Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/PEcGQ1M7RX-7Ntg2l1lfB8G7G5A.roa
File: PEcGQ1M7RX-7Ntg2l1lfB8G7G5A.roa (raw, json)
Hash identifier: V8Hk51LrF6T2OOZK8EHKknIXGe0g4TQqCmvIyHde1ug=
Subject key identifier: 3C:47:06:43:53:3B:45:7F:BB:36:D8:36:97:59:5F:07:C1:BB:1B:90
Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial: 01896DA219F296D5705574FB90B7B7ACC5C9
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/PEcGQ1M7RX-7Ntg2l1lfB8G7G5A.roa
Signing time: Wed 19 Jul 2023 10:11:27 +0000
ROA not before: Wed 19 Jul 2023 10:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58206
IP address blocks: 193.46.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6d:a2:19:f2:96:d5:70:55:74:fb:90:b7:b7:ac:c5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
Validity
Not Before: Jul 19 10:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c470643533b457fbb36d83697595f07c1bb1b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:90:5b:99:51:bd:57:e2:82:3e:a9:92:e6:
58:4f:c5:a4:b4:c6:3d:27:46:e3:c4:2e:fc:36:ea:
2b:91:bf:f3:59:71:37:36:ad:c2:eb:53:03:b5:93:
b4:fc:86:5c:00:17:d7:8c:81:89:74:f2:ae:b4:f7:
50:cd:6d:f0:aa:27:bc:73:d5:23:4e:4c:89:9e:92:
77:82:ac:73:42:11:48:5c:b2:f9:ae:cf:3a:e5:1d:
ae:5a:e3:e5:ac:ab:6a:fe:4d:d1:d5:99:97:88:d5:
b8:e9:80:d5:f0:da:dd:0c:b7:fa:89:13:a2:ae:a8:
ac:7d:a7:86:f5:96:83:e5:76:a0:bf:62:72:4c:e0:
de:0e:cd:f7:e6:d3:5e:e1:e3:af:b3:3d:35:bd:0b:
4f:87:b1:a7:e3:59:9d:e8:72:c3:4c:f1:2c:42:72:
6d:ce:f2:ee:c0:06:bd:37:21:32:0b:38:ad:e1:5f:
a5:a2:6d:a2:30:64:d9:d3:5a:01:6d:15:74:8d:27:
27:ca:db:14:04:37:25:d9:c0:d5:c0:68:65:9a:c5:
e4:b0:51:53:e0:84:55:b9:5e:19:fd:66:9e:40:1f:
17:2b:47:df:86:9c:14:f9:6d:55:60:3f:0f:01:02:
30:45:65:ee:77:e5:bf:33:0c:77:2c:0b:b4:85:1b:
c4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:47:06:43:53:3B:45:7F:BB:36:D8:36:97:59:5F:07:C1:BB:1B:90
X509v3 Authority Key Identifier:
keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/PEcGQ1M7RX-7Ntg2l1lfB8G7G5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.36.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:18:cc:1e:a1:65:91:0c:ea:3e:6f:17:06:eb:7b:fa:65:d3:
27:2e:75:45:0a:9c:73:84:2b:71:4a:1d:19:e6:69:5a:79:0f:
17:d8:61:2f:35:6e:ea:5e:21:05:0d:ac:86:36:0f:c0:c8:3e:
9d:02:5d:d6:d5:1b:5c:fe:df:32:46:95:bf:c7:35:a7:9c:f9:
fb:74:6e:0f:4a:d3:38:8d:03:f8:50:be:35:3c:5c:27:fc:2b:
60:d7:e6:35:e9:56:f6:93:c0:76:d4:b7:6b:5b:a7:20:17:31:
fb:db:4e:a1:8d:5d:e5:28:13:32:a4:a9:c1:82:e2:c6:40:41:
df:6b:73:0a:13:16:79:36:a2:88:6a:65:76:a7:06:6d:ec:6e:
a9:23:98:5e:17:9d:35:89:41:0a:16:36:34:27:e1:e5:27:46:
6d:ff:29:1d:2a:b6:8a:51:18:ae:a5:aa:9e:a3:43:18:c8:42:
67:49:7c:4c:b6:ad:87:e7:10:55:25:68:04:73:55:8f:c4:8d:
82:4f:2c:53:50:e1:5b:aa:bd:53:35:d4:60:15:7e:5d:06:f8:
d1:d5:24:7e:8c:a6:d2:2b:1b:72:47:4b:d0:e1:bc:c7:f6:5a:
f9:13:b0:7e:60:7e:69:7b:2d:6e:16:07:0a:18:3d:01:a5:65:
74:1f:46:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:51 2024 by rpki-client on console-ams.rpki-client.org