Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PGEERY9pCBmvTeDa5Udrh_vfF8o.roa
File: PGEERY9pCBmvTeDa5Udrh_vfF8o.roa (raw, json)
Hash identifier: eicm+B8KDWGMyIBwGBz5kloQqtYKfqXgXz1kC1CWGkQ=
Subject key identifier: 3C:61:04:45:8F:69:08:19:AF:4D:E0:DA:E5:47:6B:87:FB:DF:17:CA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5010C8AA3B75E66B2CE0A0E68C49D61
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PGEERY9pCBmvTeDa5Udrh_vfF8o.roa
Signing time: Mon 01 Jan 2024 12:30:29 +0000
ROA not before: Mon 01 Jan 2024 12:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31122
IP address blocks: 45.89.32.0/22 maxlen: 24
45.131.248.0/22 maxlen: 24
45.146.184.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0c:8a:a3:b7:5e:66:b2:ce:0a:0e:68:c4:9d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c6104458f690819af4de0dae5476b87fbdf17ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5d:0e:ab:46:c3:d9:46:09:d5:ca:43:53:c6:
3d:6e:3e:2d:7c:b3:02:2e:e1:bb:5c:a7:2c:2f:06:
ff:19:58:b3:0c:52:20:f3:4c:c5:e5:38:73:e3:3c:
11:20:1f:09:f0:bc:c3:82:ac:3a:74:a5:1e:18:0d:
d8:90:19:36:e5:fe:36:47:d2:09:20:8d:9d:f6:71:
f6:ac:fa:c0:cf:b5:c6:48:0f:a6:fe:37:a6:c4:b7:
fa:f3:1c:b7:95:66:88:ba:fe:ef:73:bb:ab:4a:2e:
66:a0:8b:71:e0:cb:46:8e:1b:02:cd:aa:55:93:45:
55:e1:d6:8a:58:c9:15:0b:30:30:b0:cb:5c:29:6a:
46:39:ab:6e:b8:42:51:32:21:5d:73:8c:50:ae:3a:
e4:7b:10:f3:ba:ec:e8:fb:83:83:3c:e6:5d:6c:11:
b6:0e:17:75:11:04:8e:6e:65:26:c7:7a:96:19:28:
bd:26:dd:a1:42:6b:eb:49:5a:4e:61:4c:17:b7:92:
e0:73:47:80:91:81:52:58:32:41:16:dd:d5:ea:8a:
5a:13:7f:3e:03:32:e1:ab:62:33:78:61:34:88:32:
f0:0b:48:2e:34:95:4d:8c:61:f7:dc:ed:09:87:e7:
b5:39:49:e2:77:fb:8d:13:d5:ed:a3:02:09:73:9a:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:61:04:45:8F:69:08:19:AF:4D:E0:DA:E5:47:6B:87:FB:DF:17:CA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PGEERY9pCBmvTeDa5Udrh_vfF8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.32.0/22
45.131.248.0/22
45.146.184.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:51:41:43:60:53:96:91:0a:42:62:11:b7:c9:4e:e4:56:b1:
ac:12:17:9d:27:ea:e9:18:dc:bf:20:60:79:93:f7:20:8d:cf:
9d:1e:ef:d1:1c:70:22:b7:54:a2:48:58:af:d7:2f:83:3f:3a:
98:f8:5c:5f:65:83:43:11:23:bb:5f:2f:57:09:8d:af:39:99:
89:ed:2b:20:8c:c5:3d:59:8a:46:0e:e4:c7:52:10:f8:05:7c:
81:83:2c:74:d0:2a:cc:3b:ab:1f:fb:05:fd:9b:f5:70:13:75:
76:2f:33:bc:fa:bf:68:ee:74:d2:f1:34:f1:1e:fe:50:56:47:
1d:11:d3:28:17:e8:e6:be:4f:c6:f4:38:7f:d8:e1:60:b2:38:
bd:38:79:ef:5f:94:19:2c:d9:eb:2c:3f:b4:d5:69:66:3a:ed:
ed:2e:50:14:05:5c:a9:61:bf:18:7c:f7:b4:12:d7:9f:8a:db:
a7:9d:c4:cf:1d:22:16:48:8f:99:cf:6a:ff:0f:77:52:ea:83:
2b:75:47:50:05:d6:10:a8:f9:86:78:f9:85:64:cc:74:f4:6c:
11:e6:42:2d:25:24:82:f9:39:75:95:e6:d2:a8:b8:ad:da:c1:
58:ea:4f:ea:17:07:20:2e:f5:94:b9:29:28:dc:c4:e4:a7:3a:
68:fd:2a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:37 2025 by rpki-client