Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/PBCYbd64HfESWEknw-JVaFXcOmI.roa
File: PBCYbd64HfESWEknw-JVaFXcOmI.roa (raw, json)
Hash identifier: No5z+AoTy1AyXjXSLpn3JP4nrJbPw6ik8WoD9tJgRaI=
Subject key identifier: 3C:10:98:6D:DE:B8:1D:F1:12:58:49:27:C3:E2:55:68:55:DC:3A:62
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018CC79416F2A47BE4CD95D4D15BDBA7B090
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/PBCYbd64HfESWEknw-JVaFXcOmI.roa
Signing time: Tue 02 Jan 2024 00:30:20 +0000
ROA not before: Tue 02 Jan 2024 00:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39087
IP address blocks: 109.248.36.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 04 Mar 2024 15:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:16:f2:a4:7b:e4:cd:95:d4:d1:5b:db:a7:b0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 00:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c10986ddeb81df112584927c3e2556855dc3a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b4:7d:6b:4b:f2:d6:f8:31:9e:42:8c:b7:c4:
78:f9:09:d6:ee:32:c4:6a:95:b5:6b:db:aa:5e:3e:
12:c0:84:41:bb:ba:8d:a1:23:87:45:cf:fa:f8:3a:
1c:fb:24:a9:7e:92:b4:61:46:a9:73:a2:9a:4b:01:
58:dd:b2:76:35:28:45:19:f9:cb:32:1c:87:70:4f:
42:be:10:02:da:7a:30:d4:04:d0:1e:38:6b:2e:f2:
34:d6:82:53:53:f5:4f:2f:5f:9d:71:1a:d8:c9:d1:
e4:24:a3:6c:39:31:cf:93:be:eb:2a:f7:95:58:07:
76:64:73:84:8b:34:7a:51:4f:62:b4:95:db:5f:22:
cb:97:79:9b:ff:a4:b8:41:fa:d3:8d:43:c1:59:13:
44:c7:21:6a:f2:8e:cb:36:55:90:0b:74:87:d3:75:
18:e8:cf:77:7b:a5:6a:16:8f:83:40:d8:31:b1:f2:
2e:4e:e5:11:d3:fd:77:ba:84:fe:46:26:96:b1:03:
3c:74:88:48:b8:02:86:71:6f:31:ee:13:e3:1b:de:
ff:61:39:e3:0a:9d:6b:0f:52:b8:d3:c5:a1:55:13:
4c:66:e1:c3:3f:27:ad:8a:d4:82:94:51:3a:a2:56:
fd:f4:17:97:ef:66:cf:b4:66:75:53:ee:92:b4:c8:
74:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:10:98:6D:DE:B8:1D:F1:12:58:49:27:C3:E2:55:68:55:DC:3A:62
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/PBCYbd64HfESWEknw-JVaFXcOmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.36.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:2f:80:14:1c:f6:bd:0b:47:4e:69:a6:00:56:ee:96:5b:1d:
01:d3:06:82:02:30:e5:13:3b:95:b8:f8:f6:cd:18:a5:45:7f:
cb:43:00:dc:34:fe:e1:6e:9f:53:32:6a:ec:e7:37:eb:84:a7:
7f:2b:84:1d:c2:3b:83:41:0c:be:fd:d1:5c:45:b9:af:41:a3:
38:de:86:07:ba:12:30:e6:5a:f9:d2:4a:08:0e:00:c2:2c:8f:
c8:1f:9f:83:47:3f:64:6f:6a:2b:b7:b6:fd:a9:b6:a3:53:77:
7c:07:ab:db:0d:42:81:c4:8e:af:e1:24:1a:71:e9:3d:13:38:
f5:80:13:f1:23:73:e4:37:4e:6f:2b:a4:1d:db:ff:aa:0e:23:
e8:a6:83:16:6c:15:ee:1f:2c:8b:11:6e:0e:97:cf:97:bc:58:
c4:d7:e2:c0:43:d9:6a:5d:37:50:e5:6b:41:07:5d:1c:83:01:
b0:5d:db:c7:50:26:f5:a6:4f:4f:72:72:3a:74:bb:54:89:c2:
71:04:5a:92:11:fb:98:cc:14:c3:5e:74:fd:a9:a2:0a:9e:95:
72:d2:05:20:97:89:53:98:8a:3b:b5:95:1c:30:d2:08:d9:b5:
d8:48:a0:f9:33:5a:80:a7:49:8e:1c:7d:94:e1:42:66:81:5e:
32:d3:55:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org