Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/pbthBKxSpJb5I6GdDHhNfYDThEo.roa
File: pbthBKxSpJb5I6GdDHhNfYDThEo.roa (raw, json)
Hash identifier: SGy7YMpdTiaWxD+qChwcTx9Uom5vsmXDPzr7sTcCIbM=
Subject key identifier: A5:BB:61:04:AC:52:A4:96:F9:23:A1:9D:0C:78:4D:7D:80:D3:84:4A
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 0185714C1132BB0F5B3006FDD0AFAFC32F4F
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/pbthBKxSpJb5I6GdDHhNfYDThEo.roa
Signing time: Mon 02 Jan 2023 07:04:48 +0000
ROA not before: Mon 02 Jan 2023 07:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203985
IP address blocks: 94.240.29.0/24 maxlen: 24
94.240.30.0/24 maxlen: 24
94.240.31.0/24 maxlen: 24
94.240.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:11:32:bb:0f:5b:30:06:fd:d0:af:af:c3:2f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jan 2 07:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5bb6104ac52a496f923a19d0c784d7d80d3844a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:5c:79:40:33:4b:38:e5:4d:2f:02:f1:99:
c6:ab:37:0b:aa:22:7b:e1:c7:46:ca:9b:92:1c:64:
44:95:17:46:53:22:65:83:66:7c:2b:73:2f:ad:ef:
f4:71:4e:30:fd:8e:8b:a8:bf:29:75:92:aa:85:a7:
1c:ec:be:a5:a8:41:73:93:bf:80:f2:7f:40:98:f9:
4d:30:30:27:ec:38:d8:67:1a:4d:c9:71:4d:d9:80:
47:fb:40:24:ae:76:77:be:e8:c6:a0:ab:6a:a8:2a:
ce:d3:17:7b:a8:e7:55:e5:df:c7:9b:a5:3b:70:a7:
06:b7:cf:ae:db:9c:07:d1:19:e8:3a:0a:28:28:c2:
9b:24:94:8d:9e:24:83:c8:d6:7d:c3:12:90:68:7d:
59:bc:0e:6b:a4:7f:69:11:af:47:ec:60:c6:73:d3:
76:64:01:3f:cc:15:13:df:5d:59:39:85:3b:6f:a1:
1d:a4:b2:b0:51:2c:2c:fe:cc:8d:c5:fd:95:d4:fb:
6a:b0:be:c9:b3:48:fb:e8:0e:de:ff:3b:a9:2a:c9:
9f:1f:6a:4d:9a:2f:32:23:7b:f9:50:8a:38:f6:36:
20:a7:98:c5:07:6a:6b:65:bc:84:0d:89:25:82:50:
c1:b3:7f:57:fa:a0:69:6e:84:c8:97:7a:d7:9c:a4:
b0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BB:61:04:AC:52:A4:96:F9:23:A1:9D:0C:78:4D:7D:80:D3:84:4A
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/pbthBKxSpJb5I6GdDHhNfYDThEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.28.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:6c:4b:e1:f4:4d:b8:48:c0:4b:9d:99:8a:0a:fc:06:8b:b0:
ce:42:e2:4d:fc:dc:a9:6f:07:1d:58:bb:85:c1:38:95:d5:80:
d4:ed:a3:b0:96:df:4e:72:57:f6:a0:f8:af:9f:55:e7:9a:6f:
38:10:7d:54:5f:c0:fd:a5:ac:73:df:43:13:ae:98:8c:53:5e:
fd:67:61:49:ab:a9:83:44:d0:e5:7a:94:0f:91:aa:e2:fa:10:
46:b2:ca:37:b0:be:b9:7c:3f:9f:bc:9f:0e:f0:56:d5:1e:fa:
99:e8:86:19:d8:42:9d:15:5b:cc:ea:21:8a:0c:ab:2a:dd:14:
93:bf:49:16:1f:b5:e9:a0:1f:9d:13:c8:04:f9:e6:ae:15:df:
d8:98:86:71:0b:78:65:b8:70:fc:61:40:b0:52:07:61:3a:e4:
51:fc:ae:9b:b2:94:03:c8:42:aa:29:f3:a9:fa:40:ef:e1:37:
6b:9d:0a:ab:e9:d0:8b:0c:9f:cb:c6:8a:b3:a7:44:8b:60:f1:
d8:90:8b:07:41:c1:0f:55:59:b6:0c:a7:cf:a8:78:65:6f:2d:
24:02:cf:de:6a:c7:fd:0c:a5:a0:22:68:3d:61:b1:78:24:74:
87:af:72:5c:2f:fd:8a:24:8f:3a:8f:0e:4b:4c:c6:ae:34:80:
c7:ff:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:12 2024 by rpki-client on console-ams.rpki-client.org