Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/pvhEQJHacZ-HFYn4w7uwNmwirCA.roa
File: pvhEQJHacZ-HFYn4w7uwNmwirCA.roa (raw, json)
Hash identifier: HkbizjbJXM4ZdiVs32fyERzgos6mE/ge5ZjBwtCEsrw=
Subject key identifier: A6:F8:44:40:91:DA:71:9F:87:15:89:F8:C3:BB:B0:36:6C:22:AC:20
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0192519060C9CA741093972B9AED8C2D1EC4
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/pvhEQJHacZ-HFYn4w7uwNmwirCA.roa
Signing time: Thu 03 Oct 2024 08:47:49 +0000
ROA not before: Thu 03 Oct 2024 08:47:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 213.145.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 05:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:90:60:c9:ca:74:10:93:97:2b:9a:ed:8c:2d:1e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 3 08:47:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6f8444091da719f871589f8c3bbb0366c22ac20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:38:cb:f0:f3:64:1b:20:6f:e9:48:12:08:
d0:fc:55:b4:5a:37:fc:bf:7c:18:6f:22:47:ac:ee:
c1:16:0c:ce:ec:02:17:5f:2c:75:f0:e5:9c:cb:42:
90:88:f8:be:79:8d:fa:7b:39:8f:b3:99:37:8b:53:
92:7d:8c:a2:c5:54:4a:3e:a7:e9:63:42:90:86:16:
c1:77:9a:67:b6:1b:1b:e6:3f:5f:ba:94:a9:59:21:
54:09:bd:2f:6f:45:84:3d:d6:8e:0c:c8:a0:1b:91:
fa:54:d9:82:66:1c:40:cf:d8:ab:af:4b:0e:f3:66:
85:27:28:66:2b:34:12:95:97:16:20:93:46:92:5c:
83:8f:68:c8:70:f0:12:8b:a3:a3:74:df:a5:52:f7:
f6:67:fa:ba:42:03:47:5b:bc:a7:3e:6b:8e:f0:58:
84:26:3d:93:c0:b9:68:33:72:d3:db:75:cb:af:52:
dc:0b:b9:44:f7:9b:4f:a6:26:c2:b1:a8:25:bb:e2:
3d:03:6a:5b:be:53:60:f8:bf:c2:c1:d1:21:88:98:
b6:83:20:57:9e:16:a8:b7:2a:ef:97:66:03:62:a1:
be:29:74:23:3e:ee:12:65:a6:51:b0:81:e2:a7:5d:
94:f0:3d:42:8d:48:7d:f5:40:c2:d6:50:90:62:ce:
59:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F8:44:40:91:DA:71:9F:87:15:89:F8:C3:BB:B0:36:6C:22:AC:20
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/pvhEQJHacZ-HFYn4w7uwNmwirCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:16:e0:b6:b9:89:1f:ff:bf:ad:55:c3:79:14:62:57:a2:cb:
37:b5:f1:12:fe:37:54:2e:55:45:c4:3b:fd:f2:a0:a6:f3:b0:
97:51:41:2c:0d:eb:37:13:8d:4d:43:29:42:d8:63:f5:4f:e8:
86:9b:f4:f9:ab:40:ce:d7:13:1c:57:26:de:13:2d:c6:36:a0:
9a:65:1f:61:07:b0:a7:a1:d6:2c:e9:51:74:36:40:de:29:44:
c5:29:f6:18:73:59:8d:9c:77:e7:70:68:f2:ad:54:4e:df:fc:
6a:e8:74:8b:1e:b1:bd:02:24:9f:7e:6e:b6:f3:b3:9b:d9:f0:
b8:60:e5:5f:b0:3e:16:19:fc:ea:8b:1f:a8:ff:4b:fe:1c:94:
f2:4e:9e:7e:1d:6b:76:07:07:8b:4c:a1:62:5e:5d:e4:f6:27:
aa:0d:55:6f:a1:47:0a:76:d4:27:b2:4b:0b:96:1c:f6:10:70:
75:11:af:52:a8:9d:77:a4:25:67:76:f5:ef:e8:fa:96:e1:98:
a5:04:8e:6e:36:92:cc:22:3f:05:49:72:f4:ec:3e:a0:40:dc:
5b:c2:d0:b0:98:21:6a:78:02:a6:f2:aa:4b:f6:97:18:8e:23:
8d:a8:1a:ca:56:cc:2c:85:e5:e3:0f:d3:1a:72:37:92:f9:f8:
4c:3c:15:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 06:02:24 2024 by rpki-client on console-fra.rpki-client.org