Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/PcC9opXoc2bOymyvMmJ9CPv7DH0.roa
File: PcC9opXoc2bOymyvMmJ9CPv7DH0.roa (raw, json)
Hash identifier: J2A8J1aEvgoQYgqpb2ZS5/TySjt3eoyMBI71zbZKevU=
Subject key identifier: 3D:C0:BD:A2:95:E8:73:66:CE:CA:6C:AF:32:62:7D:08:FB:FB:0C:7D
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018C38B80C458AFFAAC7A65A78B03DB62263
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/PcC9opXoc2bOymyvMmJ9CPv7DH0.roa
Signing time: Tue 05 Dec 2023 06:43:54 +0000
ROA not before: Tue 05 Dec 2023 06:43:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215906
IP address blocks: 92.61.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:38:b8:0c:45:8a:ff:aa:c7:a6:5a:78:b0:3d:b6:22:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Dec 5 06:43:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dc0bda295e87366ceca6caf32627d08fbfb0c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:ac:78:77:44:b6:29:09:3a:47:3c:e8:01:
6b:6e:89:17:6c:cf:dc:69:0f:4e:73:44:b7:02:6c:
b3:58:62:c4:19:7c:91:6c:09:1a:40:99:71:61:8a:
97:f6:2d:89:cf:b1:15:bc:8f:b2:8e:e3:41:71:74:
c9:73:fe:3b:54:98:c6:bf:8c:82:19:61:42:a7:c3:
eb:26:5c:5c:42:54:2c:4f:b7:b5:b6:46:67:31:7a:
53:69:da:c1:e6:26:e5:9b:c5:12:6e:b3:1e:91:31:
e5:e6:8e:69:71:aa:e4:64:20:df:74:7d:d8:a8:e7:
ca:a4:6c:cd:77:5e:a1:1e:4e:86:b1:eb:12:cc:b3:
66:e0:c6:11:96:6b:61:6b:e5:ac:75:70:79:dc:45:
80:ce:30:a2:e7:7d:2f:18:fc:bc:4b:74:78:be:9b:
67:17:30:6f:31:e3:5a:b4:75:a8:0c:3e:f9:33:34:
d0:31:19:11:98:66:e7:6a:99:70:73:57:b7:90:6d:
e0:6f:87:26:f6:80:fe:62:86:1f:fd:d5:b0:ce:40:
99:62:4a:b2:cc:35:e7:39:33:20:c5:36:d3:e0:82:
4a:52:88:28:e2:48:19:58:3e:ac:7d:b5:34:47:9f:
8a:29:26:f8:c3:4d:1e:19:ad:ce:ef:46:3b:bf:bf:
2f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C0:BD:A2:95:E8:73:66:CE:CA:6C:AF:32:62:7D:08:FB:FB:0C:7D
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/PcC9opXoc2bOymyvMmJ9CPv7DH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.111.0/24
Signature Algorithm: sha256WithRSAEncryption
98:34:d2:52:33:e7:8d:ea:b3:fd:77:94:ad:1e:db:45:e4:ed:
38:75:90:9a:50:9a:83:82:21:69:1f:14:ce:03:b9:18:a1:20:
5f:8a:e0:a2:3e:6c:06:ab:ec:94:da:1d:4a:ac:a9:d3:a6:a2:
23:9d:b1:6a:4f:45:14:20:fc:da:14:61:74:8d:e8:65:29:12:
b1:13:c6:ff:3b:8d:2a:ce:6a:76:a8:21:83:c8:3d:d9:4b:be:
1d:5a:64:59:b9:f1:85:1c:10:9f:ba:a4:78:d8:c7:1c:4b:7d:
15:fe:b0:5b:40:3f:1a:4a:35:f2:84:86:82:a1:74:ea:df:2e:
17:95:4c:1e:0c:01:10:eb:3e:48:c8:b0:34:a3:8f:9f:b3:72:
11:e0:04:72:2a:dd:53:7f:90:ef:af:66:4d:f8:42:30:c8:34:
8c:a2:d9:1f:b9:b0:76:ad:cf:14:4f:a3:58:4c:1b:c6:09:81:
17:9e:93:da:24:ad:d8:0c:31:55:0c:09:b2:b4:4b:bc:a7:c5:
5a:c9:fa:1f:fa:47:c0:f6:1b:9e:92:07:ff:d2:45:b3:2d:42:
55:1a:51:6e:99:24:f7:d3:2d:ce:19:7e:85:66:80:f8:b7:88:
6f:b2:53:49:0a:f6:c9:49:9e:64:05:33:a8:52:3c:45:64:e2:
67:89:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:21 2024 by rpki-client on console-ams.rpki-client.org