Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/PGZUWhvoqu94hfzjPa0F9MNpElc.roa
File: PGZUWhvoqu94hfzjPa0F9MNpElc.roa (raw, json)
Hash identifier: aT8wjhRg2LIg9hO1/ctgTu+A0xd+U2cAmrGVshAKQA0=
Subject key identifier: 3C:66:54:5A:1B:E8:AA:EF:78:85:FC:E3:3D:AD:05:F4:C3:69:12:57
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 018E818203819C0ECBBD81254F1D81BBCDC9
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/PGZUWhvoqu94hfzjPa0F9MNpElc.roa
Signing time: Wed 27 Mar 2024 20:02:45 +0000
ROA not before: Wed 27 Mar 2024 20:02:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212150
IP address blocks: 192.109.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Apr 2024 06:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:81:82:03:81:9c:0e:cb:bd:81:25:4f:1d:81:bb:cd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: Mar 27 20:02:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c66545a1be8aaef7885fce33dad05f4c3691257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:50:07:d5:04:2f:b3:62:92:d6:43:2b:58:7a:
7c:70:e0:16:7a:5b:2e:0b:99:06:6c:7b:f7:47:fc:
44:2d:d4:dc:10:96:24:bf:cf:1c:fc:e8:0e:c7:f3:
14:4a:ec:56:fc:71:a5:1b:bb:a9:a4:ca:63:63:c9:
9d:e1:a6:4b:dc:b0:c1:05:88:a0:dd:4e:66:5a:0d:
78:8f:8f:9f:16:15:fb:3f:87:7f:45:df:d8:b3:3b:
db:6d:a0:16:34:a3:17:d7:8e:cc:d1:a8:1c:1e:e8:
f5:c1:fb:44:38:02:93:c9:54:df:7c:ee:98:9d:1b:
a1:9c:75:0f:9a:d1:3e:21:c6:77:ae:69:ba:f8:eb:
38:e6:d8:8c:97:99:5b:dd:78:6c:1f:24:52:96:8b:
1c:bd:43:68:53:f6:f0:63:2d:17:25:3a:86:50:fe:
b3:42:12:28:46:47:b6:82:f4:ab:02:36:7e:6a:5b:
f0:cb:cc:94:f7:55:7d:a8:51:f2:5f:c2:1a:3d:74:
48:51:1e:43:e4:09:19:44:c8:55:b1:a6:bb:f4:5b:
43:d6:1c:ba:07:b5:33:b3:1d:78:fc:e0:0d:9e:40:
69:e1:9f:81:6b:15:1c:97:f3:11:13:aa:3d:69:10:
76:24:5e:06:ca:ed:05:69:6e:ed:12:53:6a:09:15:
a4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:66:54:5A:1B:E8:AA:EF:78:85:FC:E3:3D:AD:05:F4:C3:69:12:57
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/PGZUWhvoqu94hfzjPa0F9MNpElc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.206.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e2:50:f1:56:5d:7f:5f:39:31:00:20:ec:23:97:61:b6:93:
0a:50:8a:c7:9b:8b:f2:a3:f2:0c:f5:f4:ab:05:c6:e6:50:83:
6a:80:31:22:5d:38:50:ec:76:dd:80:63:38:41:f6:d5:3e:e4:
b2:ee:9d:92:c4:78:e1:6d:ab:06:78:e5:a1:1c:22:9c:fd:5b:
b9:60:5c:8a:03:96:25:2c:5d:48:a0:37:f6:1d:e7:17:b5:25:
31:44:ea:44:73:ba:76:af:84:19:71:17:4f:2c:2b:2d:94:f6:
f2:d1:4c:39:83:e2:8f:f1:ba:a8:c7:60:a8:27:14:2b:7d:ea:
23:d5:8d:a2:68:a7:ee:5a:4a:cf:95:01:65:e9:b9:81:40:b2:
5e:bc:19:de:d5:d4:d4:42:32:a7:89:6b:57:aa:d4:38:78:45:
9b:41:53:ff:0c:01:b9:29:e0:cd:55:5f:f7:34:f8:5e:34:0b:
be:31:1f:e7:d6:8e:f3:2d:aa:aa:09:21:24:b6:d6:ca:3b:88:
50:55:83:bd:b5:8a:29:4f:82:8d:b7:7a:b0:02:6f:2f:71:bb:
cb:87:3b:5a:b2:58:a7:c7:5d:f8:3e:03:de:1b:bf:b5:d1:91:
10:1b:07:3d:f6:dd:cc:15:03:e9:4b:41:18:9d:ac:64:f3:a8:
eb:0c:5e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:38 2024 by rpki-client on console-ams.rpki-client.org