3:ad:70:aa:15:18:
46:c6:b7:2d:45:0a:7f:fc:81:73:4c:5f:aa:1b:98:
24:3e:38:f6:2d:a7:94:1d:2b:e3:23:04:5b:75:4a:
06:c1:78:ab:0c:af:72:9b:55:a4:31:f0:a0:b0:68:
ec:bb:af:68:1f:32:30:05:25:55:57:2c:d8:e8:ce:
9b:67:21:7d:75:f5:2b:97:5c:5e:fa:03:c1:a7:5c:
54:c7:84:13:22:15:ff:e6:95:9b:69:38:fc:f1:9f:
7b:43:16:94:07:7a:0d:e5:66:c6:0f:1b:d6:b6:07:
5a:62:34:24:f8:08:4b:5f:23:f0:eb:57:fd:58:b6:
b6:84:91:cd:99:f7:05:22:18:1a:d5:37:3b:a7:bb:
5a:ce:82:72:3a:88:ec:0b:d0:8c:88:c9:b2:d5:c5:
05:a9:45:35:96:e3:26:ec:63:e2:6b:0d:cc:be:9d:
95:2d:23:14:a1:e1:f1:69:5c:bc:7b:70:02:22:af:
0f:83:23:e8:fe:1b:a1:a5:6b:27:d4:39:8a:2d:76:
90:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:73:22:AA:83:72:6B:6B:AA:EB:8E:C0:5D:08:EE:8D:07:81:26:BA
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/PnMiqoNya2uq647AXQjujQeBJro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.183.0/24
94.199.7.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b2:f4:10:e8:22:40:dd:d0:17:7f:79:a7:72:90:eb:3f:59:
66:cf:9a:d8:a4:df:d6:c0:32:eb:29:29:23:0d:c1:73:10:b2:
6d:11:0c:9d:3d:13:d7:82:45:30:d0:9f:1d:4c:b7:b6:7e:10:
35:64:5c:8c:d7:53:73:62:42:e0:11:d6:a7:19:17:60:2e:d0:
7a:c3:e9:aa:c1:13:26:ed:10:e3:d1:46:21:8c:93:c0:7a:5c:
92:6e:c0:1f:36:1c:f1:4b:9d:c8:97:a7:41:0b:c7:0c:82:ae:
9c:2d:93:bc:87:f3:a2:ff:0a:6e:8b:06:bb:ae:23:d7:77:0b:
4c:fa:74:48:03:49:cb:ae:b4:cc:5c:19:23:8e:ca:4b:38:f5:
ed:55:19:a3:8f:04:a9:c0:80:90:26:ff:bd:ca:cf:a6:57:55:
f9:ed:d2:fb:5e:ee:ae:8d:cb:ae:94:e1:10:9a:df:f2:43:59:
24:ae:a7:88:54:1a:81:a8:b7:bf:b5:89:e2:d1:46:af:c5:8e:
79:5e:59:ac:23:23:77:e7:22:53:89:a1:d5:75:4c:8d:1e:32:
11:69:05:5d:20:dd:15:1a:6f:04:32:7f:73:8f:32:39:3c:0b:
d3:70:41:32:4d:08:da:ea:d2:f1:b7:fb:2d:94:30:3a:6e:15:
39:b2:45:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:06 2024 by rpki-client on console-fra.rpki-client.org