Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/PTGoY_TgOC-2mZTSTjyA4Jdqttg.roa
File: PTGoY_TgOC-2mZTSTjyA4Jdqttg.roa (raw, json)
Hash identifier: 45Dg1EcrT/klhJFZ1hoJqHejt7jHrFq6I254u6U5Swg=
Subject key identifier: 3D:31:A8:63:F4:E0:38:2F:B6:99:94:D2:4E:3C:80:E0:97:6A:B6:D8
Certificate issuer: /CN=045df450eacfdd679ef0d08c880a91fc75b8a897
Certificate serial: 01856D540CD3E0B61519A562AA4D9B62DFA7
Authority key identifier: 04:5D:F4:50:EA:CF:DD:67:9E:F0:D0:8C:88:0A:91:FC:75:B8:A8:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BF30UOrP3Wee8NCMiAqR_HW4qJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/PTGoY_TgOC-2mZTSTjyA4Jdqttg.roa
Signing time: Sun 01 Jan 2023 12:35:02 +0000
ROA not before: Sun 01 Jan 2023 12:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206284
IP address blocks: 193.17.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:54:0c:d3:e0:b6:15:19:a5:62:aa:4d:9b:62:df:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045df450eacfdd679ef0d08c880a91fc75b8a897
Validity
Not Before: Jan 1 12:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d31a863f4e0382fb69994d24e3c80e0976ab6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:c3:de:03:91:79:ae:ad:72:a0:12:30:b3:
ea:0d:49:5e:f7:79:27:40:92:58:5b:2d:b0:7d:99:
5e:24:3e:aa:c9:8c:71:01:fa:09:8d:66:28:b7:fd:
b0:f5:62:55:65:50:0a:c0:40:1a:dd:25:4e:18:83:
21:0b:6d:a7:c1:7f:b2:59:4f:75:92:92:ac:cf:9c:
8f:24:c0:53:f8:8e:9c:48:7d:c8:1d:4b:55:ff:cb:
12:80:fb:a5:b8:90:7d:04:46:a0:cc:27:cc:45:b7:
10:db:04:30:a2:a8:e6:47:6a:9a:a0:f3:a9:68:f9:
7f:a3:cb:c7:d5:da:aa:9b:78:10:2f:e1:ca:c1:e0:
17:53:ee:45:6b:92:56:90:13:a7:87:bd:0d:97:2b:
4e:a0:b4:f9:dd:e6:3a:87:72:66:86:33:ef:87:a4:
f9:22:89:60:30:4e:93:da:43:35:88:2b:c1:2d:e6:
1a:7f:a1:65:10:29:3c:e1:bc:be:ca:42:f6:6c:c0:
01:04:0d:d5:99:d8:ff:4d:ca:99:83:16:75:d1:59:
bd:03:b6:6d:df:53:97:2c:ed:a2:f2:d8:72:69:f9:
5b:f1:9e:44:f4:11:56:a2:09:10:ea:98:2f:45:56:
dc:25:1f:e5:a2:34:5d:96:83:38:2e:14:21:58:45:
88:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:31:A8:63:F4:E0:38:2F:B6:99:94:D2:4E:3C:80:E0:97:6A:B6:D8
X509v3 Authority Key Identifier:
keyid:04:5D:F4:50:EA:CF:DD:67:9E:F0:D0:8C:88:0A:91:FC:75:B8:A8:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BF30UOrP3Wee8NCMiAqR_HW4qJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/PTGoY_TgOC-2mZTSTjyA4Jdqttg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/BF30UOrP3Wee8NCMiAqR_HW4qJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.32.0/24
Signature Algorithm: sha256WithRSAEncryption
51:fa:44:56:9d:4c:84:7b:b3:6e:1f:ac:00:41:20:35:b0:88:
25:f6:ec:1f:06:ef:59:ae:a9:b2:06:50:c2:4f:31:5b:1f:38:
12:36:76:eb:01:69:90:54:8f:03:29:57:aa:50:fe:0c:44:94:
05:32:a9:07:3f:b0:c3:63:b8:d6:ee:ef:02:2c:6d:e8:05:d9:
ce:ac:c7:5e:97:e3:8c:1b:5b:d2:d4:ed:5b:4e:cb:9e:48:0e:
16:fe:bf:00:df:c9:65:5b:06:00:04:1f:ae:89:66:19:15:bd:
0b:b3:fd:dd:ba:46:78:a0:94:20:c4:d5:ae:57:5b:30:ba:2a:
b7:d2:4a:5c:e4:fb:73:dc:67:f6:5f:03:76:6a:c8:38:ec:e0:
90:fa:89:ac:4a:9f:fd:c0:ac:a0:b8:5f:f4:ea:a8:44:92:87:
72:aa:31:d9:7c:e4:86:06:51:fe:18:09:b7:b0:71:a9:b9:19:
4a:ed:d9:64:63:69:91:bd:f5:fa:08:82:31:a0:7a:3d:4c:f6:
a3:e4:d5:56:bc:da:fa:0f:85:85:15:41:7a:39:b1:0f:2a:e8:
58:99:a7:79:65:64:d3:32:b6:48:07:43:6e:1f:14:7e:de:10:
11:29:de:ad:d6:6a:c3:e5:8d:ae:d0:82:c6:20:a6:9b:8b:ae:
9b:9c:57:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:24 2024 by rpki-client on console-fra.rpki-client.org