Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/PKjhir4JVU-ZReyxx6TPce_6NvU.roa
File: PKjhir4JVU-ZReyxx6TPce_6NvU.roa (raw, json)
Hash identifier: ChCeLDnljLzsoaGAyGRXk6rtYKYQLWn2vx4hRlKcIHc=
Subject key identifier: 3C:A8:E1:8A:BE:09:55:4F:99:45:EC:B1:C7:A4:CF:71:EF:FA:36:F5
Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial: 01857169A2128A11010D2665189667122F7D
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/PKjhir4JVU-ZReyxx6TPce_6NvU.roa
Signing time: Mon 02 Jan 2023 07:37:06 +0000
ROA not before: Mon 02 Jan 2023 07:37:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41090
IP address blocks: 194.69.206.0/24 maxlen: 24
194.62.174.0/24 maxlen: 24
194.62.188.0/24 maxlen: 24
194.62.233.0/24 maxlen: 24
2a0f:ad40::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:a2:12:8a:11:01:0d:26:65:18:96:67:12:2f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Validity
Not Before: Jan 2 07:37:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ca8e18abe09554f9945ecb1c7a4cf71effa36f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:70:20:16:c4:f7:35:6d:47:8c:c7:d8:08:08:
41:9e:5e:c8:d7:0a:34:41:64:05:89:bf:15:4c:a4:
d1:84:8f:3a:ec:ed:31:0b:97:69:c1:f9:ce:56:12:
ad:13:76:b3:57:a3:b8:b3:74:f4:28:db:2d:30:8d:
9c:da:73:e9:8a:93:c0:a0:03:6d:33:4d:96:3f:53:
97:de:e6:6f:dd:db:8a:64:01:03:6d:81:4e:eb:f5:
1b:76:91:65:68:a1:af:cf:09:59:e7:b1:eb:80:db:
fe:c0:e0:f1:0b:d2:6c:cf:c1:31:f0:9b:f8:c1:75:
2a:88:db:a5:6d:53:2b:a4:98:1d:2d:f3:3d:19:2d:
59:42:11:1f:b4:be:0c:da:02:3e:be:49:92:20:a4:
4c:05:a7:95:da:63:a5:8d:62:95:ab:0f:de:77:f2:
7a:27:80:d4:8f:8d:65:e0:47:3e:f1:1d:4f:bf:1d:
04:e0:17:84:a4:5f:57:c0:ef:c4:71:ee:5a:a3:ce:
79:f3:7c:d1:50:b2:62:28:07:a3:45:f5:50:1b:fa:
6b:13:81:d0:c6:af:8d:7b:52:67:5d:93:90:22:8c:
13:c7:18:05:36:34:84:79:43:28:dc:81:04:50:92:
8e:d0:f0:f6:76:18:68:01:f3:cf:4f:54:4c:e9:fa:
ff:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A8:E1:8A:BE:09:55:4F:99:45:EC:B1:C7:A4:CF:71:EF:FA:36:F5
X509v3 Authority Key Identifier:
keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/PKjhir4JVU-ZReyxx6TPce_6NvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.174.0/24
194.62.188.0/24
194.62.233.0/24
194.69.206.0/24
IPv6:
2a0f:ad40::/32
Signature Algorithm: sha256WithRSAEncryption
99:e9:92:b3:65:8e:4b:a9:0b:1e:c4:b5:c8:78:d7:1e:63:5a:
b4:a1:26:91:fe:bf:07:b1:f1:12:72:5c:db:20:8d:ba:a6:e2:
c0:0c:08:6e:3e:fa:69:e7:69:b3:d1:1d:9f:5b:91:c3:df:58:
3d:a4:74:ba:31:57:56:3c:ea:49:05:7b:7e:e2:1c:b6:16:25:
ac:4b:9a:dc:6a:92:c3:ba:0c:78:01:43:0f:53:f0:f2:7c:bf:
d2:46:51:7f:45:14:c3:fc:75:56:98:12:aa:1c:10:17:32:36:
26:35:93:62:8a:18:ea:20:0d:47:ab:53:ad:0d:35:70:43:89:
7f:3d:c1:a0:33:1b:c3:36:04:c9:0b:d2:dd:f0:8c:de:7a:45:
43:27:9a:4a:7d:ea:ff:42:11:64:5e:d6:5e:7a:bc:78:9f:09:
5d:5f:aa:3a:ab:50:f2:9c:d1:e1:54:a3:b8:a7:fb:e5:38:30:
56:8e:b9:43:70:2f:07:63:d3:b6:54:37:7d:ff:12:2b:b0:69:
94:ce:4c:9d:68:8c:8c:2c:ad:84:7c:06:3b:8e:e8:58:b1:f0:
20:4c:c8:93:79:73:79:bb:1d:3c:73:bf:82:01:e4:d8:89:6b:
c2:d5:be:b2:27:90:62:48:a8:1f:9e:65:e3:75:b3:52:ea:8f:
66:76:00:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:41 2024 by rpki-client on console-ams.rpki-client.org