Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/PBl1Dxn20QSDhyREDVy4Sa-yEK8.roa
File: PBl1Dxn20QSDhyREDVy4Sa-yEK8.roa (raw, json)
Hash identifier: MXX47S4m0tgayL/XeGJHphbskNJw1lfBWXiUYxNt0u8=
Subject key identifier: 3C:19:75:0F:19:F6:D1:04:83:87:24:44:0D:5C:B8:49:AF:B2:10:AF
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 01856CEF2BD2D90D2E163D582F1EC56BFF16
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/PBl1Dxn20QSDhyREDVy4Sa-yEK8.roa
Signing time: Sun 01 Jan 2023 10:44:51 +0000
ROA not before: Sun 01 Jan 2023 10:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203252
IP address blocks: 185.224.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:2b:d2:d9:0d:2e:16:3d:58:2f:1e:c5:6b:ff:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Jan 1 10:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c19750f19f6d104838724440d5cb849afb210af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bb:b9:7a:3f:7c:60:9b:55:63:17:70:fc:d3:
de:5a:e1:3b:be:d8:0c:b9:22:7c:63:e7:71:bc:db:
e9:86:4f:34:3e:fb:30:0e:ce:95:59:05:65:dd:44:
51:bf:d0:3e:78:40:76:f0:03:fb:8c:d3:cc:b5:82:
e4:d7:94:61:82:05:f6:ad:94:d6:20:d0:98:0c:db:
a4:8e:05:c4:f6:ea:ee:81:c1:c5:6b:99:69:18:68:
3e:9b:7f:19:7f:5e:5d:94:fa:c1:6a:6d:7a:62:0b:
b9:e8:48:6f:de:f2:be:99:d7:87:ce:fd:b2:56:2a:
51:2f:e7:59:ef:cd:c5:6b:e8:3a:d7:61:2f:a9:1d:
68:6c:8a:b1:e2:94:17:5f:b9:88:e9:19:33:e8:e6:
18:74:95:96:ef:ab:45:5b:75:1e:72:4e:98:1f:12:
9c:0a:a1:f9:59:43:b0:11:ff:0f:5a:8d:a3:bc:72:
27:88:9e:e6:6d:b0:5e:d4:34:7c:97:94:30:01:be:
d7:e0:e2:8f:85:a8:b4:b7:73:f2:48:52:a2:88:a2:
ca:ac:e1:76:42:e8:eb:42:17:a3:b9:0d:d8:9b:15:
9b:0e:9e:fa:81:21:c9:da:84:81:27:0f:8a:3a:64:
2a:3f:92:2e:b8:8c:48:a1:fe:cc:37:d9:d3:52:7b:
f4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:19:75:0F:19:F6:D1:04:83:87:24:44:0D:5C:B8:49:AF:B2:10:AF
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/PBl1Dxn20QSDhyREDVy4Sa-yEK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.212.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:30:1a:aa:d4:5b:cb:03:e4:65:76:c3:14:2d:27:4a:68:01:
04:f4:11:60:b4:55:8e:db:8f:d3:d9:78:d2:ef:05:ff:ff:c8:
30:9e:78:d0:70:7e:24:43:89:b8:17:29:ed:fd:80:72:d9:bc:
64:fe:0e:ce:61:7a:55:9c:81:d9:a2:26:ff:8a:4d:9a:25:82:
ec:b0:4c:38:9d:16:dd:ac:de:89:6a:56:65:07:61:62:c9:9d:
77:31:16:42:8e:98:f9:f6:74:4e:cf:84:a2:03:cb:78:ba:6a:
be:7d:b1:c7:f6:d1:3c:e7:d1:df:60:1b:08:31:fa:8e:b0:c4:
ed:9a:e4:c4:47:ab:8c:b2:2a:42:01:01:d0:cd:ec:47:2a:3a:
77:9a:9e:44:17:ac:73:c6:02:29:3b:c9:2e:8e:13:b4:b9:4f:
a9:54:ca:9d:27:80:43:66:10:9c:cc:5c:c5:4b:79:d4:5d:61:
64:cf:2e:d8:01:7f:22:a6:c4:5e:5c:4e:24:0b:a0:b2:54:99:
d6:24:12:94:11:29:53:38:93:54:7f:56:98:62:1a:8e:c0:06:
a8:bf:9e:d2:c3:eb:8b:14:3e:99:8f:ba:fc:27:7f:2e:40:e7:
77:20:38:2d:6a:07:56:e7:b4:40:13:32:62:f9:56:0d:eb:f1:
2f:cd:1f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:19 2023 by rpki-client on console.sobornost.net