Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pvmOyt3AKe36Uf1woi_1EjSue-U.roa
File: pvmOyt3AKe36Uf1woi_1EjSue-U.roa (raw, json)
Hash identifier: HnhACXRDThLgyKvwo9BtJTY8Q7vGmFForUydGjzXhds=
Subject key identifier: A6:F9:8E:CA:DD:C0:29:ED:FA:51:FD:70:A2:2F:F5:12:34:AE:7B:E5
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0192BD25B1EC12E92632EF684E22CEA9A683
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pvmOyt3AKe36Uf1woi_1EjSue-U.roa
Signing time: Thu 24 Oct 2024 06:10:17 +0000
ROA not before: Thu 24 Oct 2024 06:10:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 103.212.81.0/24 maxlen: 24
185.121.122.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 13:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bd:25:b1:ec:12:e9:26:32:ef:68:4e:22:ce:a9:a6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 24 06:10:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6f98ecaddc029edfa51fd70a22ff51234ae7be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:6e:d7:33:7e:91:7a:b9:9b:15:15:74:58:
08:b3:53:12:9d:59:62:4a:39:f8:7d:83:7c:a9:16:
20:36:43:7a:8a:c0:60:06:f8:4c:bc:e6:20:2f:a4:
3d:de:b6:22:55:2f:3e:99:44:8e:b0:f3:46:8c:4f:
97:65:7e:5e:61:e1:99:f9:5b:c7:81:72:76:36:9e:
42:7a:04:07:a6:8d:f7:57:0a:41:4e:19:8b:e8:a4:
ab:f4:01:8f:a7:ba:7a:82:81:62:cc:1b:4c:1b:3f:
ae:6c:ad:48:96:18:d7:75:24:4d:ee:49:50:42:61:
8e:20:65:46:7f:c2:65:1d:14:9d:07:33:2e:24:c1:
cc:df:02:9b:ef:db:40:16:0d:f0:14:41:92:06:a4:
2a:fc:83:9c:98:8e:b8:8c:48:41:ae:71:2e:29:42:
83:6a:6d:c5:bd:0c:a7:e8:65:33:6c:0b:1b:a7:58:
96:b4:e9:2f:c8:d4:8f:9a:0c:60:ef:90:16:ff:c3:
8e:e2:ed:5a:c7:07:d7:68:c6:1a:e3:ee:72:cb:3f:
c7:bf:bc:2f:11:52:fb:13:41:e7:86:3e:92:bd:14:
fa:cf:70:19:39:bd:36:dc:e4:a7:5c:e1:fe:3d:78:
42:42:29:ad:65:3c:ec:0a:06:f0:ff:5e:47:4d:d1:
51:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F9:8E:CA:DD:C0:29:ED:FA:51:FD:70:A2:2F:F5:12:34:AE:7B:E5
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pvmOyt3AKe36Uf1woi_1EjSue-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.212.81.0/24
185.121.122.0/23
Signature Algorithm: sha256WithRSAEncryption
20:3f:af:84:b5:ed:ae:02:29:2c:3f:93:ad:11:03:6a:16:02:
a1:52:40:e2:c6:79:12:ec:7d:66:8b:f4:e0:06:20:14:d2:b5:
c5:ff:73:6a:83:22:ee:68:c5:06:c6:0b:55:93:46:6d:b1:fa:
a8:db:cf:7d:57:9f:e9:55:9d:fc:a3:50:f8:d9:5f:c6:b4:86:
b1:2a:17:b7:b8:20:df:c4:d0:74:36:0d:04:d4:97:a9:77:1f:
4b:0a:a8:d5:94:28:56:c9:5c:65:ef:9b:3b:2b:cb:d3:c5:11:
09:89:36:73:de:10:4c:c1:ea:a0:3e:cc:cc:ea:24:dc:29:a8:
27:0d:5f:b4:2d:b3:21:cc:ad:3a:46:65:d0:d9:3d:16:48:36:
39:6f:27:58:79:82:c2:88:d3:1f:dd:4f:dd:76:67:27:66:60:
6e:77:37:8e:c2:d7:b3:34:df:ab:e8:58:15:fc:25:75:17:88:
11:5f:d5:32:ab:0e:58:54:5a:46:4f:82:93:4f:c6:28:e7:21:
dd:cf:8d:59:33:3e:4e:ac:e9:fd:fc:60:c5:c9:8f:06:cc:19:
8f:2a:38:c0:09:91:47:d7:30:bf:94:64:71:c9:da:9b:f1:d5:
27:a9:02:71:27:c5:91:a8:22:e9:3e:31:1b:cc:e3:22:32:f0:
03:a5:38:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 17:28:41 2024 by rpki-client on console-fra.rpki-client.org