Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PbjOKrZNKy4a4g_P59eSd8kIoKk.roa
File: PbjOKrZNKy4a4g_P59eSd8kIoKk.roa (raw, json)
Hash identifier: tmNWyiiHwVfMF1mwYYH3W21rmZLR7QUVqclAjsmw/KA=
Subject key identifier: 3D:B8:CE:2A:B6:4D:2B:2E:1A:E2:0F:CF:E7:D7:92:77:C9:08:A0:A9
Certificate issuer: /CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
Certificate serial: 01856FC261B54DD0EF51E7D292525266E17D
Authority key identifier: 3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PbjOKrZNKy4a4g_P59eSd8kIoKk.roa
Signing time: Sun 01 Jan 2023 23:54:48 +0000
ROA not before: Sun 01 Jan 2023 23:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 176.110.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:61:b5:4d:d0:ef:51:e7:d2:92:52:52:66:e1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
Validity
Not Before: Jan 1 23:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3db8ce2ab64d2b2e1ae20fcfe7d79277c908a0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:b1:f4:50:12:67:37:19:67:03:3b:22:dc:
e5:c1:d3:b0:13:32:82:8d:89:55:2f:eb:44:21:15:
63:72:5c:8a:8e:e1:fa:fc:84:66:5a:43:70:f1:c3:
59:c9:09:05:2c:23:73:1e:6a:23:5c:01:dd:ae:f2:
d8:62:8e:87:e5:4a:c1:c9:cd:35:9b:81:78:2b:87:
0b:95:30:e1:51:0b:83:97:bd:15:98:38:30:21:68:
1d:94:c1:41:bc:31:05:43:e8:29:ef:4c:ae:bd:dd:
50:4a:65:82:44:dd:a3:7f:2f:9d:45:33:71:e8:46:
67:c8:9d:46:04:75:5f:ef:ac:d3:19:87:a1:6b:dc:
a4:25:fc:16:51:3e:7b:86:17:4d:c2:c9:76:d7:38:
6a:c5:f2:44:7f:65:c8:f7:f9:d8:2f:25:a7:42:23:
e3:54:f4:3f:e9:bb:00:9a:59:dc:6d:34:f3:42:01:
10:a7:e7:98:54:52:40:b0:76:37:99:03:14:4b:b2:
38:d8:a2:d5:0d:03:58:5f:8c:1e:f1:d9:bb:2a:86:
40:39:6e:bd:34:0a:40:8f:b7:65:76:7e:fd:f4:c5:
a2:46:2f:c0:59:1c:81:53:eb:b0:80:25:8e:03:7d:
96:5f:b9:19:9d:08:c9:15:16:88:99:34:21:74:78:
75:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B8:CE:2A:B6:4D:2B:2E:1A:E2:0F:CF:E7:D7:92:77:C9:08:A0:A9
X509v3 Authority Key Identifier:
keyid:3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PbjOKrZNKy4a4g_P59eSd8kIoKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.104.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:3a:13:37:8a:eb:fd:71:ac:35:fb:01:ef:e4:1d:c3:5f:3f:
ad:36:2c:d7:9f:8b:d6:44:8e:35:52:59:c4:df:17:30:3d:d9:
50:45:9d:2b:ec:2d:7f:e6:52:b6:c2:db:8e:e2:a7:f1:f1:bd:
a3:1b:6e:fb:f2:b2:ae:95:24:b3:05:21:47:30:ef:45:31:3a:
52:bf:a7:4c:bd:f7:34:ab:24:60:68:21:f9:99:00:f4:cf:ab:
52:99:a2:89:be:d6:22:f6:58:99:08:98:b0:bb:f2:0e:5c:16:
28:f7:02:e2:44:04:65:21:39:8a:19:41:fc:f1:77:3f:4b:d2:
4d:d7:b2:da:6e:7f:37:14:aa:24:ee:29:16:56:18:18:af:d7:
2a:40:47:03:b9:56:ed:68:57:b0:de:cb:ed:ff:ea:88:63:cd:
89:67:a1:17:e3:96:f1:0d:7c:7f:64:1d:f1:73:92:5a:a6:29:
af:9e:4d:84:fe:c9:0b:cb:04:7a:47:47:b6:e9:c9:45:ce:22:
15:1c:c3:10:e1:f4:41:58:15:07:00:89:5f:b4:b8:9a:a7:2a:
19:3e:03:01:2c:3c:14:b7:09:07:eb:ca:60:89:42:9d:67:99:
bc:5e:c9:bb:7e:55:0f:59:30:6c:f4:ae:99:99:d4:6e:10:91:
c9:c0:df:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:05 2024 by rpki-client on console-ams.rpki-client.org