Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/PLBqor7RJAbvlauy4MYoIJhnDPM.roa
File: PLBqor7RJAbvlauy4MYoIJhnDPM.roa (raw, json)
Hash identifier: y0V1kBe0sB2cPTD3dP/jI2YZM1Rn8CJ4BoBtDX6gQUY=
Subject key identifier: 3C:B0:6A:A2:BE:D1:24:06:EF:95:AB:B2:E0:C6:28:20:98:67:0C:F3
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 018FE3353B69BE34FC5199FA5EE2EBDC74C0
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/PLBqor7RJAbvlauy4MYoIJhnDPM.roa
Signing time: Tue 04 Jun 2024 12:24:27 +0000
ROA not before: Tue 04 Jun 2024 12:24:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 86.111.230.0/24 maxlen: 24
86.111.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 18:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e3:35:3b:69:be:34:fc:51:99:fa:5e:e2:eb:dc:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 4 12:24:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cb06aa2bed12406ef95abb2e0c6282098670cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:e1:95:89:7a:f8:ce:f9:d5:1f:0f:13:c6:
19:8b:ce:ca:e6:a5:42:ff:0a:6a:df:43:29:e1:28:
cd:18:2b:54:a7:ed:28:ea:e1:41:6a:16:4c:56:49:
eb:09:17:20:13:e7:bc:70:90:c1:5d:8d:aa:8c:bc:
28:27:da:a1:c7:e8:79:ce:88:ce:2a:e5:b7:6f:ca:
cf:75:a9:5e:35:ee:dc:82:9b:18:96:74:68:55:f4:
48:12:b3:0e:45:e6:31:0d:16:d7:f6:3c:48:55:2f:
9b:6d:78:b1:dc:93:a6:ff:05:8a:7d:86:d6:89:b6:
45:7a:87:d3:2b:9f:36:aa:12:6b:bf:49:82:bf:8d:
50:61:16:40:02:3b:fc:56:c5:03:d5:28:45:09:35:
24:07:b8:c0:91:de:fc:3a:95:fc:bc:b2:f3:f2:aa:
9f:5b:46:b3:a5:16:af:d7:3f:11:5e:25:f9:cf:a9:
34:ec:9f:d7:7d:4f:9f:9a:54:30:fb:7c:37:f3:ff:
9f:3c:dd:7e:6c:fd:f1:06:37:c8:2d:e9:b4:9c:fd:
32:6c:db:db:bf:a6:3a:86:aa:12:7d:e5:0d:88:8b:
84:a3:21:37:e3:93:09:ae:88:de:9f:29:b9:f2:e1:
70:0e:d6:84:6d:ba:f0:64:ee:b2:c8:c4:be:14:9f:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B0:6A:A2:BE:D1:24:06:EF:95:AB:B2:E0:C6:28:20:98:67:0C:F3
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/PLBqor7RJAbvlauy4MYoIJhnDPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.230.0/23
Signature Algorithm: sha256WithRSAEncryption
48:ae:82:7a:a0:0a:77:57:87:dc:cb:27:eb:16:49:24:fc:81:
ee:95:b9:0a:6c:b1:62:db:dd:86:60:2f:ef:c3:2a:36:4a:06:
e9:8b:47:5a:9d:f5:21:08:6d:15:3f:c4:31:57:da:0c:62:6a:
8a:dd:56:f7:2a:14:cf:61:cf:60:82:f2:14:9b:45:3f:be:0c:
fd:cb:c2:07:3a:40:50:90:d6:44:81:c9:1c:c0:c4:74:27:a1:
58:30:eb:9b:61:2c:1f:7e:29:a6:41:0f:26:ff:d1:ce:c9:67:
43:cd:34:88:82:03:c8:0d:0e:43:7a:ca:f2:45:9d:19:1d:a2:
41:e0:cb:3b:b7:ed:24:7b:90:7d:59:33:52:c5:fa:76:84:ee:
db:83:0a:0b:11:a9:d6:de:53:5b:2f:8e:a4:5c:37:58:7b:70:
44:a8:22:8b:7e:63:03:15:ec:30:d4:d0:81:9e:c2:19:1f:3b:
4d:88:58:d3:62:02:9d:58:12:db:e5:6b:d8:a9:d9:f7:16:82:
a4:94:27:45:c8:2a:9c:fe:6d:bc:f7:e3:18:36:b5:bc:36:b3:
c8:00:82:e1:82:54:f5:25:41:43:ee:10:d6:22:d6:e4:ea:0f:
92:90:51:a8:bc:c9:fa:c2:3e:e1:8c:cf:7d:25:ef:76:8e:d4:
16:f2:b1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:17 2024 by rpki-client on console-ams.rpki-client.org