Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/PfJbJD5ZFP5FSsBH_P5vLshGuMI.roa
File: PfJbJD5ZFP5FSsBH_P5vLshGuMI.roa (raw, json)
Hash identifier: EiaEAFYBwS/ShP9zkXE9xBJgtSPIIVMOXBloR/DRWSQ=
Subject key identifier: 3D:F2:5B:24:3E:59:14:FE:45:4A:C0:47:FC:FE:6F:2E:C8:46:B8:C2
Certificate issuer: /CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Certificate serial: 01856F4B64E85C1F8DBCFF2226C2FC4B42C7
Authority key identifier: C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/PfJbJD5ZFP5FSsBH_P5vLshGuMI.roa
Signing time: Sun 01 Jan 2023 21:44:50 +0000
ROA not before: Sun 01 Jan 2023 21:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 559
IP address blocks: 192.33.120.0/21 maxlen: 21
192.33.118.0/23 maxlen: 23
129.129.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:64:e8:5c:1f:8d:bc:ff:22:26:c2:fc:4b:42:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Validity
Not Before: Jan 1 21:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3df25b243e5914fe454ac047fcfe6f2ec846b8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:92:b8:84:58:a7:64:68:cf:1f:d0:bf:ad:60:
67:c5:77:5f:46:cf:d0:e1:ea:c6:d6:a5:2c:a4:6b:
f8:e0:0f:ad:e6:78:0f:4d:81:0d:de:13:c6:f3:68:
d2:e8:58:a2:4c:36:f7:57:97:1f:28:21:cd:6f:c8:
be:25:42:79:99:6b:af:6e:66:76:50:8b:aa:0f:17:
0f:58:53:03:ff:c9:f1:62:44:6d:c3:93:8a:fc:f5:
bf:f6:e0:d3:ac:71:a8:0a:4d:1d:bd:25:66:f7:08:
38:b8:d1:92:05:94:22:e3:38:69:b8:0c:bd:3a:5d:
08:f6:30:94:89:2d:4b:28:d2:42:59:ba:35:71:86:
5c:a1:9b:d8:38:30:4c:17:1d:4f:fa:d1:81:3e:d8:
f9:b8:21:ba:50:38:03:2b:d6:8b:22:f0:ef:a5:96:
b8:1f:c0:94:44:61:25:08:1d:e9:77:af:da:d7:5d:
d7:0c:67:1c:ef:01:5e:d2:6e:dc:7e:78:e6:1c:4c:
14:d9:03:58:ed:4b:1d:f5:c2:70:57:fc:68:74:d3:
78:5b:99:f4:5a:de:c8:9c:3e:ab:c3:8d:0f:9b:0d:
e8:db:08:01:03:c2:02:3d:60:35:21:6a:ba:2b:ac:
8f:f6:57:e3:1e:81:a4:9a:49:df:e9:cd:ff:e2:dd:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F2:5B:24:3E:59:14:FE:45:4A:C0:47:FC:FE:6F:2E:C8:46:B8:C2
X509v3 Authority Key Identifier:
keyid:C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/PfJbJD5ZFP5FSsBH_P5vLshGuMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.129.0.0/16
192.33.118.0-192.33.127.255
Signature Algorithm: sha256WithRSAEncryption
3d:a0:32:1f:0a:aa:00:43:7c:1b:51:ad:88:d0:09:25:45:a4:
5b:1a:2f:a4:5a:96:15:f8:6e:03:54:5c:ca:09:21:22:bd:e4:
ec:94:96:ae:d0:9b:f1:53:10:05:a1:a1:4d:38:b5:75:ee:a9:
86:06:bc:67:1a:ab:05:1a:ca:46:eb:28:c3:57:8b:fa:8e:c1:
64:e8:0f:e4:e8:ae:f0:83:f8:2b:8a:6f:47:27:14:75:79:34:
a2:a9:7d:cc:58:14:1a:a0:bc:c2:7e:07:c1:eb:e4:7f:a7:3c:
d7:f5:75:3a:a0:83:f8:8a:02:29:d8:f8:df:e1:1a:38:d0:45:
f5:1a:23:33:f7:02:f6:98:93:c2:00:dd:cd:eb:04:8c:92:c3:
2c:aa:15:18:0b:c1:16:d2:2b:b1:3e:c8:b5:2f:29:0d:51:6a:
6a:ce:c4:b7:d1:fe:11:dd:4d:8c:cc:c1:6b:4f:be:39:2e:dc:
d5:ee:af:1b:2f:68:b6:3f:ae:f3:1c:c6:75:d2:09:17:4e:0f:
65:fe:88:6e:4b:d4:f2:14:52:dc:cc:86:a2:60:67:5e:b4:5e:
b5:a7:2f:6a:cd:30:1b:36:81:62:c1:b4:d7:06:a5:88:b1:8b:
e3:90:da:8b:10:6d:59:04:b5:77:aa:4b:0c:aa:a6:c8:9d:69:
30:c2:2a:9d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:58 2024 by rpki-client on console-fra.rpki-client.org