Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/pbzDlrJjAHkLh4JkmzF2EfRnyhs.roa
File: pbzDlrJjAHkLh4JkmzF2EfRnyhs.roa (raw, json)
Hash identifier: oNec0Xk9Vc3jPL+po3k5NUqG9RgiVYBtB2hBKhdMdck=
Subject key identifier: A5:BC:C3:96:B2:63:00:79:0B:87:82:64:9B:31:76:11:F4:67:CA:1B
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DFB57264A043BB3C4FC22D725BA6A0
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/pbzDlrJjAHkLh4JkmzF2EfRnyhs.roa
Signing time: Tue 02 Jan 2024 06:32:33 +0000
ROA not before: Tue 02 Jan 2024 06:32:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216309
IP address blocks: 185.172.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 13:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:b5:72:64:a0:43:bb:3c:4f:c2:2d:72:5b:a6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5bcc396b26300790b8782649b317611f467ca1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:1d:bb:58:81:87:1f:cb:08:5b:65:15:ed:
ab:86:31:ce:60:00:36:3f:f4:d1:1e:23:77:58:f2:
55:bc:35:8a:4f:c7:57:90:09:8b:b2:d2:3e:c2:8d:
21:87:e1:b8:a3:f8:34:c7:47:20:46:e2:8a:e8:84:
59:77:97:ed:0e:8e:36:05:e5:65:08:a0:b2:bb:66:
06:af:b3:5a:57:30:da:c5:5b:b8:d2:89:11:57:08:
ac:9f:85:58:60:ea:78:aa:a2:a6:d9:ab:24:85:82:
a8:8e:74:24:51:da:11:f9:a1:69:37:6d:cf:68:c0:
02:19:2a:3b:7b:36:db:9a:b6:e9:0d:c5:28:d2:02:
53:be:f5:5e:6f:0a:20:30:a8:cf:09:31:05:c6:d2:
4f:a4:fe:7c:d8:ea:67:74:11:6f:54:62:ea:59:43:
ba:ba:85:08:82:ac:9d:e1:5e:32:5e:0c:2a:4c:c0:
aa:c6:c2:af:d5:90:ad:73:bc:70:d4:3e:61:34:df:
3d:2b:84:cc:48:66:ec:b8:53:32:1b:0f:be:bd:fe:
81:5b:b4:79:eb:f7:9c:85:63:da:94:e0:3d:87:95:
30:93:42:88:73:8a:86:01:6e:e8:c6:61:52:43:36:
41:5d:63:23:94:f4:99:5d:77:9e:04:a1:2d:64:ea:
14:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BC:C3:96:B2:63:00:79:0B:87:82:64:9B:31:76:11:F4:67:CA:1B
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/pbzDlrJjAHkLh4JkmzF2EfRnyhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:db:60:85:0f:f9:f5:f6:18:48:45:46:0b:b9:44:97:24:16:
31:89:97:f0:1f:d5:d2:a1:5d:8e:44:33:70:fe:78:e1:74:ad:
cb:b1:3c:d4:0a:15:87:6b:10:eb:2e:80:95:41:df:3e:46:20:
d4:ee:71:25:13:5e:58:56:6c:40:28:b2:4b:53:b4:99:20:21:
e0:55:e2:82:a2:03:a8:f5:ad:6f:de:86:19:05:ef:d9:71:5f:
ad:1c:93:c1:21:76:83:95:76:fa:73:55:55:51:63:f2:4f:e3:
d8:bd:c1:92:5a:f7:a4:88:91:29:45:0d:d2:c7:40:35:0a:3e:
f9:8b:dd:59:97:de:c5:eb:44:d5:bb:b3:e5:80:28:ff:8a:d6:
7b:cd:ed:fe:f2:1e:02:21:f9:1b:ec:ec:e0:78:a0:90:b7:e2:
33:66:f2:3d:47:62:72:c1:4b:31:2f:70:e4:d1:75:c5:b7:a4:
18:0b:93:73:fc:2f:ff:3b:65:08:37:9f:e2:09:46:f7:87:91:
7c:1b:cb:be:01:9d:ec:9f:d9:96:e2:6e:85:c4:9c:9e:25:5f:
03:35:26:da:91:e9:ef:9a:de:f0:ac:04:da:0d:67:d3:30:41:
12:3e:16:d4:e2:f0:0f:3f:81:48:ba:e2:2d:12:15:90:fc:02:
e5:7e:3e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 16:58:15 2024 by rpki-client on console-fra.rpki-client.org