Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/PLXTcCa3VQmcq8ptT2ZNu5xBomg.roa
File: PLXTcCa3VQmcq8ptT2ZNu5xBomg.roa (raw, json)
Hash identifier: D82LEBnlzOI0oN5zLuJZr7EeI66FnETh0d2amtr09gc=
Subject key identifier: 3C:B5:D3:70:26:B7:55:09:9C:AB:CA:6D:4F:66:4D:BB:9C:41:A2:68
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01856ECB81D280A7E04796068BE7893E28D8
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/PLXTcCa3VQmcq8ptT2ZNu5xBomg.roa
Signing time: Sun 01 Jan 2023 19:25:08 +0000
ROA not before: Sun 01 Jan 2023 19:25:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209433
IP address blocks: 93.115.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:81:d2:80:a7:e0:47:96:06:8b:e7:89:3e:28:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 19:25:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cb5d37026b755099cabca6d4f664dbb9c41a268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:56:b8:d3:ff:da:47:7f:d7:77:3f:99:c0:
d0:66:cc:53:cd:a8:ad:7a:50:d2:11:28:db:0f:da:
5c:a9:d2:97:70:9a:d4:b0:93:2c:e4:84:05:8c:55:
9b:52:29:43:51:e3:e4:a7:9e:98:b2:50:9e:6c:fb:
ef:c1:ac:7f:f6:cb:e8:5c:93:d0:63:4f:89:27:a0:
15:a5:27:f5:32:65:b1:bc:7e:4f:5f:ab:75:7d:b5:
57:59:91:45:ad:75:58:51:be:02:fc:c5:b7:2d:d0:
86:8f:ff:37:68:63:84:7a:cf:54:68:3e:c9:f7:5f:
ba:ca:45:5f:f3:40:08:cf:12:db:6a:c5:76:53:32:
05:f5:22:e6:a1:4a:eb:df:8c:4d:3d:16:82:c7:2f:
a6:fb:32:51:32:7a:5c:ed:da:1c:23:8e:4b:b8:8a:
c5:40:ad:2d:50:b5:b5:57:91:32:c0:26:14:be:db:
4c:79:fb:8d:09:56:8f:68:72:41:40:b1:fc:6d:24:
33:8e:1a:e6:bb:86:d1:a0:ef:30:b2:b1:aa:82:c1:
2f:10:6b:8b:59:6b:65:8d:20:02:a3:31:39:37:ab:
31:93:b7:d3:6f:c2:b5:fe:26:d1:d6:1c:47:fa:d9:
48:46:17:e8:45:1a:82:ff:1e:0b:b0:8f:76:13:0e:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B5:D3:70:26:B7:55:09:9C:AB:CA:6D:4F:66:4D:BB:9C:41:A2:68
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/PLXTcCa3VQmcq8ptT2ZNu5xBomg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.100.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a8:6f:7c:33:97:3f:9c:32:38:26:49:d2:23:bd:3f:b3:fd:
b5:87:b4:29:3a:81:a6:d7:38:a4:d1:19:c4:78:db:b2:1d:ca:
bf:ad:10:d2:a6:ae:b6:e3:ad:fb:c5:ce:72:33:8f:88:ba:f4:
f3:34:a2:3b:a5:0e:7f:95:9d:3b:5a:f6:a5:91:ab:60:7c:83:
f8:e9:95:dc:59:32:8a:2c:74:eb:ef:e8:ba:66:83:2f:b2:5a:
94:fd:54:bd:8d:41:5e:c5:5d:89:6d:4b:90:71:4e:96:43:cb:
af:0b:12:a9:db:a3:e9:8c:04:5f:70:79:7a:f2:39:a4:1b:5c:
3b:50:29:fe:63:b8:76:ac:03:17:7a:35:95:1c:f3:c2:bc:71:
df:a1:90:f4:f7:3d:06:db:b2:06:84:53:c2:d0:14:00:0b:4f:
fc:07:c9:13:a0:ef:85:6c:e4:6d:2b:63:00:13:38:df:37:4d:
20:c1:16:bb:36:81:72:9e:8f:d1:05:3b:a0:5a:d9:f9:0a:48:
e9:73:ac:b9:fb:68:a4:81:14:b1:f2:d7:03:c5:a2:68:99:fd:
6a:0b:b0:27:94:d1:f7:d6:b7:66:2e:6e:ea:ac:ef:a1:ff:be:
19:f9:10:32:39:93:dd:52:b0:50:98:78:d0:7f:da:d5:e7:3c:
5f:fc:77:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org