Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/PFBp8Rua36I6S7C5KQNiTrE6ubI.roa
File: PFBp8Rua36I6S7C5KQNiTrE6ubI.roa (raw, json)
Hash identifier: 9IrC9HA67Ml4dTham0aBuiBIasoZg/js97/vESZDhrk=
Subject key identifier: 3C:50:69:F1:1B:9A:DF:A2:3A:4B:B0:B9:29:03:62:4E:B1:3A:B9:B2
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0188063A144EE2DD131F3CBB51C8116AE0EE
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/PFBp8Rua36I6S7C5KQNiTrE6ubI.roa
Signing time: Wed 10 May 2023 15:14:09 +0000
ROA not before: Wed 10 May 2023 15:14:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211585
IP address blocks: 188.64.108.0/22 maxlen: 24
148.222.240.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:06:3a:14:4e:e2:dd:13:1f:3c:bb:51:c8:11:6a:e0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: May 10 15:14:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c5069f11b9adfa23a4bb0b92903624eb13ab9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:36:d8:20:eb:9c:07:aa:d9:32:cf:cf:88:
b1:b3:56:55:29:d1:3a:20:e3:8c:47:16:d5:49:cd:
bd:97:07:57:68:3f:b4:d2:68:53:76:75:2c:78:7b:
01:47:d7:9d:9e:d6:96:f9:50:cb:75:a9:e5:ad:81:
c7:d3:06:4d:ee:84:a6:25:f1:e7:46:b6:be:2d:74:
38:42:9d:e3:4c:85:66:87:28:c7:ab:ce:cb:f5:ee:
4e:a3:0f:e4:81:07:63:18:74:88:32:00:5f:aa:67:
13:a0:bd:e0:0c:b3:47:5d:f4:18:db:95:2c:74:7d:
20:2e:2b:97:82:c3:24:eb:29:69:a1:02:81:07:56:
a9:0d:18:5c:d5:35:33:d2:8d:02:9a:68:26:39:c9:
d6:9a:3a:0f:23:2e:a7:ab:d5:25:24:ac:e7:b4:8a:
0d:65:2f:2b:36:98:47:11:29:ba:53:6a:5b:e1:2f:
38:7e:95:96:31:e7:44:4f:79:4f:f9:57:fc:63:34:
0c:ed:1e:17:f0:e0:ad:98:a2:45:4e:68:7a:a4:57:
09:64:41:86:7d:f2:2a:51:29:86:8e:c6:cb:b5:c0:
de:16:0b:54:30:6e:f3:00:f5:96:ff:d6:a2:56:b7:
25:4b:14:cb:66:99:b1:22:20:ba:f3:be:19:53:a3:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:50:69:F1:1B:9A:DF:A2:3A:4B:B0:B9:29:03:62:4E:B1:3A:B9:B2
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/PFBp8Rua36I6S7C5KQNiTrE6ubI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.240.0/22
188.64.108.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:2f:9c:d7:c7:19:ca:bd:db:a2:a4:21:89:05:c9:1e:94:51:
eb:43:b2:8c:4a:5a:dd:89:9e:18:2b:fe:87:43:c7:33:bf:40:
b7:f3:e3:bf:c4:54:93:cc:c1:e3:e3:17:df:34:1d:4b:11:4e:
6f:d8:e9:36:de:b1:26:c3:fc:c3:24:08:58:f8:5b:67:2f:02:
96:66:19:36:f9:c6:3c:ec:6f:df:be:c9:03:5d:d1:ce:35:99:
e9:b1:06:92:75:b2:c6:bd:b5:32:08:b6:ac:30:00:dd:c8:c6:
6a:11:6f:59:ea:18:a6:3d:93:99:9b:f0:62:3a:a6:be:32:d1:
4f:16:c8:da:18:c2:e0:13:4f:b7:dc:53:8c:83:0f:7a:05:5b:
fa:a2:dd:2d:67:23:88:70:f7:66:d8:2c:82:15:8c:f4:91:96:
ab:fd:ee:bc:99:09:7b:fa:3d:69:ce:17:fd:c4:40:80:70:79:
0a:1e:63:66:11:78:e4:15:a1:fa:8a:38:d0:2a:0e:f5:b9:ed:
28:67:cc:cf:8a:7a:c1:32:f5:dd:24:54:fb:b9:ae:9b:c8:bf:
af:e9:70:25:19:4a:53:d7:c9:f4:ef:a3:7a:fc:fc:43:b9:bc:
46:1e:63:a9:12:76:fb:39:01:a3:83:14:93:69:2a:6c:8b:1d:
54:74:c7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:40 2023 by rpki-client on console-fra.rpki-client.org