Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PHVtn1QaxvQUEDSJAgSe5ZVfOts.roa
File: PHVtn1QaxvQUEDSJAgSe5ZVfOts.roa (raw, json)
Hash identifier: HAFFYZFmeJ30seYfoVY9ntYAmprmlwwCtcPkQd/0Jpk=
Subject key identifier: 3C:75:6D:9F:54:1A:C6:F4:14:10:34:89:02:04:9E:E5:95:5F:3A:DB
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01892C4A7427C121D5731921B28A20B88AA6
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PHVtn1QaxvQUEDSJAgSe5ZVfOts.roa
Signing time: Thu 06 Jul 2023 17:40:24 +0000
ROA not before: Thu 06 Jul 2023 17:40:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 93.115.255.0/24 maxlen: 24
188.213.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jul 2023 15:38:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2c:4a:74:27:c1:21:d5:73:19:21:b2:8a:20:b8:8a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 6 17:40:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c756d9f541ac6f41410348902049ee5955f3adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:76:3f:8d:7c:24:bf:a8:56:1d:00:53:3d:cb:
62:04:32:10:44:42:ed:3d:64:eb:2f:08:50:09:33:
f9:35:44:c8:37:e3:6d:61:d4:65:a1:31:55:87:de:
43:4e:7e:0b:01:1f:d5:66:18:62:b6:55:b2:ae:fa:
68:25:c1:c4:83:80:4e:3d:42:9a:1a:dd:47:65:a8:
2e:e1:d6:7e:bd:4b:28:61:58:13:ea:cc:55:a3:a7:
28:e9:c5:db:2e:84:c7:4a:ad:d1:79:96:8f:2e:63:
1d:e9:2f:86:ab:26:27:19:30:25:0f:d5:dc:05:29:
45:2e:fa:10:f9:b4:62:41:24:11:24:52:5d:24:85:
af:09:1e:3a:16:22:36:6a:f6:49:5c:d0:c7:5c:9e:
5e:ac:3c:1d:31:4a:d4:2c:16:ee:74:e0:4f:71:05:
66:d2:62:01:7a:49:18:76:6f:3a:54:76:fd:07:92:
42:ac:31:22:5d:19:ab:99:1d:b3:52:85:1c:20:97:
f1:35:e1:32:37:c0:00:9b:fb:ab:df:08:1f:50:78:
c7:3d:3a:60:10:05:5b:57:69:86:00:1b:27:fb:7d:
d4:29:ee:80:88:34:7d:2d:60:46:36:f0:4d:a3:40:
63:77:9d:ce:2f:38:4c:22:43:c9:20:25:a7:d7:2f:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:75:6D:9F:54:1A:C6:F4:14:10:34:89:02:04:9E:E5:95:5F:3A:DB
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PHVtn1QaxvQUEDSJAgSe5ZVfOts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.255.0/24
188.213.202.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:64:77:37:63:be:09:63:11:39:f2:a8:20:19:2b:e3:d3:ce:
f0:3e:38:a0:8c:6c:60:d7:97:2c:76:84:21:15:32:38:4c:d9:
1b:db:5e:f5:c5:fd:8d:86:7e:09:4b:14:4b:f2:54:1d:bf:38:
68:70:b0:0d:3a:73:1a:f8:29:bf:ad:97:8b:f4:d3:c7:4d:e7:
17:2b:4e:02:61:f5:b8:4b:c5:24:6b:51:1c:e6:a3:b7:6a:45:
fa:5f:db:e1:5a:10:91:1e:d3:72:77:ca:38:04:40:0e:e7:9a:
09:97:29:ee:82:29:6d:92:75:cf:d8:bf:c7:36:87:ce:4c:cc:
b4:d4:aa:69:01:84:1e:bd:db:c7:64:70:86:30:d2:fe:49:4e:
5e:62:5f:23:59:2a:ac:ae:02:05:c0:a0:d8:88:4b:f9:ec:d9:
52:5f:ed:6f:8f:ff:f4:f4:97:2f:0b:8e:25:f0:56:45:ab:12:
49:ab:fe:f6:e3:01:a1:1e:40:07:43:58:bc:85:13:6d:2f:73:
85:d1:e1:f5:9c:bb:31:30:41:1d:ef:60:c7:f3:01:d5:08:63:
2e:7a:1f:d1:83:70:07:cb:2e:a8:e5:9e:d2:f7:a8:f7:cf:27:
a6:2e:fd:e3:c1:ea:c0:18:d0:ea:39:25:88:fb:cb:01:eb:d5:
e5:23:71:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:10 2024 by rpki-client on console-ams.rpki-client.org