Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PG97BUkarFwIpeeeflsMyFZ0DNs.roa
File: PG97BUkarFwIpeeeflsMyFZ0DNs.roa (raw, json)
Hash identifier: hlj+2WbMAB/iECBxQLfKwjJFjJd9G5cGqPKTlr27M7Q=
Subject key identifier: 3C:6F:7B:05:49:1A:AC:5C:08:A5:E7:9E:7E:5B:0C:C8:56:74:0C:DB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C7C2B10E714BCB5EAF46F3DDF4B657AD6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PG97BUkarFwIpeeeflsMyFZ0DNs.roa
Signing time: Mon 18 Dec 2023 09:04:06 +0000
ROA not before: Mon 18 Dec 2023 09:04:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 89.34.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 03:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:2b:10:e7:14:bc:b5:ea:f4:6f:3d:df:4b:65:7a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 18 09:04:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c6f7b05491aac5c08a5e79e7e5b0cc856740cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0e:e9:23:cb:46:5e:46:ef:63:74:60:47:30:
d0:9c:5f:b9:de:08:fd:0f:be:19:77:41:ee:09:93:
05:6e:11:2f:f9:73:6e:1e:24:82:07:98:75:51:fd:
24:cb:7e:8a:d7:24:8d:21:56:30:66:a3:45:97:17:
92:e8:eb:65:0f:5f:16:a4:af:ca:1e:2c:d4:4f:59:
2b:ae:49:22:37:ab:37:3e:b0:0f:d2:fe:05:2e:b9:
8a:e3:af:83:6c:b4:c7:64:ad:f0:d7:e3:36:c4:66:
19:9b:e5:d7:86:8c:57:b4:0b:13:af:65:d4:31:39:
98:08:2f:7b:29:ea:52:30:6f:63:90:b2:8b:fa:e2:
06:7f:b4:99:a6:77:3f:38:71:d7:a7:5f:8e:49:b4:
fc:2c:d3:f2:30:0b:15:9b:a4:7c:0a:6b:17:62:d4:
8a:0a:83:c0:87:8a:e2:3a:4b:7a:12:39:f7:1f:df:
55:24:9d:78:b2:f8:22:b8:f5:e1:a6:e7:ea:a1:14:
52:0b:6a:d5:dd:b7:97:7a:4f:4c:a7:dd:1f:f9:b3:
98:e1:37:39:f0:17:c5:57:cc:7f:2b:28:ae:a8:aa:
af:77:94:60:aa:88:44:a9:27:d6:d1:b4:bd:2f:72:
e8:2a:2a:6f:ed:28:3d:bf:36:8c:53:b1:01:6c:86:
2d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6F:7B:05:49:1A:AC:5C:08:A5:E7:9E:7E:5B:0C:C8:56:74:0C:DB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PG97BUkarFwIpeeeflsMyFZ0DNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.219.0/24
Signature Algorithm: sha256WithRSAEncryption
49:3d:df:36:46:ee:c8:56:aa:a3:e4:a9:72:5a:d0:d2:a2:ce:
88:f0:c9:b2:5c:2f:d4:49:c0:23:75:de:ed:5a:c4:41:0f:16:
76:68:50:63:87:f2:aa:b3:6b:43:47:b7:39:1d:17:a6:5f:18:
c4:5c:01:88:c4:eb:e5:1a:1b:39:23:61:90:a6:e5:1a:f6:24:
60:50:eb:f9:a2:cf:3d:f3:ea:a5:9d:41:2a:18:b6:4e:68:51:
38:3c:ad:0c:be:c1:1b:56:3d:73:ed:6f:a6:d0:51:2c:1f:cc:
8c:5c:bb:b8:0f:c0:fc:ce:e0:ea:b1:4d:49:28:94:66:59:b3:
00:68:97:e1:55:37:94:79:b1:ca:86:75:d5:d8:0a:6a:0b:73:
78:5c:52:ed:ee:9f:ee:78:fd:7d:01:43:a0:ef:75:34:dc:03:
c8:7c:57:54:14:e1:ee:de:df:23:ec:d8:d4:95:1d:a2:ae:32:
20:64:d7:bf:53:de:96:12:08:29:73:0c:16:ed:92:d9:24:8b:
a7:ff:ae:1d:c5:cd:fc:ba:e0:99:9b:1b:78:f6:29:68:2b:46:
b6:3b:79:a9:63:12:e9:10:c6:16:92:f6:b4:6d:cf:f7:05:ab:
c4:f6:8f:f2:ce:73:b8:9b:dc:74:63:81:42:4a:78:cb:a2:81:
36:94:b2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org