Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/PQBY351Rqswjfafa6Gq4AKpTuJs.roa
File: PQBY351Rqswjfafa6Gq4AKpTuJs.roa (raw, json)
Hash identifier: HxAYsnG1kQ8UrLkErY5edK1gjDiXmrLBHy/9cO6HpO8=
Subject key identifier: 3D:00:58:DF:9D:51:AA:CC:23:7D:A7:DA:E8:6A:B8:00:AA:53:B8:9B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC9630369AE847F1458FA896D97E01FE4
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/PQBY351Rqswjfafa6Gq4AKpTuJs.roa
Signing time: Tue 02 Jan 2024 08:55:58 +0000
ROA not before: Tue 02 Jan 2024 08:55:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 88.216.187.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 17:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:63:03:69:ae:84:7f:14:58:fa:89:6d:97:e0:1f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 08:55:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d0058df9d51aacc237da7dae86ab800aa53b89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:53:33:73:66:22:dd:48:fe:f4:3a:c6:8a:
1d:8b:44:de:75:0d:d7:ad:48:b0:4b:a0:07:1f:57:
6f:ef:0f:0c:08:df:21:ac:67:fe:68:f3:31:06:00:
8d:1f:45:71:92:2e:8b:37:fb:b3:54:06:83:37:84:
7d:21:8b:3c:6e:39:8e:16:38:93:2e:c5:ad:b8:68:
c7:7e:f7:4e:8a:0b:8d:a4:3e:a9:c6:e1:1f:09:8e:
7a:17:28:46:3f:f7:86:6f:0a:9c:33:74:3e:e7:6d:
c9:ce:f5:f3:35:8a:39:83:52:a8:d0:40:3c:dc:37:
af:cd:5a:e2:c7:bd:b9:24:1f:3b:9d:37:9f:b0:8c:
7e:77:fb:cf:ea:37:46:09:53:1b:23:8f:bc:2d:c4:
2c:39:37:4d:c8:36:73:ee:78:17:0d:76:c9:7c:4e:
70:7c:71:2c:9d:c4:5f:14:58:15:9a:3f:66:d9:2d:
e4:4a:19:40:8b:79:f7:cc:7a:1b:1a:04:57:a7:57:
07:7b:79:da:65:75:ed:1b:eb:8d:49:0a:95:47:b2:
4b:51:f9:37:52:2e:84:93:b1:83:3b:ca:e9:26:37:
03:2b:b1:20:a9:e6:e6:67:9d:0c:af:cb:5a:a0:02:
c7:43:ea:db:9b:86:58:47:b4:09:da:de:6d:0e:25:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:00:58:DF:9D:51:AA:CC:23:7D:A7:DA:E8:6A:B8:00:AA:53:B8:9B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/PQBY351Rqswjfafa6Gq4AKpTuJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.25.0/24
88.216.187.0/24
88.216.197.0/24
Signature Algorithm: sha256WithRSAEncryption
78:35:27:46:ef:f9:f9:da:f5:22:f3:21:5b:f9:c6:a9:f7:a1:
f4:d9:22:49:37:27:2c:d3:53:85:23:ee:72:fa:52:80:95:b1:
aa:45:6a:fa:59:72:5a:4b:f1:55:aa:82:50:2a:2b:26:fa:a5:
13:cc:62:e5:4d:63:04:a7:ec:e3:63:1d:8c:6b:fc:61:32:8b:
76:eb:b7:a0:3b:a4:db:13:22:34:2b:e6:38:72:a9:af:3f:6b:
96:af:e9:a9:78:d9:c9:75:3b:ee:e0:6e:21:70:0b:dd:b5:01:
39:8a:21:13:1f:25:db:04:b8:49:e2:09:65:b5:58:11:ad:35:
86:aa:3d:49:14:8b:79:67:d8:31:1f:c9:12:b8:86:51:35:7e:
c6:c1:5b:5f:ff:3a:6f:fd:b5:b0:e4:87:74:1c:d2:93:8f:7d:
81:0a:b7:73:ad:b2:aa:72:66:c7:a2:a6:f0:96:f0:3e:64:ef:
9f:e8:2a:76:cb:7a:9d:e1:1d:d5:52:3d:d3:2e:7e:0b:6d:0d:
da:0d:c5:69:70:b1:9a:96:1e:f3:db:4d:38:1f:b7:fa:59:cf:
f9:1a:0b:16:87:ac:1e:4b:60:c6:0c:ca:1b:2a:2a:b8:af:6b:
bd:2a:43:ce:73:4d:62:4e:7d:34:5a:84:24:40:b4:71:87:1e:
48:62:3a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org