Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/PBPffZQTntKyQDc8nSi46vYogMY.roa
File: PBPffZQTntKyQDc8nSi46vYogMY.roa (raw, json)
Hash identifier: dWc9MC99XzQpgmMvBOlNbj1mXQqDGt5moSL1BFq2Ixg=
Subject key identifier: 3C:13:DF:7D:94:13:9E:D2:B2:40:37:3C:9D:28:B8:EA:F6:28:80:C6
Certificate issuer: /CN=25a553794223e6b4c632779b51371dc4e7d70705
Certificate serial: 01856F023B196EA8DC8ACC64618495E359C0
Authority key identifier: 25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/PBPffZQTntKyQDc8nSi46vYogMY.roa
Signing time: Sun 01 Jan 2023 20:24:55 +0000
ROA not before: Sun 01 Jan 2023 20:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39756
IP address blocks: 46.102.248.0/24 maxlen: 24
89.36.24.0/21 maxlen: 24
176.223.224.0/20 maxlen: 24
89.36.30.0/24 maxlen: 24
176.223.240.0/21 maxlen: 24
89.41.60.0/23 maxlen: 24
89.47.247.0/24 maxlen: 24
89.33.207.0/24 maxlen: 24
176.223.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:3b:19:6e:a8:dc:8a:cc:64:61:84:95:e3:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a553794223e6b4c632779b51371dc4e7d70705
Validity
Not Before: Jan 1 20:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c13df7d94139ed2b240373c9d28b8eaf62880c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:24:e3:54:8e:32:3e:0a:cb:c4:2b:2f:e9:
6c:db:2a:83:97:a5:e8:89:af:f3:07:1a:66:61:e9:
89:17:d9:13:cf:2d:dc:69:74:6c:09:8c:7d:e2:2a:
60:46:9f:82:bd:c0:55:04:37:e0:68:78:93:2c:19:
a4:e0:16:69:1a:d9:5a:8a:7f:52:9f:cb:51:dd:97:
d8:55:d5:5a:b7:b9:24:6c:9a:3f:e0:b3:57:96:27:
8d:db:bd:ce:fd:ef:00:0f:75:32:89:c1:6f:3c:de:
ac:46:db:69:89:13:68:60:13:a0:07:2c:4f:7b:c7:
f6:1a:2c:67:85:46:bd:e9:1d:d1:c0:9e:91:30:57:
cc:ab:60:bc:c8:2f:a6:ff:f0:13:a9:a5:60:1f:18:
62:8a:bf:68:fb:8e:ee:45:18:ab:af:0e:f4:c8:2c:
15:f7:cb:22:26:82:cf:26:d9:79:39:3a:75:c8:1d:
6a:9c:a3:35:98:46:ef:d1:be:31:a5:dc:d1:70:9c:
67:ec:a3:60:e1:4b:10:2a:ce:fa:cb:58:e2:aa:5e:
d4:81:da:67:16:a5:61:7f:4d:98:6b:9d:0f:6a:45:
73:c7:44:94:c7:20:3a:bc:d6:d5:14:3a:6c:31:3b:
19:26:ea:46:d2:37:a3:27:72:1f:c5:a4:27:34:7b:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:13:DF:7D:94:13:9E:D2:B2:40:37:3C:9D:28:B8:EA:F6:28:80:C6
X509v3 Authority Key Identifier:
keyid:25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/PBPffZQTntKyQDc8nSi46vYogMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.248.0/24
89.33.207.0/24
89.36.24.0/21
89.41.60.0/23
89.47.247.0/24
176.223.192.0-176.223.247.255
Signature Algorithm: sha256WithRSAEncryption
4c:f9:5f:93:ba:75:9c:22:1d:4a:f5:f3:2c:91:3c:62:89:f5:
46:95:64:67:a6:6f:d3:72:d7:fa:7f:18:fb:4b:18:44:0c:c9:
eb:88:7a:5a:44:5b:de:c4:15:b1:2b:cf:7a:01:71:20:6b:f9:
a4:68:0f:10:84:fd:ea:b3:3a:cf:10:03:66:95:97:50:63:5c:
72:d8:42:09:41:22:e2:91:f9:5d:19:b3:78:c5:70:7e:16:76:
f9:3f:b9:44:e2:14:4d:0f:a3:f5:83:29:ec:3f:0a:ae:ca:e1:
b9:50:cf:17:4e:20:f0:1d:90:20:a7:e4:dd:fb:33:d4:1d:76:
cc:95:e6:c3:61:23:0a:71:42:db:3d:eb:1c:e7:52:e1:23:c6:
49:8c:cd:a5:03:28:fc:b6:eb:36:6b:9c:82:9d:1c:cc:c2:8a:
bf:6a:f2:19:c1:7a:ad:af:56:dd:77:97:0b:c5:a4:9a:48:6a:
1d:23:45:cf:4a:6d:c2:69:13:3b:81:7a:84:54:b8:c7:45:34:
f6:1c:10:4a:c3:c9:10:15:24:bd:34:7d:e4:d8:2d:00:e7:35:
2d:fe:2b:e9:a5:f3:f1:97:bb:1a:40:e1:4f:11:c4:50:25:2e:
ca:f8:cf:ba:b7:c1:ac:60:88:42:56:24:95:33:48:a6:68:66:
24:cb:02:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:53 2024 by rpki-client on console-fra.rpki-client.org