Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/PL8b18BgtYPQHBcpwnB8tsVGBLs.roa
File: PL8b18BgtYPQHBcpwnB8tsVGBLs.roa (raw, json)
Hash identifier: xmIg/9t0Oy2ueLXAMNnk86MttoOu7K3adnu8tCABpBU=
Subject key identifier: 3C:BF:1B:D7:C0:60:B5:83:D0:1C:17:29:C2:70:7C:B6:C5:46:04:BB
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 018CCA999F3C51A1EAF42DC8C491CF652EB6
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/PL8b18BgtYPQHBcpwnB8tsVGBLs.roa
Signing time: Tue 02 Jan 2024 14:35:14 +0000
ROA not before: Tue 02 Jan 2024 14:35:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51487
IP address blocks: 77.228.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:9f:3c:51:a1:ea:f4:2d:c8:c4:91:cf:65:2e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 2 14:35:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cbf1bd7c060b583d01c1729c2707cb6c54604bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:14:7c:c7:7b:a6:bf:71:88:16:b6:7a:c4:
3f:9e:bd:0f:61:83:74:30:cb:dc:41:c4:2e:43:5c:
48:d9:66:42:40:16:87:96:88:23:dd:da:be:76:78:
c5:e7:b7:54:2b:6f:17:21:5b:79:a4:45:5a:a4:ff:
da:a1:15:d8:35:82:c7:35:64:be:64:0f:44:4f:34:
b0:2a:74:69:75:30:08:c7:5b:51:3b:48:c1:46:45:
56:3a:d3:0b:be:fc:05:f5:22:aa:91:6c:95:ee:31:
ce:d0:9b:eb:14:ea:a4:2a:47:26:25:42:f4:85:e9:
32:2f:2c:4b:73:de:c4:aa:7c:99:56:70:02:4b:ce:
d7:87:a9:92:a3:9a:b7:dd:5a:75:59:6c:35:b3:e4:
62:6f:de:88:a4:41:cc:9b:96:97:b5:2d:73:50:ad:
55:12:e2:35:23:61:c9:54:f1:d2:ff:fb:97:f9:91:
59:ae:5b:05:e8:83:e6:fb:c8:73:ef:02:95:70:0d:
14:80:a3:ff:50:39:9a:7e:8c:1e:01:16:d8:4d:94:
62:44:9f:83:1c:36:53:5a:31:5a:8e:a4:40:bc:cb:
cf:1e:fb:29:a7:fe:a7:a2:41:95:7c:82:3e:53:4a:
d9:9b:f0:48:1b:d9:ed:2a:4c:87:f6:98:6a:8c:d0:
16:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BF:1B:D7:C0:60:B5:83:D0:1C:17:29:C2:70:7C:B6:C5:46:04:BB
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/PL8b18BgtYPQHBcpwnB8tsVGBLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.228.200.0/24
Signature Algorithm: sha256WithRSAEncryption
36:9c:10:03:ef:7b:31:9e:67:ce:99:21:ea:31:7c:9b:41:a0:
08:0d:88:39:20:0c:ef:9c:d8:ae:4d:20:3e:16:00:18:85:e1:
01:7c:e6:35:f9:af:50:dc:3c:4d:90:bd:53:fc:2f:5f:9b:c3:
b0:a9:2a:fe:a2:b2:71:90:19:a1:bf:77:ee:f8:28:60:a5:d3:
41:00:e0:71:e6:91:2f:81:7e:af:5f:9c:29:a2:13:21:70:0d:
73:51:92:88:77:12:dd:6a:69:6b:3a:93:9f:68:0d:c0:df:9a:
9d:2d:34:41:da:c7:b9:42:3a:9a:97:33:f3:e0:fd:b8:df:45:
b9:0e:12:a5:de:21:7c:94:51:1d:65:6e:2f:66:42:3e:82:f3:
d9:53:f2:d4:79:f9:94:96:63:54:29:50:3e:09:cb:d0:8b:3c:
8e:c0:88:99:ef:b7:a9:bf:a0:b0:2a:55:91:0f:61:dd:99:b1:
7a:f8:73:84:02:8b:10:5b:03:21:c5:7b:3d:62:e5:80:9e:1f:
44:21:ae:35:9c:73:38:e5:91:96:7d:89:68:0b:95:00:b7:c8:
c4:ce:08:cd:b7:25:3c:cd:50:d5:a7:27:8c:84:a2:ee:20:7a:
57:04:88:24:57:a8:28:f3:57:70:20:57:8f:09:66:34:65:69:
65:fb:ea:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:15:13 2025 by rpki-client