Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/PCzjyjHPtS5gTCIUrkeKKMKLDaU.roa
File: PCzjyjHPtS5gTCIUrkeKKMKLDaU.roa (raw, json)
Hash identifier: JUubIsUgFRmDx4E7deBC2K7BaOqA+bDhgPfMHhxSfRs=
Subject key identifier: 3C:2C:E3:CA:31:CF:B5:2E:60:4C:22:14:AE:47:8A:28:C2:8B:0D:A5
Certificate issuer: /CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
Certificate serial: 01856D4186AA66E81FFD7BC94DC4F9736E6F
Authority key identifier: 26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/PCzjyjHPtS5gTCIUrkeKKMKLDaU.roa
Signing time: Sun 01 Jan 2023 12:14:48 +0000
ROA not before: Sun 01 Jan 2023 12:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42889
IP address blocks: 185.190.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:86:aa:66:e8:1f:fd:7b:c9:4d:c4:f9:73:6e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
Validity
Not Before: Jan 1 12:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c2ce3ca31cfb52e604c2214ae478a28c28b0da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cf:45:61:59:90:8e:c8:8b:b3:bf:f7:d5:05:
ad:3c:d5:10:20:8a:13:a7:9a:78:b2:78:4d:a6:d4:
32:17:4d:97:97:86:bb:ae:ba:3b:65:08:30:ee:7e:
1c:dc:82:f1:2c:54:35:ef:c3:c0:f5:27:8e:6c:7c:
b9:c4:94:ec:cc:b5:cc:9e:9d:f8:68:56:f1:f2:24:
41:20:86:16:32:23:f5:66:06:24:9e:7a:93:d3:6a:
a0:ca:05:78:e1:5d:0a:25:ca:68:6f:7d:d5:ac:57:
6c:65:be:93:60:58:e8:53:3f:95:b8:47:af:b9:51:
9d:7e:e4:0c:67:31:4a:4e:d5:5f:c2:2b:51:b4:b7:
8c:a5:84:f6:bd:40:b4:9a:f4:07:25:d2:e3:f8:07:
08:0c:93:83:49:d2:be:c7:b8:ad:43:92:a6:f8:a6:
e7:b3:34:52:60:13:f7:c4:d0:9b:02:ff:98:06:df:
7d:81:b2:f9:a8:b2:7d:90:c5:6b:4e:db:0a:45:bb:
7d:9d:af:f4:4a:8a:c3:53:ce:e9:13:9e:7d:ff:55:
9f:31:90:3e:d9:a4:d1:6a:19:09:8b:93:ac:c4:13:
7a:87:8a:62:5a:74:5f:8a:05:12:b1:28:81:33:44:
99:f6:4e:e0:e2:29:96:bf:32:1d:e8:1d:63:9d:f6:
58:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2C:E3:CA:31:CF:B5:2E:60:4C:22:14:AE:47:8A:28:C2:8B:0D:A5
X509v3 Authority Key Identifier:
keyid:26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/PCzjyjHPtS5gTCIUrkeKKMKLDaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.7.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:75:1f:31:22:6e:59:68:78:59:9c:c1:4a:1c:44:f5:a7:ff:
b5:b7:b7:db:a2:38:2c:9d:61:0b:c0:c6:98:e6:c5:c0:e6:f5:
0c:f0:5b:2a:e4:64:96:da:08:4e:0d:f9:77:3a:45:f0:fb:49:
de:01:69:d5:e2:10:b3:fc:95:db:96:34:a6:8a:77:a8:0a:c7:
80:41:14:b7:b3:d5:cd:3d:ee:5a:74:6e:f6:4e:ca:18:0c:eb:
10:30:51:e1:72:07:30:08:cc:2f:83:e2:d3:e8:93:22:6f:07:
ee:7b:4f:a8:43:41:83:f3:3c:21:11:1a:f2:fd:56:41:94:b8:
7f:b1:61:ad:de:65:ca:12:b4:2e:fc:8d:9c:50:17:61:1d:ae:
36:d3:c1:13:76:4d:2c:d2:1f:3c:f7:63:70:0e:27:b3:ce:e0:
cc:90:18:6e:1e:26:52:d2:ae:34:54:8b:7f:27:81:4a:e9:77:
ba:9c:8d:9e:af:bf:ef:9c:87:d8:2f:86:4a:ec:5c:d5:b0:db:
46:eb:30:57:37:40:98:67:29:39:75:38:5b:98:8a:d8:93:f5:
c1:98:ad:4e:32:66:07:0a:0a:e2:fb:bc:3d:ac:82:ec:bc:f8:
9d:7e:b7:7e:5b:c3:32:91:93:30:4a:d7:aa:d6:43:67:2e:74:
1c:20:ab:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:52 2024 by rpki-client on console.sobornost.net