Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/PcVNdjqMIjBSYzUm2tVdLxJ8YI8.roa
File: PcVNdjqMIjBSYzUm2tVdLxJ8YI8.roa (raw, json)
Hash identifier: vtlAQl004IyVN3lUWHQbb7WMFSfCxn60S34pN0syHUE=
Subject key identifier: 3D:C5:4D:76:3A:8C:22:30:52:63:35:26:DA:D5:5D:2F:12:7C:60:8F
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 018570705DA7C58A85F81AC8B47D9CFB6C2E
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/PcVNdjqMIjBSYzUm2tVdLxJ8YI8.roa
Signing time: Mon 02 Jan 2023 03:04:50 +0000
ROA not before: Mon 02 Jan 2023 03:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47241
IP address blocks: 109.60.128.0/17 maxlen: 24
46.160.0.0/18 maxlen: 24
37.98.160.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:5d:a7:c5:8a:85:f8:1a:c8:b4:7d:9c:fb:6c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 03:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dc54d763a8c223052633526dad55d2f127c608f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:28:e0:01:4d:ac:a4:4a:b8:11:11:dc:18:
86:ca:3f:9f:00:f7:0b:d1:f4:9c:fe:1b:f3:0e:4d:
5c:35:b7:64:81:a4:8c:34:11:56:f7:7a:1b:ff:88:
75:83:99:ec:12:30:3f:6d:37:d4:12:16:ec:75:3d:
56:40:ec:a2:69:30:8c:dc:37:15:8a:ac:99:70:18:
98:3c:0f:ef:3f:7d:10:29:90:d5:1c:6f:a5:0c:b2:
5a:55:d4:aa:7b:27:27:7d:75:ba:6d:26:1b:ad:5b:
66:b9:5c:2c:a4:4a:c4:96:00:e0:fa:d8:d0:e5:98:
5f:ef:f4:f1:45:26:cb:80:24:a2:5a:62:3d:b4:2b:
70:78:b7:de:4e:29:3c:58:ee:fb:62:88:7b:cb:1c:
8a:37:c3:ca:62:39:22:7f:cf:65:8f:54:ec:ac:df:
27:0f:c0:06:a1:49:d7:8f:f0:81:31:e8:b9:9d:3b:
cd:0c:81:6e:29:11:30:67:7d:3b:7e:b1:0f:a1:b6:
94:26:52:66:9b:9a:b4:d4:3a:aa:3d:9c:14:c6:a9:
58:d6:bf:b3:a8:29:2c:7d:6b:df:4e:e6:d5:00:ed:
5d:82:b9:9c:1e:dd:00:dc:da:9a:6e:45:c3:9d:97:
39:9f:57:f3:e6:a7:5d:72:75:38:23:90:4f:fc:cd:
00:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C5:4D:76:3A:8C:22:30:52:63:35:26:DA:D5:5D:2F:12:7C:60:8F
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/PcVNdjqMIjBSYzUm2tVdLxJ8YI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.160.0/19
46.160.0.0/18
109.60.128.0/17
Signature Algorithm: sha256WithRSAEncryption
61:a9:ff:3b:74:74:f2:e6:3e:24:6b:9b:3c:99:3f:ab:93:43:
6d:cd:1b:a5:b4:8f:64:f5:79:97:73:4d:34:93:88:3b:2b:7e:
da:ef:39:b6:d4:00:40:24:ec:44:6d:e2:45:8a:42:ff:4a:75:
ca:56:29:df:26:3c:92:86:09:b0:50:c7:46:11:6d:3b:5b:0c:
f0:3f:c5:93:11:60:4d:e9:bd:c0:d8:e6:35:89:c6:73:d8:5a:
38:1a:38:ed:63:f4:e5:94:48:87:55:4a:a8:3d:b3:9f:cd:72:
c0:0c:de:c8:7c:db:d2:b0:d2:a3:ab:1f:01:68:82:ff:88:83:
bd:55:d6:4b:2d:85:a7:47:dc:d6:77:a6:ce:cf:e2:ff:ca:24:
28:6e:b4:d3:70:a8:ec:65:2d:66:25:72:b3:03:b6:5a:e1:67:
56:26:8a:3e:fa:5c:08:c4:81:87:33:db:44:5a:75:31:5c:dd:
ab:a9:ec:cb:f6:f5:77:16:c5:54:d3:0d:af:9d:ab:2d:f8:19:
e4:9d:68:e6:f4:32:78:53:89:e7:32:4c:cc:2f:9c:ab:9a:37:
40:95:6e:26:47:f5:12:e3:cc:1a:75:22:03:51:ef:6c:33:68:
76:5a:27:ed:d1:41:94:56:6f:f2:ff:5d:db:97:4d:2d:a3:b4:
4c:47:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:08 2024 by rpki-client on console-fra.rpki-client.org