Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/PVRA4X3sBakTbwAJgdzjnAzJ2yg.roa
File: PVRA4X3sBakTbwAJgdzjnAzJ2yg.roa (raw, json)
Hash identifier: CdUptsGbrgizOP69f24SHyaAt5ttVAkVMxmkRd5tzFg=
Subject key identifier: 3D:54:40:E1:7D:EC:05:A9:13:6F:00:09:81:DC:E3:9C:0C:C9:DB:28
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01879ECF5A03F9BFF3AD7E7086CBE7C18832
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/PVRA4X3sBakTbwAJgdzjnAzJ2yg.roa
Signing time: Thu 20 Apr 2023 13:16:41 +0000
ROA not before: Thu 20 Apr 2023 13:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1257
IP address blocks: 193.234.87.0/24 maxlen: 24
192.71.220.0/24 maxlen: 24
193.180.247.0/24 maxlen: 24
192.71.180.0/24 maxlen: 24
193.180.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:cf:5a:03:f9:bf:f3:ad:7e:70:86:cb:e7:c1:88:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Apr 20 13:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d5440e17dec05a9136f000981dce39c0cc9db28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:cc:fb:16:42:5b:da:e7:66:f4:e5:03:d5:
ea:0b:89:7e:c4:58:29:4e:34:6a:1a:9d:c0:4c:4a:
7c:99:be:87:4e:4b:cb:3a:f2:f5:e3:44:fc:c3:79:
13:a5:2b:13:e4:da:dd:84:b1:f9:05:3b:bc:b2:b9:
1d:39:ff:c3:a3:9f:0e:64:9a:43:f0:2c:14:2d:6a:
07:c3:b9:08:b7:71:99:93:4b:00:32:ae:68:c2:65:
67:7d:52:9b:76:d9:40:d3:5e:4c:f6:e9:ec:b9:19:
4d:5a:d7:b9:54:35:3b:7f:7f:11:0b:e5:ca:17:c5:
99:6b:ed:ed:f4:7f:b2:0c:c5:61:f7:74:11:9c:78:
66:f3:6c:f2:ec:ad:86:c4:3a:e2:94:31:d0:9f:54:
43:e2:5e:66:92:f2:58:6e:7b:7b:92:4a:5d:66:00:
7d:ee:31:24:93:06:25:da:5c:6f:2a:10:89:0f:c6:
6a:f7:f7:2d:90:8a:a1:f3:e6:8f:71:fc:7d:24:73:
46:c5:02:54:c9:6f:b7:67:b8:12:17:ce:fd:0f:37:
cc:1e:69:ba:d3:13:83:97:24:37:a9:f4:d6:c3:a3:
b3:8d:0b:ba:f0:81:b1:e6:81:66:23:9a:26:52:d2:
be:1e:4d:0d:9d:91:ec:c6:4c:7e:d3:a9:5c:27:b4:
45:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:54:40:E1:7D:EC:05:A9:13:6F:00:09:81:DC:E3:9C:0C:C9:DB:28
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/PVRA4X3sBakTbwAJgdzjnAzJ2yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.180.0/24
192.71.220.0/24
193.180.207.0/24
193.180.247.0/24
193.234.87.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:74:69:33:75:e8:38:8c:98:15:45:05:8e:1e:09:99:b4:d9:
8f:c3:ab:d4:1e:57:82:15:e4:47:d6:9c:9b:9e:59:8b:52:a9:
2d:26:31:68:bd:4e:3c:41:a1:01:82:59:f0:68:8f:7a:79:90:
ba:c5:fc:8e:30:e7:9f:1b:15:c6:05:34:93:04:85:b8:12:47:
c8:f2:58:f7:d6:e5:2a:11:42:13:eb:1d:e0:fc:c0:56:46:78:
cb:c7:35:48:ce:90:b9:3f:fa:eb:37:68:e5:d1:10:d0:2b:fb:
fd:5f:23:4a:99:83:5e:c4:49:c6:a4:7f:b8:cf:13:79:02:49:
03:fd:40:4c:60:33:d3:af:7f:5f:98:21:05:7e:72:d3:29:21:
4f:d3:6b:de:a2:67:c2:1d:5b:2c:bd:15:07:c0:05:f7:61:f4:
3d:b2:09:38:e2:5f:f6:8a:9f:44:6a:f8:ad:cf:25:66:a0:54:
2a:62:cb:5d:61:16:2e:09:27:66:f9:b5:9b:91:71:13:cd:5a:
ff:b2:68:3a:c0:d2:7e:13:04:e8:21:16:f1:68:95:d6:d0:dd:
8e:7e:f9:0d:d3:ab:6d:76:8f:17:7a:94:33:89:f9:e1:52:57:
ec:58:c3:1a:26:fa:2a:96:84:c0:b4:6b:51:02:c3:08:71:53:
31:96:87:dc
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 4 15:56:11 2023 by rpki-client on console-fra.rpki-client.org