Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/PPmVInDOJozQiUjVN3shKyT-Q7Y.roa
File: PPmVInDOJozQiUjVN3shKyT-Q7Y.roa (raw, json)
Hash identifier: xpa9FT+NJr57QnVBJdMmFQtd/UWRoThJW201yc4YW6w=
Subject key identifier: 3C:F9:95:22:70:CE:26:8C:D0:89:48:D5:37:7B:21:2B:24:FE:43:B6
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 018CC64B62A75F47E1C87833E7BDDDBC505C
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/PPmVInDOJozQiUjVN3shKyT-Q7Y.roa
Signing time: Mon 01 Jan 2024 18:31:18 +0000
ROA not before: Mon 01 Jan 2024 18:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42398
IP address blocks: 185.193.58.0/24 maxlen: 24
185.193.57.0/24 maxlen: 24
185.193.56.0/24 maxlen: 24
185.193.56.0/22 maxlen: 22
185.193.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:62:a7:5f:47:e1:c8:78:33:e7:bd:dd:bc:50:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Jan 1 18:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cf9952270ce268cd08948d5377b212b24fe43b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:8b:6d:34:f0:df:46:c8:f7:9e:9b:6b:0f:
0d:f8:22:3b:48:a4:c3:04:48:bd:9f:3e:72:7e:bb:
8b:7c:c2:d3:d7:36:45:3e:79:03:c0:27:54:e2:0e:
6f:cc:49:8b:c4:0c:10:0b:03:3e:24:7c:0e:2f:19:
4e:20:da:2d:f7:e6:01:8a:a4:97:99:31:82:f3:25:
ee:b8:38:77:c7:4a:0f:ab:2e:45:a7:0d:3e:ea:1b:
cb:d4:0a:5c:05:c0:68:53:14:d0:93:bb:e7:df:b1:
c8:99:60:d4:65:a5:87:ce:84:be:8b:5a:62:73:e6:
53:b7:48:02:34:30:10:6c:9c:33:1c:9c:ba:ba:4b:
d9:80:af:82:d3:fe:a3:9a:b9:06:d7:1d:81:fa:4e:
73:25:fc:c2:7e:af:91:32:5b:63:25:6c:7e:5c:10:
0d:70:75:cf:cb:9c:b0:86:62:98:48:6a:04:64:0b:
06:cb:87:bb:4f:df:62:ad:21:06:59:4d:a8:63:ab:
3a:37:24:e2:2a:e7:96:cf:03:eb:b4:a7:d9:91:19:
88:b8:ba:58:21:2f:71:64:72:c7:8a:95:2c:f6:13:
48:0e:63:d2:83:54:cb:07:f1:6f:b5:98:46:54:62:
f1:d8:b5:1a:ea:ab:1a:58:5b:d1:ac:97:d7:33:39:
00:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F9:95:22:70:CE:26:8C:D0:89:48:D5:37:7B:21:2B:24:FE:43:B6
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/PPmVInDOJozQiUjVN3shKyT-Q7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.56.0/22
Signature Algorithm: sha256WithRSAEncryption
15:e0:2f:5e:5c:ab:b3:0e:27:3c:2b:19:e8:4e:70:96:78:90:
fc:0e:bd:1c:78:c1:04:fd:a7:1e:82:57:46:be:76:88:a5:9b:
ad:83:87:7b:a5:c5:c7:5a:5d:84:fe:77:64:e9:ae:7d:07:d6:
eb:b6:db:99:72:c1:83:6d:e0:5f:b3:81:8e:ef:45:3a:d7:84:
52:0a:43:57:ee:ea:52:84:9e:ec:73:1f:9d:bf:74:7d:09:1a:
c0:86:52:9a:fc:ce:73:a1:d1:4a:c4:6e:22:e8:fa:32:2d:f2:
2e:0b:de:3c:23:4a:9d:c4:ca:13:fd:1a:6e:6a:a5:95:4d:09:
2e:c7:b3:72:b5:6f:4d:55:0a:ba:43:c3:ff:77:2b:a4:80:69:
e1:f4:49:08:01:c1:cd:8e:4c:36:39:0c:0c:76:36:a8:9f:d1:
a7:50:a1:6d:37:f7:7e:93:48:10:2c:20:ae:16:00:67:4f:bb:
65:09:95:8f:80:c4:ac:aa:4c:77:18:bf:d6:ef:bf:2f:8d:db:
6b:09:b4:67:c2:09:bd:90:d6:49:ac:8b:de:77:47:3a:9d:72:
00:a4:e0:5f:bb:52:3d:46:50:b1:c8:fa:77:c8:69:b2:ac:b9:
3b:a0:a0:82:ce:61:a1:68:98:4c:c3:12:85:94:82:e6:1d:c1:
d7:a2:99:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:18 2025 by rpki-client