Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/PzK0Vi5xvNl_lfmDzuWdoE_IbRU.roa
File: PzK0Vi5xvNl_lfmDzuWdoE_IbRU.roa (raw, json)
Hash identifier: 34PTB+rYPRWhk/jFCPoTfcIEU5ksE7P8Q8/fd9tcSLc=
Subject key identifier: 3F:32:B4:56:2E:71:BC:D9:7F:95:F9:83:CE:E5:9D:A0:4F:C8:6D:15
Certificate issuer: /CN=f25b336456b47dfc0f39dc91a6b882a4aabbeab3
Certificate serial: 01877541A2276B184BE1290D6C8DAA06B04D
Authority key identifier: F2:5B:33:64:56:B4:7D:FC:0F:39:DC:91:A6:B8:82:A4:AA:BB:EA:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lszZFa0ffwPOdyRpriCpKq76rM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/PzK0Vi5xvNl_lfmDzuWdoE_IbRU.roa
Signing time: Wed 12 Apr 2023 11:37:28 +0000
ROA not before: Wed 12 Apr 2023 11:37:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 194.76.217.0/24 maxlen: 24
194.76.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:41:a2:27:6b:18:4b:e1:29:0d:6c:8d:aa:06:b0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25b336456b47dfc0f39dc91a6b882a4aabbeab3
Validity
Not Before: Apr 12 11:37:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f32b4562e71bcd97f95f983cee59da04fc86d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:07:0a:17:c3:5c:15:15:e6:d8:4e:ce:58:
b8:ab:24:6b:6a:08:87:1a:8c:66:3a:d8:75:12:6c:
ba:65:c3:e1:77:97:c7:98:ab:6c:05:af:3a:04:d2:
be:79:0f:f2:2a:d9:ec:bc:1c:94:10:ab:6b:1e:54:
48:39:09:74:ca:d3:58:ac:0e:3c:d9:c5:b4:14:ad:
83:1c:ae:65:6c:0f:23:05:7f:c3:79:1b:af:24:85:
de:0d:01:cb:e4:cb:9c:32:e3:6e:94:8a:c5:19:43:
64:fb:af:64:4b:40:39:ed:21:6f:2c:f3:89:bc:54:
b2:1e:76:f4:ed:4e:8c:c5:ba:f8:7b:77:0c:32:f3:
65:7c:58:28:a8:06:f7:03:79:99:f9:96:80:06:73:
e7:64:85:90:f2:52:2c:7c:9e:2e:ca:c2:0b:43:97:
c6:ea:9e:90:3d:2b:42:7f:a6:d3:2d:aa:d0:ff:a9:
85:3f:9c:f9:ad:04:0c:d9:a7:8c:ff:2d:2a:86:29:
54:3b:44:a2:da:3c:73:21:08:f7:e5:d5:bb:5a:fd:
4b:f7:96:c4:3b:64:18:ff:ec:a6:9b:95:84:47:23:
af:17:cb:b0:c1:38:bf:61:d7:ba:db:98:85:a2:08:
ab:3f:e2:34:e0:91:db:c2:01:b0:f9:39:a3:fb:3f:
46:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:32:B4:56:2E:71:BC:D9:7F:95:F9:83:CE:E5:9D:A0:4F:C8:6D:15
X509v3 Authority Key Identifier:
keyid:F2:5B:33:64:56:B4:7D:FC:0F:39:DC:91:A6:B8:82:A4:AA:BB:EA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lszZFa0ffwPOdyRpriCpKq76rM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/PzK0Vi5xvNl_lfmDzuWdoE_IbRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.217.0-194.76.218.255
Signature Algorithm: sha256WithRSAEncryption
15:3f:54:b4:bd:25:da:24:b4:43:b8:41:04:a5:c4:6d:f6:8a:
df:3d:a9:9e:e9:e4:13:2b:89:ef:3b:a2:95:d1:fb:9a:54:2e:
f5:78:a5:bc:7d:4b:16:53:8a:f8:94:18:ee:d7:c2:15:b8:83:
97:90:e7:3c:7c:f6:3a:b8:6a:34:b2:ce:df:64:5f:89:ad:7f:
5e:bb:73:81:24:81:23:c0:73:96:68:fc:30:6c:8a:2b:89:ce:
04:4f:4a:c8:fc:cf:ef:e2:c2:27:11:97:c2:6f:e5:86:3a:9f:
a9:26:c2:aa:56:ff:2a:2c:85:39:e4:57:49:91:98:90:05:ad:
b2:05:df:1b:dc:c0:d0:75:6c:d0:b3:68:89:b5:78:8e:0e:53:
74:9e:09:ed:a8:18:26:a4:10:f0:14:d0:58:75:50:6e:df:82:
28:df:10:f3:c9:28:eb:bd:e0:04:6b:cb:41:c8:c4:ad:39:0c:
c9:32:22:4f:01:5d:ca:43:22:35:04:b8:75:6e:0b:d1:7f:23:
98:b6:34:ac:1c:f3:6b:b5:f0:c7:d3:db:7a:a3:a1:18:a1:be:
c8:c7:a5:73:86:f0:89:20:4a:76:7d:d3:34:93:34:7b:cc:a6:
c7:2e:ee:b0:b7:92:95:3c:f3:41:4d:a9:9f:9f:3f:7b:46:2d:
be:e4:04:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:21 2024 by rpki-client on console-ams.rpki-client.org