Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/PO-pWRkRFaXUzBtQfN9R6sjqcvY.roa
File: PO-pWRkRFaXUzBtQfN9R6sjqcvY.roa (raw, json)
Hash identifier: YQlaQCKElNaFt7/N5sz8eXZqd0rMAuPL9gHw189P+dA=
Subject key identifier: 3C:EF:A9:59:19:11:15:A5:D4:CC:1B:50:7C:DF:51:EA:C8:EA:72:F6
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CE918B9C102AA110B89311C217DEEC6EB
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/PO-pWRkRFaXUzBtQfN9R6sjqcvY.roa
Signing time: Mon 08 Jan 2024 12:42:40 +0000
ROA not before: Mon 08 Jan 2024 12:42:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14315
IP address blocks: 82.115.0.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 11:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:18:b9:c1:02:aa:11:0b:89:31:1c:21:7d:ee:c6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 8 12:42:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cefa959191115a5d4cc1b507cdf51eac8ea72f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:42:2b:85:8f:17:09:0e:09:c7:37:48:04:a3:
d5:8f:ad:9c:45:ec:1e:e8:1e:7b:14:32:b5:fd:5a:
d2:72:59:06:50:ba:2e:09:0e:63:34:06:4f:ac:b2:
78:d8:f6:c2:49:44:78:1a:32:46:20:cb:1e:ec:38:
c4:e7:7d:9a:6f:c9:2d:58:6f:45:d0:cd:5c:ca:b8:
23:e3:a2:1a:f2:68:03:7d:16:16:c1:b5:b3:f3:90:
29:27:f2:1a:a6:de:e7:28:ca:26:35:24:e0:af:2a:
7b:d7:c3:6e:67:b2:cf:c3:82:3f:2b:99:1d:94:8f:
c0:12:eb:c6:5f:82:a9:05:b4:4c:12:86:ba:de:60:
17:49:e0:02:b4:90:b0:47:8f:97:96:f1:c5:07:1b:
0d:9b:3d:da:a7:87:33:8e:53:c0:b4:3c:ff:fa:e5:
ac:eb:65:28:ff:a0:98:a6:79:27:d7:c6:4b:17:fa:
7c:42:e4:51:af:70:57:03:a4:38:05:c1:17:d2:f6:
9a:47:22:8e:f2:e2:2c:01:a4:b1:be:c1:9a:fc:d2:
83:50:53:54:01:33:15:12:32:81:f2:f0:4c:39:19:
6b:e8:26:a8:f0:d1:9b:f7:5d:ce:3a:2f:7b:04:5b:
74:a4:ef:db:47:69:0a:3d:1a:53:55:29:53:60:cb:
61:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EF:A9:59:19:11:15:A5:D4:CC:1B:50:7C:DF:51:EA:C8:EA:72:F6
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/PO-pWRkRFaXUzBtQfN9R6sjqcvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.0.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:b1:3e:63:8e:0c:af:47:c1:98:02:bf:cd:5e:48:09:6e:fc:
df:da:1b:63:17:c4:42:00:1b:39:58:61:38:7d:a9:83:a9:d1:
6f:92:97:e8:a8:5d:fa:ba:e9:08:50:66:90:49:f9:68:55:d3:
d6:d5:b2:6b:81:2d:a8:66:f3:44:0b:c3:6d:b3:ef:f6:71:b7:
bd:40:44:8f:2b:5a:64:ae:49:9b:7e:7d:9f:75:58:59:01:04:
51:79:91:c8:3c:16:7d:d1:d8:46:8e:2d:35:58:1b:d7:a7:8d:
1c:ba:97:5c:b3:82:a1:0d:5a:7a:97:fe:3e:36:ce:e6:2f:7c:
7b:ce:72:97:32:6d:33:74:ef:4e:29:97:e7:ba:fd:57:23:48:
db:74:cb:02:1b:96:ec:02:f9:73:c8:f3:c1:f7:83:2f:26:fb:
9b:b3:0f:2c:20:33:da:b0:46:af:55:54:e6:55:f0:3d:40:c3:
01:77:b2:37:28:c0:fb:b5:97:3a:e7:45:51:2b:46:be:a3:af:
b3:63:a8:b5:df:af:7a:df:6c:5d:f8:89:87:0b:3f:51:57:be:
41:9e:28:87:2e:39:b7:1a:da:d4:f1:57:1b:76:32:80:91:53:
d9:a7:a3:e8:60:d3:3e:2d:e8:1b:26:f9:bf:47:67:74:8d:d5:
c7:11:f7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 15:08:18 2024 by rpki-client on console-fra.rpki-client.org