Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/Pi11rJuzyuikuUtmkgws9b_LJTE.roa
File: Pi11rJuzyuikuUtmkgws9b_LJTE.roa (raw, json)
Hash identifier: wTHXCaQaRoYl6GcFfG3Z8Ut5AYsHtJ33yIn+NKyTzAM=
Subject key identifier: 3E:2D:75:AC:9B:B3:CA:E8:A4:B9:4B:66:92:0C:2C:F5:BF:CB:25:31
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01856E79083E73171FD9BF58BE5156913FA6
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/Pi11rJuzyuikuUtmkgws9b_LJTE.roa
Signing time: Sun 01 Jan 2023 17:55:03 +0000
ROA not before: Sun 01 Jan 2023 17:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33387
IP address blocks: 185.127.94.0/24 maxlen: 24
185.127.93.0/24 maxlen: 24
147.189.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:79:08:3e:73:17:1f:d9:bf:58:be:51:56:91:3f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 17:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e2d75ac9bb3cae8a4b94b66920c2cf5bfcb2531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:b5:3a:ec:e4:2d:6e:8f:e9:a9:67:9e:af:
dd:da:9c:10:5f:ff:7b:45:7c:30:4c:ae:dc:39:d4:
76:ad:5b:5e:01:f1:07:c7:a2:02:0d:c1:35:9e:7f:
9b:93:86:29:bc:9b:81:3a:22:90:ae:68:d5:c9:76:
0a:c9:82:ed:3d:3e:fc:dd:1e:36:ed:69:b0:1b:c2:
32:df:26:b3:b5:91:1d:ab:6c:1e:9c:78:e5:87:1b:
d5:15:89:02:c2:8d:52:a7:c3:20:62:16:54:ce:18:
43:48:67:31:bb:e4:78:99:e2:67:95:00:5e:c5:10:
77:e1:f7:ae:b6:91:86:37:45:f1:87:a8:4d:47:10:
d1:90:ea:4f:96:b6:24:67:16:62:1f:79:5e:62:95:
3c:f7:93:1c:21:67:b2:70:20:64:3f:16:d8:df:63:
4c:a2:ee:a0:02:b2:b9:7f:3e:d4:7d:c2:60:ec:6b:
d6:81:c9:5b:9b:66:a9:f7:c7:25:71:aa:7b:78:76:
b8:21:d6:a7:6a:05:90:aa:79:64:c6:13:73:90:49:
77:7a:44:d9:7c:cc:e5:e9:b2:a9:8a:9b:10:6b:37:
3c:a9:9c:14:14:66:36:9d:76:53:07:6e:04:8e:d7:
8f:92:ad:3f:a9:f1:58:bb:cb:bd:80:79:1f:b5:6e:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2D:75:AC:9B:B3:CA:E8:A4:B9:4B:66:92:0C:2C:F5:BF:CB:25:31
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/Pi11rJuzyuikuUtmkgws9b_LJTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.142.0/24
185.127.93.0-185.127.94.255
Signature Algorithm: sha256WithRSAEncryption
46:81:36:76:9f:46:a2:c2:47:3b:d3:e3:2d:e7:95:af:27:13:
f9:4c:88:2e:ab:0f:7f:8d:f7:a6:1a:d7:59:01:28:bc:d3:ae:
e9:f9:47:a4:73:20:38:31:30:6e:66:3a:94:3d:0d:1a:c6:9a:
a8:24:f7:eb:16:71:38:82:b0:5e:b1:cf:24:14:b7:3f:a0:38:
33:73:71:76:3a:2f:0d:25:a0:3e:9c:99:98:65:c5:3a:24:64:
26:56:62:70:bc:f5:1a:33:3b:ce:85:25:ee:d5:a6:d7:c8:0e:
da:79:85:93:2e:3a:5e:84:97:02:69:0f:c3:45:8f:05:64:e8:
1a:90:35:ae:54:b3:16:ab:68:28:22:83:3b:5c:a7:82:7d:8f:
66:17:d8:68:72:57:23:d3:b3:06:c3:81:49:77:c8:89:5e:be:
99:36:69:56:87:f1:71:77:3d:c9:fc:eb:48:78:44:59:5d:50:
c4:96:76:a5:67:36:4c:2f:da:ed:c8:28:d9:c5:b1:d6:ea:01:
d2:37:31:d4:68:0e:40:9f:df:9a:27:bf:67:a4:95:25:96:40:
76:20:21:b1:3b:b5:36:ce:7f:fb:8d:14:8f:75:20:5e:8d:21:
fd:c6:05:c2:41:1f:a3:12:7c:1a:45:ce:f3:d3:b8:8c:70:c1:
96:0a:25:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:12 2024 by rpki-client on console-fra.rpki-client.org