Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/PDCSXOIFYXDVa6FCdsNrt19w7Ag.roa
File: PDCSXOIFYXDVa6FCdsNrt19w7Ag.roa (raw, json)
Hash identifier: WUf3rUIleKgTGPoiai8o+/nK9OY4B7qGbU7OqiPHBbs=
Subject key identifier: 3C:30:92:5C:E2:05:61:70:D5:6B:A1:42:76:C3:6B:B7:5F:70:EC:08
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 018CC493530A0D2F77799F4CBE842120394F
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/PDCSXOIFYXDVa6FCdsNrt19w7Ag.roa
Signing time: Mon 01 Jan 2024 10:30:38 +0000
ROA not before: Mon 01 Jan 2024 10:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43380
IP address blocks: 91.206.3.0/24 maxlen: 24
2a0f:f4c0::/32 maxlen: 64
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:53:0a:0d:2f:77:79:9f:4c:be:84:21:20:39:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Jan 1 10:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c30925ce2056170d56ba14276c36bb75f70ec08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:d9:f9:0c:29:69:75:59:5c:89:da:77:17:
8e:dd:84:39:15:df:07:f6:cd:7e:ce:c1:ce:62:b9:
1f:24:9b:4f:9a:a2:39:80:b0:a9:18:db:6d:e7:6c:
cd:b9:74:3a:67:df:e2:17:55:08:1e:7b:18:5a:04:
de:68:7f:12:9b:35:31:8d:31:42:62:5c:5a:6a:77:
d2:26:9a:d5:31:57:49:1a:d1:6c:13:2c:3a:d3:d6:
55:ff:83:e0:ef:c0:04:90:f6:97:30:d5:f8:9f:3b:
11:0f:ee:e7:3f:5c:e6:2d:d7:4a:7d:3a:07:ec:b2:
3f:0a:80:37:c0:04:ba:12:c2:49:fd:95:73:26:ea:
34:87:d4:09:6f:35:b0:d5:79:08:4b:ee:4c:2b:70:
8b:d8:86:d2:6f:68:d4:53:30:45:c0:ee:30:0f:1d:
1e:c3:58:7e:4a:ef:08:c0:23:2f:11:f3:f1:c5:d5:
c0:4f:83:0a:4c:3c:c0:17:76:61:d3:45:e3:82:01:
bd:1d:c4:12:ea:ad:b1:7d:0a:e5:47:1b:bf:0f:96:
ea:73:3f:d4:a6:7a:55:14:cc:05:dd:0d:d3:3e:e3:
f9:0c:a7:ce:28:55:62:a9:44:ae:12:af:b3:4a:5c:
47:b2:fe:0e:66:d0:bb:d0:43:c3:62:fe:bd:d5:c5:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:30:92:5C:E2:05:61:70:D5:6B:A1:42:76:C3:6B:B7:5F:70:EC:08
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/PDCSXOIFYXDVa6FCdsNrt19w7Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.3.0/24
IPv6:
2a0f:f4c0::/32
Signature Algorithm: sha256WithRSAEncryption
73:5d:e3:9e:5e:2a:e6:d5:7f:42:bf:6e:25:0b:58:5f:7f:8d:
20:90:38:0f:b7:07:93:17:b8:62:e6:9c:48:a6:ed:2a:58:19:
69:8d:e1:4f:77:47:4c:cb:f4:5a:20:22:e1:c5:df:3e:7d:37:
92:42:57:ad:74:d2:36:ee:58:35:53:10:c2:97:76:2a:a4:80:
36:e4:1d:08:06:87:92:f7:a5:68:54:44:9e:b2:01:db:4e:2a:
e6:69:ea:b4:57:2d:87:6b:55:98:94:a7:2a:4d:33:7d:16:d3:
35:b8:0e:69:49:1c:e6:ee:c0:66:4a:a9:2b:38:74:da:3f:30:
59:90:cd:8b:d4:58:1f:73:76:24:59:6c:87:f3:f5:30:d8:62:
fb:4f:10:21:a2:17:98:f0:43:cb:4a:37:6c:8a:a5:7d:c4:1e:
07:42:e8:fd:c4:d1:ac:48:f6:6a:19:e0:1f:ec:4c:ee:ac:7d:
66:dc:df:e3:e9:6c:59:67:32:32:5c:66:21:2f:5e:1d:62:88:
aa:cc:3b:51:dd:6c:7c:0f:fb:1b:30:09:5b:4a:07:d5:ea:11:
ec:3f:9d:fc:7e:14:2d:81:11:1c:31:c4:87:02:39:b0:9c:01:
9d:89:fe:2b:9b:3b:d9:24:ff:cf:26:2b:d0:58:06:a0:9f:ab:
61:24:68:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:49 2025 by rpki-client