Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/PNcFxiETyeytc2oemjtPqKBFmaw.roa
File: PNcFxiETyeytc2oemjtPqKBFmaw.roa (raw, json)
Hash identifier: EPCGOBgeKaeAljcx0usHXWNbbGc1s2qENaridY1jH5A=
Subject key identifier: 3C:D7:05:C6:21:13:C9:EC:AD:73:6A:1E:9A:3B:4F:A8:A0:45:99:AC
Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial: 0185723A31B4BFD2C41F4D8548F047CE27C0
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/PNcFxiETyeytc2oemjtPqKBFmaw.roa
Signing time: Mon 02 Jan 2023 11:24:54 +0000
ROA not before: Mon 02 Jan 2023 11:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211215
IP address blocks: 45.128.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:31:b4:bf:d2:c4:1f:4d:85:48:f0:47:ce:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Validity
Not Before: Jan 2 11:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cd705c62113c9ecad736a1e9a3b4fa8a04599ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:66:20:8f:bf:47:a4:5d:58:59:1d:0f:4b:
90:a0:39:25:ae:68:0a:31:41:ee:90:57:ed:56:ca:
63:7b:34:6d:55:ab:04:2a:67:b5:78:1c:22:e1:83:
ac:32:09:70:da:ac:5e:0e:5a:2a:5b:ef:ad:24:42:
29:ae:48:fd:9c:81:78:18:ca:e8:5b:c2:5a:10:34:
75:c6:d5:be:bc:95:26:92:49:cf:b3:75:70:e7:eb:
46:92:7f:f1:84:9f:88:77:9e:6b:7b:f2:9c:80:3d:
bc:e4:2e:77:21:f9:94:6f:f1:55:db:9e:ac:b5:2b:
b4:1a:59:13:e5:d4:dd:d1:f4:18:ab:b5:3b:84:08:
41:06:be:bc:6d:8d:83:6a:22:c7:2d:77:fd:a8:ab:
a8:db:08:9c:c6:f9:8b:f4:20:e5:ee:67:57:c5:5e:
ad:96:1b:32:94:16:92:ca:dd:a8:b2:bc:a3:db:94:
7e:cf:97:db:bd:4d:3d:b5:d9:38:49:41:9e:f7:13:
a9:e2:82:ac:99:37:e9:7d:ce:09:4e:b0:ae:9f:4b:
c1:2e:eb:54:69:ee:af:73:e9:64:b2:b6:ab:ee:e5:
1c:8b:46:6c:8f:e9:1e:37:5e:98:b3:5c:27:30:c7:
f7:b6:d5:84:f7:e9:9b:9f:91:51:5e:e4:be:14:0c:
ff:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D7:05:C6:21:13:C9:EC:AD:73:6A:1E:9A:3B:4F:A8:A0:45:99:AC
X509v3 Authority Key Identifier:
keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/PNcFxiETyeytc2oemjtPqKBFmaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.224.0/22
Signature Algorithm: sha256WithRSAEncryption
df:40:f0:7b:fe:ec:16:b2:d7:b3:1c:8f:5a:6f:bf:b9:03:e1:
ba:44:31:06:fd:12:91:29:59:9b:47:b5:30:ef:d0:2f:02:55:
55:94:cd:ab:86:c2:8e:8a:2b:98:ce:24:62:2b:fe:92:ba:23:
4f:69:4a:80:da:27:17:b6:d4:7b:68:95:37:4b:9b:00:31:a2:
e2:93:21:e8:e1:df:ee:db:c8:5a:a6:d6:8b:1b:5e:5d:fa:65:
f8:2e:0e:b2:3d:0e:19:b0:be:56:1f:82:20:b6:1b:db:5a:fd:
bd:a5:61:c6:1c:da:1e:34:c6:a0:5a:55:ee:5e:b4:67:16:a8:
53:be:b3:2d:ec:02:7a:18:a3:b8:49:a5:08:1d:64:3a:39:fd:
e0:3f:c3:8e:08:79:0c:76:98:cf:0f:86:9b:89:9b:2d:6a:ea:
47:5e:a0:e8:c6:ce:92:36:c1:a0:ef:42:dd:0f:8b:ba:59:4f:
b1:73:57:f5:dc:00:24:d7:f9:66:29:23:56:da:ed:62:5e:bc:
84:8c:4d:4a:93:6e:d2:cd:70:05:69:1f:db:68:8a:93:ab:b3:
47:44:2e:81:f2:a1:ee:0c:33:c8:50:8f:67:03:a3:37:79:6e:
8e:9f:7e:bb:a7:13:f1:04:bb:2c:92:9d:6b:4a:30:1b:b3:8c:
ce:37:e7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:18 2024 by rpki-client on console-ams.rpki-client.org