Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/PlxtW9wIFXao1tjaflh5csO8t8s.roa
File: PlxtW9wIFXao1tjaflh5csO8t8s.roa (raw, json)
Hash identifier: 0kf4PKncPojnSPo+kuX02lkQ1ag1eucblBIN+kdMokQ=
Subject key identifier: 3E:5C:6D:5B:DC:08:15:76:A8:D6:D8:DA:7E:58:79:72:C3:BC:B7:CB
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 01856C53F1C7CBC75C3A935C0BDB51C72DF6
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/PlxtW9wIFXao1tjaflh5csO8t8s.roa
Signing time: Sun 01 Jan 2023 07:55:18 +0000
ROA not before: Sun 01 Jan 2023 07:55:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21075
IP address blocks: 193.109.80.0/24 maxlen: 24
46.164.138.0/24 maxlen: 24
93.183.236.0/24 maxlen: 24
93.183.238.0/24 maxlen: 24
193.238.96.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f1:c7:cb:c7:5c:3a:93:5c:0b:db:51:c7:2d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 07:55:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e5c6d5bdc081576a8d6d8da7e587972c3bcb7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2e:d3:d4:61:7c:12:42:f7:c2:3b:de:a2:cb:
4f:b7:a6:75:d3:6b:53:dd:73:b6:a4:be:13:cb:e6:
7d:8f:50:df:19:07:f9:df:5f:33:68:5c:99:0b:51:
c8:c3:d8:3f:78:cf:af:2f:9f:38:7d:bd:a5:4e:28:
97:33:f4:d3:fb:a2:8b:e6:9d:cd:8f:9b:51:f0:02:
b5:1f:1e:a8:ec:e6:78:d0:8c:78:8d:bb:9d:03:26:
3e:bf:a5:09:5e:64:70:c4:bf:32:07:e7:79:43:32:
df:f9:62:57:dd:6f:28:b3:b7:d7:3f:74:8a:1a:d9:
55:52:a2:fc:0e:9d:27:ee:25:c4:82:85:f9:ae:fc:
35:97:9a:ca:b7:00:2a:5c:4e:be:db:b0:f5:3a:74:
51:46:34:53:43:5d:5d:2c:d1:65:16:86:e0:47:dd:
41:59:ed:f9:ee:81:87:d2:f9:aa:b1:19:ec:e9:94:
85:8f:56:d3:a8:c3:0e:fd:50:fb:0b:e3:93:c3:b4:
d7:01:a7:2b:b7:a7:d6:53:4a:7c:66:fa:4d:05:72:
e9:3f:8f:c9:39:3e:9e:c9:7e:7f:f1:5b:76:1b:0c:
80:8f:91:2f:04:3d:29:bf:8d:54:ff:c5:42:78:d4:
2d:44:27:18:18:8d:e6:1d:5f:6e:a1:2e:a9:13:a3:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5C:6D:5B:DC:08:15:76:A8:D6:D8:DA:7E:58:79:72:C3:BC:B7:CB
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/PlxtW9wIFXao1tjaflh5csO8t8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.164.138.0/24
93.183.236.0/24
93.183.238.0/24
193.109.80.0/24
193.238.96.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:08:02:fe:fa:31:27:05:f0:a0:1f:29:4a:83:42:00:69:3f:
9d:fb:e5:5c:33:bf:2d:15:05:6a:a8:8c:19:92:93:b2:4d:bf:
5f:56:26:a4:59:65:9d:f4:79:a4:4a:b7:51:fd:6a:05:9a:ad:
49:43:70:f0:80:ef:4e:9b:a7:15:d0:56:be:d6:4e:a7:25:52:
8f:96:24:05:67:32:4f:20:da:e2:f6:4c:53:94:6e:ea:c1:f2:
a0:2c:ea:23:15:06:98:da:10:0b:67:74:72:1b:c5:be:09:cc:
d5:fe:5a:65:20:31:2f:c5:1c:bb:d2:59:ff:60:60:ca:a2:ac:
18:61:8f:ef:a7:2b:df:af:86:7d:88:ab:a6:74:82:1a:a5:74:
3f:4d:20:49:ea:dc:1d:4e:bc:d4:d8:50:78:fd:78:74:5f:19:
b0:b2:39:c3:6e:3b:0c:a9:fb:cf:db:02:bf:ab:eb:31:95:90:
e4:a0:31:65:9c:ce:80:3a:b3:6d:36:21:be:b7:a3:84:ee:f0:
ce:e5:dd:43:d1:3f:d5:e4:9f:5d:1c:c9:54:94:2a:3e:09:c8:
aa:4e:ea:59:2b:de:3c:44:cc:2d:c6:c8:88:c1:b5:0e:fc:ce:
a9:1b:df:6f:d0:40:f7:9d:f6:02:e4:d0:bb:21:08:01:7c:1d:
24:47:31:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:32 2024 by rpki-client on console-fra.rpki-client.org