Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pgMrStHgOJhioLlnH7Z-KsFtKB4.roa
File: pgMrStHgOJhioLlnH7Z-KsFtKB4.roa (raw, json)
Hash identifier: sEpB107ir6alYYciQEto9SoWtnd7Erep8bGPiIqS6Uo=
Subject key identifier: A6:03:2B:4A:D1:E0:38:98:62:A0:B9:67:1F:B6:7E:2A:C1:6D:28:1E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01859A7DE230CB016849FA520ABB91074712
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pgMrStHgOJhioLlnH7Z-KsFtKB4.roa
Signing time: Tue 10 Jan 2023 07:03:39 +0000
ROA not before: Tue 10 Jan 2023 07:03:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 86.107.168.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Jan 2023 10:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:7d:e2:30:cb:01:68:49:fa:52:0a:bb:91:07:47:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 10 07:03:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6032b4ad1e0389862a0b9671fb67e2ac16d281e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6b:73:21:8b:7b:00:09:10:7e:14:8b:d7:cf:
37:78:5b:19:ba:7a:03:2a:51:85:60:88:da:7c:9a:
bc:6d:19:5d:79:6a:6b:b4:b8:71:43:e5:a6:c6:41:
d4:b6:73:54:d2:75:c0:ed:38:87:6d:0f:4b:ca:b0:
59:4d:e8:e9:42:83:f3:0c:9f:5d:c9:86:a9:88:d9:
c4:50:72:32:d6:59:32:60:97:8c:62:be:af:ce:25:
43:86:dd:b4:8c:4d:15:75:7d:f6:78:38:83:dd:e4:
4a:fc:33:df:39:1c:d6:94:ab:a5:8e:6c:22:95:92:
f4:0d:63:4e:d4:45:d3:da:2c:4e:3f:e9:d8:83:fd:
5c:f3:4b:4e:77:c4:5c:4d:e5:34:6f:5f:94:c7:40:
10:6a:7a:22:b4:74:a9:ef:55:03:38:92:80:9a:cb:
a3:01:b2:62:79:9c:30:99:40:35:78:71:6b:c5:73:
27:8f:bd:b3:1d:25:cb:73:9a:3c:f3:74:83:ee:b6:
fe:96:ac:1d:73:fe:43:10:77:de:3d:da:62:16:d5:
4d:1c:ef:21:19:83:72:44:f7:a3:be:72:f3:4e:a7:
30:e8:09:d5:a1:f2:cb:40:28:ef:57:58:ae:19:47:
35:17:e6:06:11:3c:7e:36:df:b3:b6:37:b7:3f:bd:
31:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:03:2B:4A:D1:E0:38:98:62:A0:B9:67:1F:B6:7E:2A:C1:6D:28:1E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pgMrStHgOJhioLlnH7Z-KsFtKB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
86.107.168.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f1:08:cd:bb:29:f0:41:67:87:90:42:8d:3d:17:f0:5a:b5:
51:46:80:97:9c:62:c0:d2:39:9e:c8:0e:86:52:35:ef:1b:87:
55:54:0b:5e:ff:3c:35:44:a6:87:40:b0:2a:91:c1:e0:17:e0:
34:a0:6f:ca:39:8a:9a:1f:74:b4:8d:29:f0:d6:8d:cd:7d:1f:
0a:86:65:83:bf:d2:d5:47:e6:d3:36:70:96:13:cb:25:6c:ae:
84:ec:52:9d:1d:7b:6d:2b:a6:05:b8:72:41:ef:df:ed:bc:11:
8d:08:25:3b:62:b0:a4:55:91:84:d1:be:7f:cb:0f:ff:02:17:
68:e0:c7:72:f5:51:29:a7:3a:7d:ff:26:0e:a4:b1:78:f5:42:
9a:3a:6d:00:85:4d:53:57:35:8b:ce:11:3e:52:8d:c0:14:d0:
ae:60:a0:a1:bd:76:83:c4:02:c3:69:ab:2b:fd:3d:96:4d:f0:
00:a2:62:05:fe:5e:17:96:15:13:7b:63:6f:bd:33:b2:ac:28:
92:f7:66:3a:23:c6:45:0e:6a:b0:4b:87:97:cc:db:6a:d6:3c:
ec:71:da:b8:09:67:e3:37:fe:d5:59:d2:1f:40:58:84:1c:e0:
33:c4:cb:f5:53:84:28:98:fd:21:db:2a:01:f0:0e:ed:31:9d:
60:83:06:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org