Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Pcjhakotm8y3bXKME-Z1pNN0lKs.roa
File: Pcjhakotm8y3bXKME-Z1pNN0lKs.roa (raw, json)
Hash identifier: xtWXU90L31H2MliVl01+evJ3e9axO3y+3Lg5PS0XpQg=
Subject key identifier: 3D:C8:E1:6A:4A:2D:9B:CC:B7:6D:72:8C:13:E6:75:A4:D3:74:94:AB
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 01887C8F163C8C06CA9CB7CFACE41779F002
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Pcjhakotm8y3bXKME-Z1pNN0lKs.roa
Signing time: Fri 02 Jun 2023 14:42:11 +0000
ROA not before: Fri 02 Jun 2023 14:42:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132399
IP address blocks: 57.191.95.0/24 maxlen: 24
57.191.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Sep 2023 15:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:8f:16:3c:8c:06:ca:9c:b7:cf:ac:e4:17:79:f0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Jun 2 14:42:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dc8e16a4a2d9bccb76d728c13e675a4d37494ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5e:99:fa:9b:d9:3c:9c:2b:eb:f6:21:e0:07:
04:9b:db:d5:14:6c:52:f6:9f:d6:3f:63:e7:7a:83:
f0:65:0f:0f:20:56:a7:cf:59:df:6b:1b:52:65:2d:
ea:84:92:77:bb:c0:a9:a2:d7:a7:62:fc:49:ac:6e:
e3:fd:e1:49:fd:5c:2c:c3:45:5f:e9:28:b6:d0:aa:
fa:f3:39:1a:fd:a0:91:db:7e:3e:81:2a:df:ad:45:
41:bd:af:70:61:71:a4:50:bf:7c:de:5c:ad:db:03:
6b:e1:12:79:db:d1:24:fa:b6:9a:2f:30:b4:0e:48:
91:f8:06:10:49:cf:41:a8:a3:15:3c:aa:1f:81:4d:
43:a4:46:ec:8e:10:6b:53:ab:5b:d2:0c:21:40:60:
3c:a1:b7:16:a7:07:58:f3:3e:17:6b:1d:7b:63:59:
45:12:e5:22:5b:af:c1:ca:50:4d:f6:bf:fd:3a:0c:
cd:07:3b:ff:4d:97:00:78:79:26:8d:af:c5:b1:42:
05:ff:c9:33:ae:6b:c3:67:03:f6:72:91:83:0c:5b:
9a:90:c4:18:49:8c:10:44:f2:96:84:a8:f6:76:87:
62:21:f5:e2:51:33:08:e2:ee:9d:5a:73:ca:70:21:
4b:83:51:7b:b5:a9:a3:d5:a6:a9:a1:f1:cd:bc:30:
03:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C8:E1:6A:4A:2D:9B:CC:B7:6D:72:8C:13:E6:75:A4:D3:74:94:AB
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Pcjhakotm8y3bXKME-Z1pNN0lKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.191.64.0/22
57.191.95.0/24
Signature Algorithm: sha256WithRSAEncryption
17:f7:f1:38:eb:20:7a:09:33:ed:85:e1:02:a7:f3:18:29:c2:
2b:dc:b8:fd:8b:49:8f:8a:88:49:d1:3d:ac:6a:80:c8:6f:83:
b0:0b:d5:ad:27:59:fe:76:fe:a6:9f:83:6b:2c:4b:d7:69:b4:
32:73:9b:63:7c:69:3a:66:5d:ef:dc:7a:82:fc:08:8c:0f:a2:
bb:23:09:29:01:c9:24:94:75:d9:19:7e:e9:b6:7b:77:d4:cb:
a6:c7:b2:42:fe:a8:a5:71:5f:97:a4:36:e3:4f:04:69:cf:6c:
e9:e0:74:9c:db:53:74:75:b7:63:e7:b1:8a:42:ac:72:ee:04:
97:24:d5:8e:7c:94:9a:08:64:46:33:7e:59:f3:0b:f7:01:ef:
0d:24:1e:ca:1e:df:5d:64:6e:43:70:aa:cc:5e:4d:9b:9f:58:
82:fe:6a:a0:47:fc:04:0d:c5:f9:fd:d3:a3:4e:e5:4b:62:04:
e8:f1:d7:c8:82:cf:13:4d:5c:25:57:08:20:07:13:37:8c:32:
43:75:bb:21:4e:48:d0:c4:1a:8f:29:00:d6:b5:e3:b8:9d:34:
c7:cb:54:a5:5b:58:db:6a:1e:b4:e9:57:ba:c6:e6:21:7f:ad:
61:ce:db:14:fb:bb:fb:80:6c:f8:d2:c0:1e:7e:77:03:2a:52:
86:97:17:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:17 2024 by rpki-client on console-fra.rpki-client.org