Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/Pmqu_OxWv6_--npGzASvK38HrFg.roa
File: Pmqu_OxWv6_--npGzASvK38HrFg.roa (raw, json)
Hash identifier: Qu3f5fuNjdP8rOzjMbZ6eOxL54tmfzowfG8f4+fD+6s=
Subject key identifier: 3E:6A:AE:FC:EC:56:BF:AF:FE:FA:7A:46:CC:04:AF:2B:7F:07:AC:58
Certificate issuer: /CN=b48184549e12e9934bffb7615bca3d0c25681360
Certificate serial: 0185728CA472F0CC975F8124876D1AB6C8A6
Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/Pmqu_OxWv6_--npGzASvK38HrFg.roa
Signing time: Mon 02 Jan 2023 12:54:57 +0000
ROA not before: Mon 02 Jan 2023 12:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5409
IP address blocks: 213.218.0.0/19 maxlen: 19
212.126.192.0/19 maxlen: 19
195.2.160.0/19 maxlen: 19
185.95.80.0/22 maxlen: 22
2001:4180::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:a4:72:f0:cc:97:5f:81:24:87:6d:1a:b6:c8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360
Validity
Not Before: Jan 2 12:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e6aaefcec56bfaffefa7a46cc04af2b7f07ac58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:a4:41:43:3c:65:1b:f8:f6:f7:9a:99:34:
19:5a:da:64:5f:9d:24:77:e0:a9:e9:30:a4:e7:a4:
07:2f:3b:d9:ac:95:30:76:5e:8f:e8:91:e5:a4:bf:
b5:0e:94:66:d7:69:f4:ea:ea:ba:2d:45:9a:4d:b0:
32:50:9f:62:78:2f:8d:81:a2:22:6e:4e:b7:15:aa:
83:ae:7b:e5:3f:f9:39:4a:1a:0a:fd:9e:9d:d3:00:
ad:cd:e1:09:92:81:ab:01:e4:ec:57:f9:e7:a2:b8:
34:9b:e5:9c:e3:78:3a:35:8e:3f:b7:9e:50:74:74:
82:75:6c:22:a9:a9:3e:7d:ab:43:95:00:42:1f:d0:
50:83:41:2d:d7:4d:59:1e:37:f4:a9:8b:82:55:6e:
69:fe:55:ee:fd:d9:c4:8f:2b:c9:d9:c8:40:15:78:
de:4b:30:4f:59:df:db:89:f2:26:04:26:2d:3d:87:
95:61:41:bc:0b:2f:3e:5f:2b:5e:c6:b4:4d:2a:cf:
b3:74:72:f5:47:60:5d:a8:9a:9b:61:ce:59:95:23:
40:15:39:cb:82:9a:45:99:3a:fd:68:8e:19:28:79:
59:b9:d5:00:eb:ab:4a:a0:46:97:68:3b:36:61:71:
db:3e:15:18:72:56:2b:d4:9a:c3:5e:29:d0:27:6e:
5a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6A:AE:FC:EC:56:BF:AF:FE:FA:7A:46:CC:04:AF:2B:7F:07:AC:58
X509v3 Authority Key Identifier:
keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/Pmqu_OxWv6_--npGzASvK38HrFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.80.0/22
195.2.160.0/19
212.126.192.0/19
213.218.0.0/19
IPv6:
2001:4180::/32
Signature Algorithm: sha256WithRSAEncryption
a8:48:80:53:80:4f:a3:5b:06:1c:6f:f0:bc:55:05:94:29:f2:
19:04:64:bc:06:d0:b6:9e:7a:88:f9:a5:a2:68:ab:f3:3b:69:
2d:63:e6:92:dc:f7:36:44:6b:08:ab:1e:33:38:48:8d:2d:f5:
96:df:a8:b2:92:e5:81:2c:37:99:3f:c8:48:ab:0a:78:55:0a:
b2:f2:91:d4:b1:e6:bf:68:30:ac:d8:ef:b4:fb:a9:81:0c:cd:
5c:b5:35:d2:d4:b1:13:18:d9:1a:d8:6f:3a:10:c8:b7:b5:c2:
73:71:b1:14:9d:32:8b:46:34:58:3b:72:1b:e5:39:20:da:7e:
b9:4b:33:cc:ec:a1:d8:3a:8a:e2:04:7e:84:68:55:94:74:2d:
eb:06:45:c1:59:a7:f8:95:3a:9d:a8:27:d8:63:b4:83:6c:a7:
8f:85:c4:e8:02:03:98:db:f5:cd:66:35:d6:36:d1:d6:6d:09:
ea:f9:a8:22:26:1c:83:d7:ff:24:5e:97:b0:ba:66:d7:ac:66:
d2:97:ea:eb:22:af:87:de:30:3b:dd:e6:c3:a0:08:02:5c:32:
51:28:a8:e1:f6:fa:64:f6:2f:9e:6c:2b:af:f4:c3:74:d6:35:
81:2a:a3:86:bf:03:2d:0d:6c:ef:27:0d:27:7f:33:e1:4f:d7:
45:d8:d0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:52 2024 by rpki-client on console-fra.rpki-client.org