Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/PwcPuc_FSfIVN5B6zyM9l6rGszc.roa
File: PwcPuc_FSfIVN5B6zyM9l6rGszc.roa (raw, json)
Hash identifier: o3yG4CTzRcp5P9TZkYfR6DwISuAeLfL5Ly/rFpW+pRI=
Subject key identifier: 3F:07:0F:B9:CF:C5:49:F2:15:37:90:7A:CF:23:3D:97:AA:C6:B3:37
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 018977B43966B7001FD2F34C311C7F05C43E
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/PwcPuc_FSfIVN5B6zyM9l6rGszc.roa
Signing time: Fri 21 Jul 2023 09:07:27 +0000
ROA not before: Fri 21 Jul 2023 09:07:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42083
IP address blocks: 185.208.100.0/24 maxlen: 24
185.208.101.0/24 maxlen: 24
185.208.102.0/24 maxlen: 24
185.208.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:77:b4:39:66:b7:00:1f:d2:f3:4c:31:1c:7f:05:c4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Jul 21 09:07:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f070fb9cfc549f21537907acf233d97aac6b337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ed:17:b0:9e:e7:64:b3:cc:f6:2f:c6:40:c6:
ee:fc:a3:c7:11:0a:69:0d:0b:1e:ac:d0:9c:fa:56:
9c:9a:d3:42:57:5c:9c:01:71:a6:83:f0:4d:93:fd:
e6:8c:77:fe:7d:27:b3:52:5c:c0:0e:da:40:12:2f:
a5:78:6c:fb:1b:8d:1c:01:ef:58:f3:be:be:34:22:
f7:8b:93:2f:e6:e1:73:83:25:43:55:d6:a2:6c:bb:
fa:7f:be:11:97:21:a6:8e:ca:27:31:98:6a:35:1d:
0e:f8:f3:8e:61:f0:29:05:09:d8:5b:89:be:d3:54:
2d:7b:b3:43:dd:5c:e2:ac:55:2d:0e:ae:1b:98:da:
91:b1:b2:94:f8:eb:84:f5:64:87:49:77:d3:c5:29:
12:57:94:0c:1e:4d:fd:77:7f:08:67:42:d4:84:91:
f6:40:48:7b:06:c8:92:88:d7:30:88:95:95:02:ab:
f1:27:29:43:32:62:51:d4:9f:69:04:07:67:55:5a:
d6:4e:7c:b5:3f:ef:3d:54:af:50:29:76:15:f7:d9:
b8:ea:cf:be:71:49:2d:30:06:43:ab:d4:ac:14:e9:
e5:82:5c:26:1c:ef:68:df:84:90:00:38:c1:6f:ab:
e5:03:44:40:9f:ae:51:3e:87:cd:50:4d:43:a2:35:
95:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:07:0F:B9:CF:C5:49:F2:15:37:90:7A:CF:23:3D:97:AA:C6:B3:37
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/PwcPuc_FSfIVN5B6zyM9l6rGszc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.100.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:20:08:22:d1:54:bc:73:0d:4f:bd:a3:a5:97:40:19:ac:b1:
5d:08:2b:37:0d:6c:64:04:43:87:e9:2f:07:52:ef:4f:2f:ac:
2b:80:b0:9b:6d:50:cc:dc:96:f1:32:f1:d8:b0:4c:ed:be:09:
32:8e:03:e4:5f:57:c3:7a:f4:8c:00:4f:59:bf:bc:68:96:05:
bc:d0:89:3a:2b:19:fb:c3:aa:69:9c:94:30:10:82:2c:d6:e9:
50:6b:17:03:75:5d:40:85:84:53:d6:19:4f:69:56:84:dd:69:
73:53:5c:6c:ca:b6:5e:b1:c8:3e:6a:17:8c:15:b9:1f:ac:b5:
26:56:90:81:d3:d3:66:be:3c:5f:85:7d:f4:b1:3a:c4:bc:70:
36:81:0c:92:50:30:6d:20:40:40:f4:8e:1d:27:b0:d9:00:1d:
3e:67:8b:d2:8c:a7:34:83:15:b7:18:b7:93:0a:d0:8f:e3:bf:
c5:a9:dd:c6:5c:24:8a:f6:c8:08:d9:9a:6a:cc:c3:63:4c:4c:
64:3d:42:fd:c0:5e:54:37:5b:78:f6:ef:d5:e6:70:ed:94:a1:
24:3f:a0:6e:e5:f7:a3:af:61:18:49:9b:26:d9:eb:9a:62:14:
52:f9:44:06:31:a9:c2:6f:7f:d6:c3:b9:44:e0:4f:51:5a:53:
2d:d8:c2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:37 2023 by rpki-client on console.sobornost.net