Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/PBR2Si9Y7QfcbYW_bY8fPCFYiFc.roa
File: PBR2Si9Y7QfcbYW_bY8fPCFYiFc.roa (raw, json)
Hash identifier: 8HjsO4+b4wW0qaI2pS9e7jGztfGmXm36iwluUJtfcGY=
Subject key identifier: 3C:14:76:4A:2F:58:ED:07:DC:6D:85:BF:6D:8F:1F:3C:21:58:88:57
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0192042E2FD110090BB731B14AE7BAA68CEE
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/PBR2Si9Y7QfcbYW_bY8fPCFYiFc.roa
Signing time: Wed 18 Sep 2024 08:09:48 +0000
ROA not before: Wed 18 Sep 2024 08:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197450
IP address blocks: 91.92.35.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 11:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:2e:2f:d1:10:09:0b:b7:31:b1:4a:e7:ba:a6:8c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Sep 18 08:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c14764a2f58ed07dc6d85bf6d8f1f3c21588857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:ad:37:64:b9:b1:b7:86:37:5f:c4:4a:01:
89:6e:8e:e5:f2:bf:4e:21:23:43:84:b3:47:fa:75:
26:0e:3f:28:74:49:5d:ad:1f:04:e5:20:a9:72:93:
89:6d:64:a8:c1:12:f0:9f:94:68:80:27:d7:dc:6a:
cd:f7:66:a0:83:23:6c:0c:ce:e9:fe:5a:d2:91:6b:
59:2f:fa:7b:7c:39:9f:bd:50:a0:2b:e4:3c:e5:19:
09:a5:16:86:1a:3b:fc:35:a7:75:13:26:68:8d:d1:
2d:e0:77:a9:5f:ad:05:44:c1:9f:60:11:02:24:8f:
10:9a:46:47:3d:28:7a:d0:10:6b:23:80:40:e5:48:
f1:3c:d6:98:4f:5e:da:0b:20:8b:66:25:f4:0c:77:
f4:cc:f4:6a:6d:fc:e1:9b:7e:a4:52:77:40:ad:23:
15:3a:58:6e:04:f1:21:63:32:d7:bf:88:e1:60:6b:
c2:b5:84:47:ed:83:3b:80:bf:c7:9f:d5:13:5a:7d:
f0:ac:0b:2b:bb:24:3e:51:f5:a1:89:2e:a0:81:63:
9e:7d:84:9c:d4:b6:d3:3b:1d:90:1c:1f:20:0b:8d:
fd:7d:43:ae:14:7e:50:cd:81:8a:cc:f3:13:c4:ce:
61:eb:f6:f9:98:c0:61:0c:08:43:dd:3a:99:85:35:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:14:76:4A:2F:58:ED:07:DC:6D:85:BF:6D:8F:1F:3C:21:58:88:57
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/PBR2Si9Y7QfcbYW_bY8fPCFYiFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.35.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ae:e1:96:0f:79:a9:e2:cd:28:b8:78:9e:59:ba:28:10:a1:
dd:76:c2:2e:9c:60:d1:3e:35:85:04:df:9b:ad:bb:8b:dd:f8:
62:0d:02:65:35:4d:81:1a:ca:d4:4f:fe:8d:3c:76:da:6a:c4:
71:b4:6a:89:fb:54:1b:72:4a:c3:94:bc:b0:91:56:bb:32:d2:
fb:7f:77:fb:e5:54:f0:e2:4b:f1:09:8c:1d:78:15:10:d6:15:
c6:a8:5c:2c:78:d8:f1:9f:30:f0:ad:17:c6:80:59:4c:23:08:
1b:1b:5d:ce:c7:17:1d:7c:2d:36:12:3d:7b:d8:1b:f5:d5:05:
3d:5b:df:3a:ac:a9:c5:32:b8:4f:e7:f9:c1:34:10:d3:a6:47:
63:26:40:4d:12:43:91:c4:46:0a:7b:e1:97:d8:86:0a:3a:2c:
a4:81:66:2c:f2:17:69:c6:2f:fd:3e:f8:80:16:9a:13:20:d7:
9a:a0:04:be:da:f4:7f:db:0b:a9:db:e6:44:5b:0f:25:b5:ac:
28:14:f6:7f:24:72:51:11:04:c3:db:91:42:b4:77:c9:d4:86:
6e:dd:83:ee:db:59:2b:b5:11:f4:ab:a0:90:94:38:d2:b5:ff:
4e:7e:56:6c:5a:0d:d5:0f:13:3f:f0:43:fd:25:d4:df:ce:08:
55:2d:fb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 15:22:08 2024 by rpki-client on console-fra.rpki-client.org