Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/PcSmC6PJuJNTZvJhD30YVkp7DP4.roa
File: PcSmC6PJuJNTZvJhD30YVkp7DP4.roa (raw, json)
Hash identifier: gEqmsoDaVGgpAk++JUFkDBCTmbH0kKCCN9sKrC1jREg=
Subject key identifier: 3D:C4:A6:0B:A3:C9:B8:93:53:66:F2:61:0F:7D:18:56:4A:7B:0C:FE
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0185D0CDF6E106C1E48F6A7039BD622B6BCA
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/PcSmC6PJuJNTZvJhD30YVkp7DP4.roa
Signing time: Fri 20 Jan 2023 20:10:37 +0000
ROA not before: Fri 20 Jan 2023 20:10:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 188.191.104.0/24 maxlen: 24
188.191.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Feb 2023 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d0:cd:f6:e1:06:c1:e4:8f:6a:70:39:bd:62:2b:6b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 20 20:10:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dc4a60ba3c9b8935366f2610f7d18564a7b0cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:fa:1e:4c:5a:4d:1f:c4:9a:1c:9e:de:69:
71:b0:35:37:34:de:bb:61:13:e4:87:df:da:7d:18:
a1:43:d4:92:37:df:96:05:b8:91:c2:d9:ec:fd:3e:
e3:a0:3b:3c:bf:8d:2e:a0:6d:23:ba:62:4a:31:7f:
cd:cf:83:99:5a:18:b6:61:71:26:0f:d0:82:8f:d8:
3c:18:7a:1f:14:d1:d1:1f:b4:25:fd:23:f3:4c:f4:
92:c8:5f:4d:ed:77:0e:b1:ac:87:78:b0:2e:4e:51:
ec:34:40:13:9b:52:24:aa:8b:81:08:77:08:ef:92:
c5:57:d7:d9:92:69:7c:42:7e:aa:60:ee:af:8f:3b:
0d:09:70:1f:b7:1c:84:26:6c:ed:63:83:e0:39:65:
4d:3f:84:ff:b9:11:5d:a8:37:f6:ab:a4:53:08:dc:
df:1d:1e:5d:c8:7e:48:ad:fc:26:5c:f3:50:08:cf:
b8:a4:f9:d9:48:73:31:2c:85:8c:7b:17:e8:97:be:
8d:19:81:98:31:f6:5b:5c:a8:01:dc:a0:4a:17:b6:
19:c1:35:09:eb:37:71:9a:68:40:4c:53:c6:8c:f0:
eb:9b:df:42:24:b5:06:7d:fb:a9:56:0b:02:33:43:
62:ec:20:c7:f1:26:54:d2:83:df:a0:27:3f:5b:c8:
ac:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C4:A6:0B:A3:C9:B8:93:53:66:F2:61:0F:7D:18:56:4A:7B:0C:FE
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/PcSmC6PJuJNTZvJhD30YVkp7DP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.104.0/24
188.191.106.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:55:67:38:5e:0d:1d:02:b7:ec:63:77:3e:b6:f8:0f:3d:83:
61:c4:25:85:29:1b:74:c1:02:4e:db:80:72:8b:4b:06:bd:15:
a6:eb:c5:9c:1f:3c:d1:21:01:9d:99:06:1c:d1:b2:af:10:b4:
d9:f8:80:c8:0a:85:c6:eb:0e:ca:70:ff:2f:4e:56:00:97:e8:
19:a9:98:17:3a:db:4c:b3:84:c8:ae:5a:7c:ff:ef:8d:6d:89:
f6:5a:8a:59:bf:e3:7e:08:85:e6:77:2f:90:c8:aa:e1:67:6d:
82:9f:29:56:92:35:1b:b8:3e:2b:11:19:e9:47:cc:57:01:ee:
29:94:86:da:eb:4e:ad:88:ca:0a:9e:d2:9f:2d:10:79:47:aa:
d1:54:d6:d1:50:03:9f:f1:68:0c:2a:54:5c:dd:5d:04:c5:d1:
dd:2e:5c:77:52:38:d8:fd:ed:54:2f:03:36:96:d7:02:5b:7b:
07:69:69:7d:3e:56:10:01:97:ed:48:71:a1:a9:4f:dc:25:68:
ef:e9:3d:0b:92:43:50:3c:7e:0b:e9:99:f9:74:b9:11:7d:e0:
cb:f8:e0:2b:63:2d:ad:4f:68:90:25:82:53:8d:ed:3f:b1:ee:
c3:3d:61:e5:a1:de:28:b7:8d:d5:5e:9f:47:96:76:a8:9a:20:
1e:1f:ea:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org