Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/PXs-RKZZJkpXG2xsQi1X3FQctxE.roa
File: PXs-RKZZJkpXG2xsQi1X3FQctxE.roa (raw, json)
Hash identifier: THiOUO0pFylp5CWSPoizxOYgw4WoG3BgX+Illlf77AA=
Subject key identifier: 3D:7B:3E:44:A6:59:26:4A:57:1B:6C:6C:42:2D:57:DC:54:1C:B7:11
Certificate issuer: /CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Certificate serial: 01856ED4992422EAEEC9A98DE50F672532D4
Authority key identifier: DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/PXs-RKZZJkpXG2xsQi1X3FQctxE.roa
Signing time: Sun 01 Jan 2023 19:35:04 +0000
ROA not before: Sun 01 Jan 2023 19:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34756
IP address blocks: 194.105.150.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:99:24:22:ea:ee:c9:a9:8d:e5:0f:67:25:32:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Validity
Not Before: Jan 1 19:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d7b3e44a659264a571b6c6c422d57dc541cb711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:45:54:82:7d:cf:72:95:1a:ae:5e:44:76:a9:
05:91:10:81:85:73:2e:84:67:94:07:37:aa:ce:d5:
7e:c8:e8:58:ae:6d:11:0f:51:2a:ed:9c:92:02:8f:
06:c3:7c:7b:d1:62:5a:6b:44:20:ee:dc:29:14:71:
99:3f:bc:4f:b6:fa:29:5b:c8:7b:94:63:55:f8:91:
96:2c:15:16:8f:79:47:d3:63:9b:f0:b1:2a:0f:46:
9a:eb:2c:f8:fe:4d:0a:98:68:41:e6:a9:b0:82:34:
74:00:40:22:e1:16:a4:00:a7:a2:e5:5c:21:f5:72:
82:59:2e:33:1a:b5:17:81:9f:92:91:91:fe:d3:ae:
5f:c6:5f:cc:21:05:95:82:bc:f2:cb:13:90:6d:84:
31:59:01:39:19:2e:49:42:fd:9c:fe:c4:dc:e2:51:
68:c5:3b:24:68:d4:3b:9d:78:53:ab:b7:09:64:70:
87:2c:1f:9c:6c:ad:3d:a3:7a:9a:ba:dd:32:7b:f1:
0a:16:99:c2:67:dd:4a:c8:d8:eb:1b:e6:1e:5b:9f:
00:87:36:f5:28:33:6e:a9:a1:e2:8c:1c:81:b2:ca:
45:ec:69:af:e6:7e:f7:5b:87:09:10:cf:58:67:5c:
9b:53:b4:fe:9f:9c:bc:fd:1d:a4:6c:9f:b1:34:90:
0c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7B:3E:44:A6:59:26:4A:57:1B:6C:6C:42:2D:57:DC:54:1C:B7:11
X509v3 Authority Key Identifier:
keyid:DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/PXs-RKZZJkpXG2xsQi1X3FQctxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.150.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:52:5e:9f:d3:83:50:24:da:26:37:f2:6c:a6:b2:83:04:cd:
52:5b:3b:7b:6f:7a:8d:de:cc:c2:e8:c3:38:4a:00:2b:91:e8:
f6:23:07:53:fc:80:51:ac:e2:98:2b:00:4e:10:41:e2:2b:f5:
c3:95:41:9e:ea:16:ee:1c:4a:2b:4d:c6:1b:bb:44:83:0c:22:
06:3d:dd:5a:a3:d3:36:ee:70:dd:cc:75:b8:e8:ac:04:5a:97:
2b:6a:45:34:b3:ca:19:38:36:69:63:2e:c0:33:7c:0a:d0:d1:
a9:55:15:13:1f:af:88:f6:b2:0b:a0:68:ed:ca:8e:7b:37:5a:
33:60:69:d2:2d:63:a7:42:28:54:cf:8d:ec:96:fd:40:58:fb:
46:24:f8:59:3b:a6:bd:d3:0e:02:16:a8:bd:54:87:ca:d8:4c:
f9:b6:6a:04:07:ea:05:02:e9:d4:82:f4:8a:07:fa:69:7a:46:
3e:af:b6:b7:43:4f:b5:3e:c3:f9:26:73:ef:cd:8c:e4:2b:6a:
33:fa:60:7f:1e:2d:c9:ae:77:72:b6:1b:dd:85:18:81:ec:b6:
0d:08:eb:51:8e:c4:a4:db:2b:44:c1:a8:88:8b:e1:eb:e9:ee:
2f:66:77:34:4c:23:ed:d3:a9:50:80:a7:6a:8e:d2:e1:a9:71:
e9:48:91:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:23 2024 by rpki-client on console-fra.rpki-client.org