Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/pplxr_N4W9-TtueyHewgU_09j8w.roa
File: pplxr_N4W9-TtueyHewgU_09j8w.roa (raw, json)
Hash identifier: sPWDtngUCCxD7ZncAbK5Qw75MKZZvGRlvTf4wpCm5Kk=
Subject key identifier: A6:99:71:AF:F3:78:5B:DF:93:B6:E7:B2:1D:EC:20:53:FD:3D:8F:CC
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01879F6A130CD1480F1E8344A5500E3DF22F
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/pplxr_N4W9-TtueyHewgU_09j8w.roa
Signing time: Thu 20 Apr 2023 16:05:41 +0000
ROA not before: Thu 20 Apr 2023 16:05:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 84.247.20.0/24 maxlen: 24
89.47.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:6a:13:0c:d1:48:0f:1e:83:44:a5:50:0e:3d:f2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 20 16:05:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a69971aff3785bdf93b6e7b21dec2053fd3d8fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4f:5f:0e:60:7d:94:f4:e3:cd:1b:42:0d:68:
fd:7f:aa:de:45:ea:bb:b5:1f:f7:ef:22:02:ae:d6:
a2:63:e1:80:07:b4:b0:85:1c:6d:a9:be:74:f0:99:
7e:90:63:8a:24:30:2c:35:7e:b8:c5:53:ca:7f:29:
1a:e6:bc:82:04:7d:56:a0:97:4d:ab:78:7f:f4:c6:
10:8d:05:b9:ba:b6:32:48:e5:f6:49:7e:ed:ab:e4:
e3:a4:05:4f:70:46:e3:37:ad:e3:fa:f2:d7:68:0a:
76:89:39:f8:27:96:6f:0c:68:d1:90:e7:38:e4:14:
df:0b:df:fe:b9:83:81:f5:b1:e1:fc:47:b2:43:79:
ed:fa:06:38:0f:72:59:dd:45:6c:51:f7:17:59:46:
b1:29:6f:20:5f:74:d2:8b:01:d5:e7:b3:74:6f:e3:
82:f7:6d:61:6a:15:b5:c2:96:e6:14:a4:0f:3f:4b:
c6:f8:0a:45:ce:f5:26:48:d4:ba:b5:87:65:81:61:
b6:6c:37:4a:b9:5d:b9:69:7c:d8:09:bc:48:eb:ff:
75:fa:a7:72:1b:ab:f0:c4:54:d1:c8:63:af:1b:34:
97:06:f7:6b:23:13:26:08:65:28:83:6f:d3:28:16:
6d:32:e4:a6:db:e2:47:50:e9:c7:4d:8c:f8:d2:eb:
9c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:99:71:AF:F3:78:5B:DF:93:B6:E7:B2:1D:EC:20:53:FD:3D:8F:CC
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/pplxr_N4W9-TtueyHewgU_09j8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.20.0/24
89.47.249.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:20:b2:70:f1:62:f4:09:1f:c7:2c:d9:22:9a:4b:19:b9:62:
59:5e:b0:f8:b8:93:40:fe:50:06:87:8d:e6:69:47:f0:73:38:
f5:49:a0:78:b9:3c:02:9b:ec:3b:d7:7a:b9:64:44:88:06:83:
e4:5c:2a:67:00:cb:da:ac:69:5b:d1:fb:90:0d:f8:1a:48:eb:
6f:86:9a:f1:f4:db:97:85:09:7f:03:75:63:d6:57:df:8a:cb:
b9:9f:a6:2b:9f:14:3a:93:e8:82:5b:d0:66:04:19:10:15:4c:
93:52:79:f3:81:00:95:d1:01:97:3e:d7:b0:b9:e7:6e:db:9b:
42:b7:1e:48:67:34:78:b5:6b:c6:cc:4b:ca:e0:c3:db:3e:08:
53:31:a8:10:f4:b8:fc:68:7d:5f:c0:65:64:16:ef:ce:28:0f:
ad:27:9d:98:9f:82:bb:13:1d:2a:88:0c:c0:c7:92:d9:24:3b:
26:c3:66:19:5a:7d:6c:74:a3:28:90:ce:20:c8:be:7e:e1:fe:
da:c2:98:a8:3a:0d:1d:45:d4:ec:52:d6:4c:47:7e:01:1f:0f:
94:28:e0:d2:76:09:ea:a7:e5:e7:e6:ce:2a:69:23:65:73:ab:
1e:b0:aa:5f:69:68:c0:0d:80:cf:f6:3a:d6:d5:2f:e1:dc:d8:
47:9b:82:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org