Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/PBLDlhKM71KYz0gcp2redIof2y4.roa
File: PBLDlhKM71KYz0gcp2redIof2y4.roa (raw, json)
Hash identifier: hBgYBWvPtatpb5SxKdYin8klDIxjh/NJImGx2Wpyw4k=
Subject key identifier: 3C:12:C3:96:12:8C:EF:52:98:CF:48:1C:A7:6A:DE:74:8A:1F:DB:2E
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018DE5F18A63C4A999862A7E846B20E382FF
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/PBLDlhKM71KYz0gcp2redIof2y4.roa
Signing time: Mon 26 Feb 2024 15:03:48 +0000
ROA not before: Mon 26 Feb 2024 15:03:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.246.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 15:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:f1:8a:63:c4:a9:99:86:2a:7e:84:6b:20:e3:82:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Feb 26 15:03:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c12c396128cef5298cf481ca76ade748a1fdb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:31:bb:1e:83:c5:23:23:55:5e:e8:a6:33:
b1:b8:94:8d:d8:03:c3:e2:5e:2b:47:36:a3:25:f7:
d0:fc:3b:12:e7:46:20:25:b8:3f:16:fb:56:55:40:
ec:09:f8:49:e2:1b:56:ef:9d:04:75:2a:b7:cb:ea:
3f:5f:4a:07:c0:43:fa:41:d4:33:69:8e:3a:c5:43:
41:72:1f:d7:12:6c:f5:26:23:0a:4c:b6:49:ef:37:
da:de:59:59:7f:a0:32:ed:eb:0c:6e:f6:91:f5:5d:
92:22:63:90:ea:67:60:bb:2b:eb:f8:fb:40:72:fd:
f8:7b:a3:67:53:38:1b:f1:42:f9:fc:0a:ce:d8:d8:
74:bb:5e:5e:be:af:ae:e1:49:30:81:04:2b:49:3d:
27:2b:52:f5:5c:9d:f2:c5:15:23:39:61:eb:c2:f4:
a0:85:4b:5c:71:65:ff:e8:a1:33:0a:0e:c6:08:52:
fe:83:1e:39:23:c4:e6:13:23:c3:43:50:80:8c:c9:
9a:43:5d:64:a8:24:b9:11:80:ea:c2:b1:21:2c:ee:
ae:42:cc:48:89:53:e2:36:b0:bf:bf:15:f1:0a:a4:
f1:6d:fb:c5:37:d9:ac:87:62:74:02:03:36:e8:21:
de:a2:89:53:23:8b:07:8a:3a:1c:e3:65:89:5b:71:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:12:C3:96:12:8C:EF:52:98:CF:48:1C:A7:6A:DE:74:8A:1F:DB:2E
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/PBLDlhKM71KYz0gcp2redIof2y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
22:76:3e:31:75:2f:7a:d5:29:1f:fb:bc:f9:c1:f5:39:95:2b:
67:48:70:12:d4:18:8a:f1:62:b5:6e:14:9e:2a:98:43:44:cf:
70:ee:7f:52:99:ce:be:1c:d9:df:d9:87:59:1f:23:25:62:03:
d6:18:5f:9f:9c:f7:05:25:5e:90:d7:e3:84:a2:99:4c:b5:d2:
16:22:5a:f0:62:06:19:5f:c6:26:48:0a:0f:ef:c6:10:ac:37:
8a:d0:84:60:bd:22:87:72:b6:d4:d2:aa:b0:e4:12:54:67:e7:
31:26:0a:b1:48:d2:2a:cc:f9:4e:33:f1:92:b2:a9:69:42:9f:
36:18:54:23:6e:1c:2b:fe:dc:e1:bd:35:1a:54:de:4e:f4:2a:
a8:e3:52:cf:4b:d0:5f:da:19:8f:27:5a:8d:ba:db:ae:3f:28:
44:66:15:69:d2:44:86:43:40:12:ad:c3:2e:6a:70:8b:6a:50:
36:7c:40:a2:37:34:fc:ae:06:e2:08:61:0e:f0:6b:4e:bb:4d:
ff:42:28:e2:94:56:57:14:e9:7a:72:bb:55:64:f5:08:58:87:
c9:bd:9e:22:9e:9f:91:c4:59:79:a5:ad:24:09:fa:39:1e:4a:
0d:f3:4d:b4:de:0f:2e:f0:27:4e:22:7e:fc:cd:c1:be:b1:90:
b7:a6:b2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org