Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/PwA-X9-LsoFh7_Kj7o2mVX_AsdE.roa
File: PwA-X9-LsoFh7_Kj7o2mVX_AsdE.roa (raw, json)
Hash identifier: TvoDA7jVX/2UQzAQHTGvri9CeHsKtfTAuC4r+jLCgyA=
Subject key identifier: 3F:00:3E:5F:DF:8B:B2:81:61:EF:F2:A3:EE:8D:A6:55:7F:C0:B1:D1
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 01856C0A50CC69B31AEAE6B6A61B42EB3694
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/PwA-X9-LsoFh7_Kj7o2mVX_AsdE.roa
Signing time: Sun 01 Jan 2023 06:34:53 +0000
ROA not before: Sun 01 Jan 2023 06:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52179
IP address blocks: 185.138.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:50:cc:69:b3:1a:ea:e6:b6:a6:1b:42:eb:36:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 1 06:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f003e5fdf8bb28161eff2a3ee8da6557fc0b1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ad:ec:73:d8:a8:ea:9e:61:04:72:cd:f6:6a:
da:a2:b0:14:f9:29:54:85:ed:95:b1:cb:2e:13:1f:
42:6a:2a:f5:8e:27:29:2b:b9:a9:fe:0b:e7:98:6c:
d3:62:7e:a7:c8:d8:87:60:b0:65:e3:9c:3c:c2:b5:
13:29:2c:16:1b:b1:96:3e:c8:4f:8f:a1:e4:bd:e5:
68:d3:f6:80:f1:cf:00:b2:34:e4:83:10:b4:b3:b4:
df:ec:1b:63:a7:ef:d2:31:95:38:f9:2b:7d:6c:61:
35:78:28:70:7b:0f:6d:0f:54:f0:b9:a5:18:55:f4:
e1:1e:d5:08:59:d3:92:4e:47:95:4c:f3:7a:a6:28:
a4:6d:bd:dc:d6:91:b3:22:9d:82:a8:28:59:df:a2:
da:18:a4:14:17:ef:10:49:ca:f1:ae:e8:ac:8a:aa:
01:60:0f:1c:fa:4d:15:0b:e9:6d:18:33:b9:b5:cb:
4c:21:63:75:08:72:90:53:4a:2a:ba:f4:c4:cf:9b:
94:ca:0c:e1:fe:41:02:88:9f:47:b1:81:f1:e1:e4:
8f:ec:7e:75:60:26:78:50:da:69:58:e4:7d:1d:c0:
04:4b:0e:a8:a4:cd:7b:d2:6a:14:90:c3:4d:57:39:
b6:7f:75:c0:0b:c8:31:c4:cf:69:b7:dd:e7:62:43:
cc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:00:3E:5F:DF:8B:B2:81:61:EF:F2:A3:EE:8D:A6:55:7F:C0:B1:D1
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/PwA-X9-LsoFh7_Kj7o2mVX_AsdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.229.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f6:cd:f2:d2:d9:f3:b6:e1:4e:2e:f3:6c:a3:04:9b:53:9e:
aa:a0:42:15:f1:71:31:b9:16:43:17:98:f0:b6:e7:1f:b0:23:
8a:4d:13:33:0a:9a:84:7f:01:11:9a:94:aa:ae:f7:69:50:ad:
b7:47:9f:a8:a1:e3:fd:20:8a:90:28:17:bc:2a:ab:4a:00:0a:
e4:a6:94:1f:38:b1:9d:30:36:f6:73:7f:e5:6f:22:ca:d9:81:
f2:3d:55:81:ad:6d:ac:61:97:53:6c:0c:ea:b9:b8:23:c5:c8:
64:fe:2f:13:ca:8d:0b:73:bd:7b:33:40:cf:79:16:d1:85:f6:
2f:d2:ba:5d:d3:75:96:bf:bf:18:ea:cc:4d:d6:17:af:5a:a1:
d2:34:ce:95:c1:2b:7f:d8:cf:5f:74:38:12:85:14:f6:45:c6:
14:7b:7f:34:66:50:10:51:45:b4:e3:8a:d6:08:32:80:c0:76:
fa:df:6c:ef:93:98:8b:34:f1:e5:d4:de:ee:de:8a:f4:f8:f7:
51:bb:b0:b7:05:78:2b:c0:19:e1:99:12:05:ae:d8:38:68:a0:
88:9e:0a:d7:b2:0e:0d:2a:3f:f8:36:25:67:25:96:0b:fa:aa:
8f:ce:fc:3e:10:e3:d4:c6:28:c3:97:bd:3c:ce:a7:f7:a6:82:
4c:11:88:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:52 2024 by rpki-client on console.sobornost.net