Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pbqrPpKL_1O8K0PVWV8lEMTBSaY.roa
File: pbqrPpKL_1O8K0PVWV8lEMTBSaY.roa (raw, json)
Hash identifier: INCcJEMT0t+/0hrLPQDQy9CoCYnkxVF8GRNhrm5dceo=
Subject key identifier: A5:BA:AB:3E:92:8B:FF:53:BC:2B:43:D5:59:5F:25:10:C4:C1:49:A6
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01879E425CC474F382A43CE7120753360085
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pbqrPpKL_1O8K0PVWV8lEMTBSaY.roa
Signing time: Thu 20 Apr 2023 10:42:41 +0000
ROA not before: Thu 20 Apr 2023 10:42:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 93.115.254.0/24 maxlen: 24
178.239.204.0/24 maxlen: 24
93.114.193.0/24 maxlen: 24
213.232.92.0/24 maxlen: 24
185.135.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:42:5c:c4:74:f3:82:a4:3c:e7:12:07:53:36:00:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 20 10:42:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5baab3e928bff53bc2b43d5595f2510c4c149a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c2:fa:46:d1:98:a1:c6:d3:65:d4:b6:7a:ac:
48:a7:ce:7d:01:d8:fd:de:97:73:0e:50:4c:43:94:
f9:aa:da:11:af:ab:f3:f8:61:70:98:81:ea:d6:77:
ef:f6:b0:10:89:bd:da:5f:fc:cf:6d:16:50:98:00:
9e:a5:45:9f:d5:09:da:77:26:8a:53:6a:2f:83:5d:
d8:cd:7f:da:86:93:07:fa:6a:90:d3:ea:f4:24:dd:
d6:7a:e6:89:fd:2a:6b:b6:a5:b0:b0:ef:00:7f:dc:
a3:18:70:c6:0f:65:f8:96:91:31:77:1e:d6:56:cb:
ae:be:c7:53:7a:4b:7c:49:9d:b4:3d:4c:00:b4:91:
38:b6:5e:fc:7e:7c:83:ea:43:b5:b3:96:fc:1e:0f:
d3:3b:dd:14:3d:08:a8:a7:76:8a:9f:0b:f8:a9:62:
57:80:84:00:d2:35:fe:4b:ce:fe:14:1c:7c:4c:5d:
df:35:0d:3e:15:31:0c:53:3f:51:08:ba:49:ce:35:
86:ac:fc:0a:90:e1:79:cf:de:83:2a:aa:d3:de:78:
5b:42:97:31:06:80:33:b7:8a:38:d5:ff:b9:35:f0:
de:dd:5f:0d:c5:fe:2b:8f:4f:46:40:ef:9f:39:bd:
e1:53:f6:0f:66:f0:70:9b:51:4c:ee:31:e1:0d:2e:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BA:AB:3E:92:8B:FF:53:BC:2B:43:D5:59:5F:25:10:C4:C1:49:A6
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pbqrPpKL_1O8K0PVWV8lEMTBSaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.193.0/24
93.115.254.0/24
178.239.204.0/24
185.135.140.0/24
213.232.92.0/24
Signature Algorithm: sha256WithRSAEncryption
44:cc:52:50:02:44:3f:ee:14:28:2d:86:60:08:db:66:0e:aa:
6c:08:e2:4e:ca:bf:b8:f9:d6:f1:47:4f:aa:54:8e:5e:3d:e9:
94:71:ee:05:cf:8d:a1:2c:bb:ba:ea:f2:24:17:d7:f1:99:4d:
c0:b4:d3:be:61:99:02:cd:f3:9e:22:6e:48:46:86:f7:91:32:
ef:02:33:8d:7d:09:b6:c5:b2:5e:43:9c:da:f3:20:6d:79:eb:
fa:0e:5f:09:6a:a0:87:eb:75:b2:c4:87:b7:42:e4:7a:eb:af:
2c:55:5b:ea:2a:47:ee:fc:7a:3f:a1:e6:59:43:76:c2:6c:b3:
98:ac:50:0c:32:58:95:04:de:02:bf:b7:b5:84:37:2e:10:38:
a9:29:db:30:da:09:41:d5:db:da:48:39:35:04:0c:b6:2f:d8:
01:e5:f2:da:e6:aa:e2:be:94:d0:fc:a4:a5:85:0f:65:30:91:
85:91:9b:21:f6:26:17:21:4b:a3:fb:39:85:2f:fd:e5:7e:fe:
a6:69:f4:cf:7d:7b:5b:bf:44:14:ff:03:b4:7a:e9:27:e0:73:
ea:2f:5d:b3:5f:69:c4:05:07:ac:38:45:3d:9f:fd:82:5e:be:
3a:22:2d:57:78:58:3f:04:bc:90:cc:58:6e:0c:f6:50:1b:3b:
65:9b:04:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org