Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/PmcmPMG1lCou3liHEHaG0i2QveE.roa
File: PmcmPMG1lCou3liHEHaG0i2QveE.roa (raw, json)
Hash identifier: lEJ/mxWjnN/cnJeiFZLAMYlom1B9ddliEPOuiPStFSY=
Subject key identifier: 3E:67:26:3C:C1:B5:94:2A:2E:DE:58:87:10:76:86:D2:2D:90:BD:E1
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 01856C6EFF17A14D8EBEACBB08A1B2F387AF
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/PmcmPMG1lCou3liHEHaG0i2QveE.roa
Signing time: Sun 01 Jan 2023 08:24:51 +0000
ROA not before: Sun 01 Jan 2023 08:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206382
IP address blocks: 45.88.172.0/23 maxlen: 23
45.88.174.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:ff:17:a1:4d:8e:be:ac:bb:08:a1:b2:f3:87:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 08:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e67263cc1b5942a2ede5887107686d22d90bde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d0:04:14:cb:8a:e4:05:95:8b:8e:ae:24:d8:
1d:0f:06:fa:c3:0d:db:82:1e:4e:1a:34:28:e9:d5:
65:cc:64:77:10:3b:22:de:0b:88:ee:d5:40:2d:54:
f4:af:45:82:60:ac:3d:5c:bb:c0:10:60:64:2b:6f:
f6:b1:53:53:31:16:65:19:0c:b1:e3:c0:e1:d4:82:
e8:70:dd:47:ea:86:1c:26:00:5e:4c:71:41:46:96:
41:69:b1:af:ce:7e:84:94:d7:d3:1e:89:f4:37:ca:
31:22:83:49:8d:bc:42:aa:f0:2d:f5:fb:37:eb:67:
ff:ec:ec:af:2f:38:9d:b7:6f:2f:46:7f:82:ae:00:
ef:b8:6a:9e:18:af:56:ed:92:44:9c:06:b8:18:b2:
80:8f:90:da:63:46:41:56:75:a3:40:6b:2d:f6:10:
05:c4:3b:f1:1d:63:37:f6:ba:ab:59:77:50:15:82:
13:bf:e7:a4:f3:32:93:9d:9d:02:11:17:0d:8d:dd:
07:7a:96:6d:b7:b7:90:c6:a4:97:b8:5e:b0:5d:fa:
a0:8e:9c:83:36:f5:f3:ed:08:f4:b7:e8:1e:da:38:
61:e3:dc:b9:87:3e:42:f1:51:35:51:74:b4:09:26:
bb:36:2f:d2:65:37:1c:44:a3:89:08:3c:25:3c:08:
fe:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:67:26:3C:C1:B5:94:2A:2E:DE:58:87:10:76:86:D2:2D:90:BD:E1
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/PmcmPMG1lCou3liHEHaG0i2QveE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.172.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:0b:8d:73:7d:6f:e8:07:6f:4e:f2:c1:98:eb:71:aa:4c:9f:
d8:2c:c7:83:2e:83:a7:9c:0b:88:5c:1c:46:05:ad:aa:90:f5:
da:1a:60:a6:5b:19:89:72:98:a2:f9:46:47:73:ed:44:9c:bb:
59:d9:0d:a2:b5:61:bb:fc:7d:22:f1:c9:51:e7:d4:a7:99:4b:
39:e3:34:a6:03:d2:9b:c4:1f:04:57:d1:f1:20:6c:e7:9d:83:
84:05:66:b3:2e:85:72:12:1d:b5:6e:01:10:65:4c:b1:2b:58:
65:94:66:3d:95:a5:d7:b5:23:97:92:6a:51:48:0f:74:bd:30:
78:a4:47:17:92:a9:56:c2:73:90:ee:1e:9b:ba:bc:56:3e:b0:
67:86:f1:fc:ae:5c:e9:2c:66:13:e2:8c:a3:6a:84:48:54:17:
1e:af:65:dc:91:93:8a:02:71:2f:3b:c2:01:b0:c6:26:0c:01:
8b:65:72:7c:af:f5:8c:c8:f6:55:85:e2:80:cd:9b:c4:5a:47:
31:c6:8e:b6:37:6c:bb:ae:2a:ee:14:99:68:eb:16:d4:77:c6:
45:35:e8:9b:bd:d4:04:28:dc:89:0d:2a:a4:35:96:3e:2c:41:
3c:20:0e:fc:da:a6:77:ed:d2:92:02:ca:da:74:c9:9c:70:de:
c4:98:62:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:14 2024 by rpki-client on console-fra.rpki-client.org