Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/Pdm6ANjQNN62VJvgkKl0LO0qPpk.roa
File: Pdm6ANjQNN62VJvgkKl0LO0qPpk.roa (raw, json)
Hash identifier: 2ZeP+x71Ka3iQLZbq/NAf9yUZ3gWIvWMgzr/aZroyQc=
Subject key identifier: 3D:D9:BA:00:D8:D0:34:DE:B6:54:9B:E0:90:A9:74:2C:ED:2A:3E:99
Certificate issuer: /CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
Certificate serial: 0187D7CDD3702A34BDA53665BA6154DAF430
Authority key identifier: 11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/Pdm6ANjQNN62VJvgkKl0LO0qPpk.roa
Signing time: Mon 01 May 2023 14:53:23 +0000
ROA not before: Mon 01 May 2023 14:53:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13127
IP address blocks: 193.176.208.0/24 maxlen: 24
194.53.33.0/24 maxlen: 24
194.53.36.0/24 maxlen: 24
194.53.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d7:cd:d3:70:2a:34:bd:a5:36:65:ba:61:54:da:f4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
Validity
Not Before: May 1 14:53:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dd9ba00d8d034deb6549be090a9742ced2a3e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:ff:0c:cc:e1:c0:7a:2c:7a:12:94:8a:43:
c5:31:2e:1d:4a:4b:01:b2:5b:b4:b6:eb:d0:ce:52:
b9:8a:c9:c5:4f:e7:26:3e:ee:8c:ef:ad:9d:74:7a:
b8:90:f8:5c:f8:67:96:4a:af:a0:b7:9a:e0:70:d0:
46:1f:86:6d:48:f4:6f:f4:c6:02:24:97:34:2b:9e:
98:8a:dd:87:24:9e:c1:9b:57:a5:0a:55:ea:db:0f:
75:0b:91:20:2c:6f:56:9c:77:20:4a:ec:1b:44:67:
78:83:3f:f3:b1:0c:79:5f:7c:2b:ed:15:99:42:85:
38:09:65:a2:dc:4b:fb:26:18:5f:78:72:48:4b:f5:
51:f4:c7:77:9f:e4:9a:7e:71:09:cb:1a:bf:c4:ec:
77:9f:ed:41:55:5f:a0:3d:d4:17:9b:1b:26:db:4d:
fe:b9:67:d5:04:b0:17:c3:43:ef:5a:18:a5:97:20:
e9:83:0c:7c:c1:fd:c9:5a:e0:bc:5b:36:51:47:35:
42:14:e4:69:ba:2f:c4:45:21:76:ea:f7:d9:f8:ae:
23:73:41:95:9e:0e:10:be:ee:52:5d:f3:72:8c:97:
de:55:5a:6c:d1:68:03:9c:2f:6c:c1:4f:89:79:19:
85:d4:78:13:32:a4:8a:77:4a:73:64:48:ee:b8:24:
f1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D9:BA:00:D8:D0:34:DE:B6:54:9B:E0:90:A9:74:2C:ED:2A:3E:99
X509v3 Authority Key Identifier:
keyid:11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/Pdm6ANjQNN62VJvgkKl0LO0qPpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.208.0/24
194.53.33.0/24
194.53.35.0-194.53.36.255
Signature Algorithm: sha256WithRSAEncryption
ce:5d:d7:5a:0d:ad:71:88:fa:81:93:ad:d4:8d:8c:15:1a:90:
8a:a2:ef:c1:59:06:71:02:b4:37:2b:b7:9e:6a:19:dd:b7:90:
9a:78:28:99:08:41:b4:c7:33:66:ff:13:2e:c4:f7:0a:3d:4d:
a0:e4:ee:48:6a:b2:03:7b:e9:c8:ff:33:6b:34:19:73:4a:79:
bb:47:84:e5:60:c4:a8:f9:3c:07:ed:41:4d:7e:c3:2c:a9:18:
ce:f4:15:1e:c2:70:07:18:1e:dc:04:2f:70:25:35:ec:a6:52:
53:b7:c1:fd:ed:10:c5:cf:cd:6e:0a:9d:0e:9f:87:ea:7c:03:
47:29:38:a6:cd:be:54:ba:9a:72:09:5b:44:53:d9:f7:f3:f9:
db:e5:ff:73:db:9e:f3:96:5b:ea:c1:f7:a4:a8:ab:62:6f:08:
60:fa:ed:26:57:b4:5c:8e:ad:e5:1b:e3:41:0b:81:e2:13:4a:
e4:b6:bc:da:cc:73:af:c5:0d:c2:44:de:62:7d:b2:73:a0:ac:
e6:ef:5b:e7:c3:44:5f:45:29:4b:36:37:a8:7d:12:0d:cb:a9:
e1:a5:d4:75:28:cf:54:ba:e6:af:dc:95:72:a6:3a:03:91:38:
61:13:82:e9:c8:94:30:28:6b:4e:1f:f6:8e:1b:10:1e:d9:70:
4e:3a:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:17 2024 by rpki-client on console-ams.rpki-client.org