Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/PgFmg_9MROSothC_8iZaReFEc3U.roa
File: PgFmg_9MROSothC_8iZaReFEc3U.roa (raw, json)
Hash identifier: IECGOCXKwvPFaZ7UVW0c/PFCYeBQyCMYPItBXVqX5ik=
Subject key identifier: 3E:01:66:83:FF:4C:44:E4:A8:B6:10:BF:F2:26:5A:45:E1:44:73:75
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019122F36F313FBE00C09FAD9E288239E9E9
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/PgFmg_9MROSothC_8iZaReFEc3U.roa
Signing time: Mon 05 Aug 2024 14:31:04 +0000
ROA not before: Mon 05 Aug 2024 14:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215826
IP address blocks: 185.106.92.0/24 maxlen: 24
194.36.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 10:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:22:f3:6f:31:3f:be:00:c0:9f:ad:9e:28:82:39:e9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 5 14:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e016683ff4c44e4a8b610bff2265a45e1447375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:60:9c:d3:a4:c4:26:fe:c4:4c:c6:e1:3b:
ad:1c:88:13:39:8f:f2:b2:16:02:84:21:1c:ce:67:
66:8d:4d:8d:ba:49:56:4f:84:1d:87:b3:45:d3:17:
ef:bf:b5:eb:15:9c:40:b4:72:db:d0:98:5a:ed:30:
61:7c:89:a3:46:39:f4:df:4d:b5:a5:27:2d:ac:c3:
81:32:fb:79:47:1d:c6:f7:da:de:91:ff:9d:4b:2a:
7b:57:71:9c:d3:81:5c:b1:eb:9b:d5:c4:ef:6e:3f:
f4:09:f7:3b:03:1c:09:42:c1:e8:51:94:5b:d9:de:
9b:5a:a0:d0:15:bb:30:8d:44:67:df:3d:8e:9a:34:
6b:95:9d:0a:e2:4b:e8:bd:0b:14:21:40:66:bf:cd:
03:fa:eb:3d:43:d4:1c:65:bc:8f:8e:e5:26:7b:56:
c5:b4:c2:6a:c0:01:e2:f1:4b:cd:18:6f:ab:2c:32:
8d:24:20:87:6c:d8:48:0e:33:1c:39:60:ce:0b:3b:
5e:63:8a:f7:d0:27:80:67:d6:3d:61:fa:2e:e4:06:
4f:35:73:10:9e:38:c4:1b:6a:22:cf:1c:7a:15:06:
95:52:ee:ac:0f:8d:d4:2b:b6:07:52:49:96:d8:68:
f0:8b:b3:9e:78:ea:b1:28:07:f0:4c:13:8a:24:c6:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:01:66:83:FF:4C:44:E4:A8:B6:10:BF:F2:26:5A:45:E1:44:73:75
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/PgFmg_9MROSothC_8iZaReFEc3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.92.0/24
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
30:30:8c:2d:5a:01:1b:af:7a:81:47:c8:9d:db:44:6d:b8:68:
5b:37:f6:f0:2d:f4:12:4d:22:b4:77:e8:ee:29:3f:bd:d1:66:
55:b5:04:a1:b5:76:90:16:64:ec:5c:59:29:d6:40:9b:b6:39:
25:c2:20:69:59:97:fa:48:9c:e4:7f:55:87:a2:bb:fa:9b:cb:
b4:a4:dc:18:fe:26:42:01:4c:cf:90:49:61:93:e0:11:fb:78:
8a:c8:72:30:b8:e0:25:2d:60:bd:b4:bd:aa:63:a9:7c:45:20:
56:dc:e8:dd:e5:87:11:48:95:f4:03:61:73:1d:44:a1:3a:a2:
73:d4:05:0b:09:14:d8:6d:ab:0e:11:82:bb:ce:e0:59:7d:15:
3f:d7:3a:41:57:36:a8:95:f9:db:ef:7e:eb:77:77:c8:02:dd:
50:d3:3d:d8:60:4b:42:7a:03:f5:07:cc:0a:ba:f8:53:f6:66:
2e:e2:d8:ea:6b:2d:04:ec:93:59:fa:69:44:a8:5a:2b:ea:99:
95:3e:34:f0:19:d1:74:76:c5:a1:d3:28:96:82:c6:7b:00:82:
99:f2:a8:ce:3f:e0:d8:54:d8:f6:2a:99:16:75:de:46:fe:0a:
41:db:ec:f6:44:01:3b:3b:7c:f1:80:a2:85:ba:9f:a1:bb:9b:
45:a3:30:45
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZEi828xP74AwJ+tniiCOenpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjQwODA1MTQzMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTAxNjY4M2ZmNGM0NGU0YThiNjEwYmZmMjI2NWE0NWUxNDQ3Mzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6lgnNOkxCb+xEzG4TutHIgTOY/y
shYChCEczmdmjU2NuklWT4Qdh7NF0xfvv7XrFZxAtHLb0Jha7TBhfImjRjn03021
pSctrMOBMvt5Rx3G99rekf+dSyp7V3Gc04Fcseub1cTvbj/0Cfc7AxwJQsHoUZRb
2d6bWqDQFbswjURn3z2OmjRrlZ0K4kvovQsUIUBmv80D+us9Q9QcZbyPjuUme1bF
tMJqwAHi8UvNGG+rLDKNJCCHbNhIDjMcOWDOCzteY4r30CeAZ9Y9Yfou5AZPNXMQ
njjEG2oizxx6FQaVUu6sD43UK7YHUkmW2Gjwi7OeeOqxKAfwTBOKJMZgqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD4BZoP/TETkqLYQv/ImWkXhRHN1MB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvUGdGbWdfOU1ST1NvdGhDXzhpWmFSZUZFYzNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuWpcAwQA
wiSxMA0GCSqGSIb3DQEBCwUAA4IBAQAwMIwtWgEbr3qBR8id20RtuGhbN/bwLfQS
TSK0d+juKT+90WZVtQShtXaQFmTsXFkp1kCbtjklwiBpWZf6SJzkf1WHorv6m8u0
pNwY/iZCAUzPkElhk+AR+3iKyHIwuOAlLWC9tL2qY6l8RSBW3Ojd5YcRSJX0A2Fz
HUShOqJz1AULCRTYbasOEYK7zuBZfRU/1zpBVzaolfnb737rd3fIAt1Q0z3YYEtC
egP1B8wKuvhT9mYu4tjqay0E7JNZ+mlEqFor6pmVPjTwGdF0dsWh0yiWgsZ7AIKZ
8qjOP+DYVNj2KpkWdd5G/gpB2+z2RAE7O3zxgKKFup+hu5tFozBF
-----END CERTIFICATE-----
Generated at Mon Sep 2 12:55:53 2024 by rpki-client on console-fra.rpki-client.org