Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/PC9gJ1b0TdXNrLJb45Qlfiawk8w.roa
File: PC9gJ1b0TdXNrLJb45Qlfiawk8w.roa (raw, json)
Hash identifier: AjXRAICLhpV+//zfBUizq1uDzYjbOaONQED14zqhqC4=
Subject key identifier: 3C:2F:60:27:56:F4:4D:D5:CD:AC:B2:5B:E3:94:25:7E:26:B0:93:CC
Certificate issuer: /CN=cde28f1f18099babf0a19088bea35ba084ec9297
Certificate serial: 018570708EDC9612A2E09B058F2F1E0266EC
Authority key identifier: CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/PC9gJ1b0TdXNrLJb45Qlfiawk8w.roa
Signing time: Mon 02 Jan 2023 03:05:02 +0000
ROA not before: Mon 02 Jan 2023 03:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210751
IP address blocks: 185.238.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:8e:dc:96:12:a2:e0:9b:05:8f:2f:1e:02:66:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde28f1f18099babf0a19088bea35ba084ec9297
Validity
Not Before: Jan 2 03:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c2f602756f44dd5cdacb25be394257e26b093cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:b4:a9:b0:a4:9d:ad:67:2a:9c:f6:61:8a:
c9:f9:5f:18:d2:01:2d:32:e5:1d:1d:cd:0f:eb:e6:
da:34:b6:12:47:02:dd:72:6b:19:3f:42:b8:62:e4:
9a:31:e0:56:bc:e6:e2:10:a6:80:e5:ed:27:62:57:
c2:33:55:e9:a4:c3:ad:71:a9:75:49:50:ee:cf:90:
b9:a6:57:b8:4a:92:32:6b:c0:06:e0:66:2b:23:da:
8a:ba:7f:b6:ec:2e:ab:73:df:9f:8b:68:45:91:9c:
da:48:20:8b:0a:26:8d:22:52:bd:aa:3a:48:53:4f:
39:5c:48:d1:eb:0a:49:e7:6b:b1:34:dc:f6:bc:37:
2c:34:58:c0:b5:8c:b6:af:c3:6b:71:cb:ab:e9:d9:
a3:0e:a6:52:65:a5:a3:e7:f3:af:ad:6d:e4:c3:0f:
3f:43:2f:d2:fb:54:6c:93:ce:ec:c7:69:fa:fc:88:
13:a2:c9:23:5c:bd:1a:70:75:37:1e:1b:fc:49:1c:
23:c0:50:0f:72:47:54:cc:e3:c1:cb:cb:0d:d5:45:
7d:69:91:18:fd:46:86:45:10:ad:7e:36:f0:95:4d:
ca:b7:68:0c:df:c5:4b:39:ed:05:4e:d7:92:89:06:
39:e5:ca:a0:2f:8d:30:7d:42:88:4c:f7:54:ac:c5:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2F:60:27:56:F4:4D:D5:CD:AC:B2:5B:E3:94:25:7E:26:B0:93:CC
X509v3 Authority Key Identifier:
keyid:CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/PC9gJ1b0TdXNrLJb45Qlfiawk8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.113.0/24
Signature Algorithm: sha256WithRSAEncryption
80:9e:8e:23:2f:87:fc:8a:0d:0a:92:a6:48:d6:95:13:34:6d:
cb:8d:47:34:12:14:90:08:3c:c5:19:f6:7e:c8:7f:6e:15:6c:
ca:2d:85:c0:79:9f:95:67:bd:71:96:a5:e5:a5:00:3f:09:03:
be:29:3b:73:87:0d:38:20:9f:96:cf:a5:92:02:31:29:22:e6:
ac:60:84:b8:d3:b1:ce:44:58:e9:d1:cb:4e:9c:04:a9:16:22:
88:26:73:bf:cd:bf:72:62:88:20:2f:29:22:fa:f2:71:1e:b9:
c7:8e:ec:f7:8d:60:90:6d:70:5a:3a:9a:b9:38:12:23:2c:40:
d3:5a:24:bc:24:01:44:1c:28:ef:b5:d4:2a:7a:52:62:c1:3a:
3a:7f:65:e6:a0:78:14:0d:24:07:f4:15:a2:3c:03:25:c0:0d:
62:d7:65:bc:07:dd:3d:26:7e:8d:e2:8e:5f:76:6f:7c:41:af:
7b:63:27:95:c1:6c:4c:d7:fd:fa:38:e6:a3:96:5b:47:c5:68:
66:20:87:ab:58:a0:4c:5e:bd:fd:37:b7:f3:14:9e:30:9a:c6:
67:d9:6e:46:5a:81:67:97:94:20:07:3b:29:99:aa:1e:af:ee:
f7:8e:ed:cb:c4:23:57:7f:cd:1c:63:c2:25:32:a9:0a:a9:82:
8c:ee:05:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:26 2024 by rpki-client on console.sobornost.net