Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/PmZqVv0TKYZOOGyTTolYEBDaTG0.roa
File: PmZqVv0TKYZOOGyTTolYEBDaTG0.roa (raw, json)
Hash identifier: DBnCR9VYIRndJb5zxELTVOeuiWxV+iNcjGlFosa1dBc=
Subject key identifier: 3E:66:6A:56:FD:13:29:86:4E:38:6C:93:4E:89:58:10:10:DA:4C:6D
Certificate issuer: /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Certificate serial: 01856FE7153ADE75B5E4287289E9D07EB2CE
Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/PmZqVv0TKYZOOGyTTolYEBDaTG0.roa
Signing time: Mon 02 Jan 2023 00:34:53 +0000
ROA not before: Mon 02 Jan 2023 00:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60087
IP address blocks: 89.40.172.0/22 maxlen: 24
81.28.8.0/22 maxlen: 24
46.252.144.0/20 maxlen: 24
86.107.96.0/22 maxlen: 24
185.31.64.0/22 maxlen: 24
2a03:a500::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:15:3a:de:75:b5:e4:28:72:89:e9:d0:7e:b2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Validity
Not Before: Jan 2 00:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e666a56fd1329864e386c934e89581010da4c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:95:ef:be:e4:9c:fb:2a:22:ab:1e:d7:b8:9e:
ad:22:21:e3:df:37:dc:cc:f3:bd:48:60:40:7f:43:
5d:6b:de:64:24:07:32:7e:4b:d9:b1:c7:c9:4a:39:
fd:34:00:1b:41:4f:9b:a6:c1:bf:eb:61:25:aa:49:
2f:24:1e:5d:cb:4b:25:0a:a6:7e:32:b4:70:4a:03:
8b:26:40:b3:b1:de:64:e1:6d:9e:bd:6b:c9:96:a8:
1c:98:1e:7b:7b:27:a0:48:fe:91:42:da:4d:ac:41:
53:01:5f:02:cf:c6:d0:7f:1e:fa:dd:32:20:eb:c7:
59:82:99:1e:23:8d:fe:9b:1c:13:bc:5e:80:eb:ee:
f0:05:e1:fd:7e:68:d0:c3:2d:7e:fc:ba:56:f3:d9:
d4:ef:a5:fd:8f:05:27:95:10:d5:c5:55:1e:89:2e:
db:d8:a1:85:81:31:92:4f:51:73:d9:bb:d9:a3:f9:
53:b8:ea:37:f3:a5:07:f5:99:a6:db:20:22:33:03:
5d:f8:cd:67:be:90:99:c9:8e:ea:b2:2c:e0:55:ce:
14:32:b8:f7:0b:cd:a5:df:d1:7e:24:93:d6:82:7e:
d5:31:16:34:54:50:79:83:2e:1f:98:9b:8a:8d:92:
0a:4c:70:21:79:c9:c1:da:2b:5c:d2:d8:cb:44:41:
ab:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:66:6A:56:FD:13:29:86:4E:38:6C:93:4E:89:58:10:10:DA:4C:6D
X509v3 Authority Key Identifier:
keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/PmZqVv0TKYZOOGyTTolYEBDaTG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.144.0/20
81.28.8.0/22
86.107.96.0/22
89.40.172.0/22
185.31.64.0/22
IPv6:
2a03:a500::/32
Signature Algorithm: sha256WithRSAEncryption
30:88:8e:30:25:82:d4:c7:17:e6:6b:68:e9:a5:ad:8e:5a:b1:
35:bd:d7:7e:8f:fd:78:d1:1a:a4:4d:16:87:f4:9d:72:cf:49:
cb:07:f5:5a:5e:8c:ce:7d:00:60:8a:dd:6f:34:6d:32:25:65:
eb:25:4a:dd:00:d8:d2:ba:9b:37:2d:eb:c2:3b:df:a2:ce:32:
c5:c2:68:55:ac:a4:dd:27:90:48:87:4b:9a:13:78:18:43:c7:
7e:84:c7:ca:d6:7a:2e:9a:ec:9f:b0:67:e0:a1:d3:fb:5e:d9:
1b:72:ee:bd:a2:53:ce:e1:d9:09:1f:cc:b7:8d:66:23:1e:58:
ff:77:92:a9:73:f5:d9:00:68:53:56:78:81:06:3f:89:1b:da:
7c:0f:01:08:d5:5d:0f:49:bf:7d:22:ff:c1:c2:2b:14:17:5e:
53:9c:82:f9:ac:2f:44:85:ef:1c:78:40:fe:dc:c9:43:22:ca:
9d:f1:15:d8:db:e0:7d:48:3b:73:97:f0:24:72:3c:8f:83:9f:
33:1e:10:9e:01:97:4a:75:5b:13:4e:31:fc:e4:74:6b:eb:76:
a7:f8:b9:39:f6:f3:9e:a0:63:f3:d7:4d:a5:c3:8f:c5:ae:14:
e1:37:78:82:84:70:09:b8:30:a3:78:3d:87:a7:18:a2:bf:94:
9f:90:0b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:25 2024 by rpki-client on console-ams.rpki-client.org