Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/PigwT_rjSVxE4VDB87H1ljik0Ag.roa
File: PigwT_rjSVxE4VDB87H1ljik0Ag.roa (raw, json)
Hash identifier: 9IcJMxO58suos5Dqdvbw28kvXMVv5mUWoLIZIn92xFg=
Subject key identifier: 3E:28:30:4F:FA:E3:49:5C:44:E1:50:C1:F3:B1:F5:96:38:A4:D0:08
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 018C455E3102F839B550776E39CCC10A474A
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/PigwT_rjSVxE4VDB87H1ljik0Ag.roa
Signing time: Thu 07 Dec 2023 17:40:49 +0000
ROA not before: Thu 07 Dec 2023 17:40:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201642
IP address blocks: 121.127.36.0/24 maxlen: 24
185.249.103.0/24 maxlen: 24
185.249.100.0/23 maxlen: 23
185.249.100.0/24 maxlen: 24
185.249.101.0/24 maxlen: 24
185.249.102.0/24 maxlen: 24
2a14:3200::/32 maxlen: 32
2a14:3200:2a14::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:45:5e:31:02:f8:39:b5:50:77:6e:39:cc:c1:0a:47:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Dec 7 17:40:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e28304ffae3495c44e150c1f3b1f59638a4d008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:6b:a4:00:a9:72:4d:d2:e6:3d:63:fc:3b:
59:fd:ab:ea:d2:ed:09:1d:e1:53:0e:80:bc:3a:b6:
74:77:7d:ea:d0:bf:e0:42:8b:ec:c6:c1:a4:c7:35:
ad:8d:5c:88:86:c4:05:6e:fd:40:ff:3d:6b:d6:0d:
57:32:ae:b3:78:2a:04:47:7a:80:c4:c8:b9:47:b6:
ce:ef:3d:9e:ac:de:7b:f3:97:d9:ce:a2:d2:ec:1e:
f7:04:78:92:f5:95:b3:4e:d3:50:98:b4:16:43:a9:
3c:a5:14:8f:83:4b:ff:92:07:84:f8:16:5d:58:39:
bb:33:a6:e5:78:d1:14:c6:68:51:2c:1b:1c:29:70:
e7:e0:04:fb:92:b1:90:4a:0c:26:e4:1b:40:9f:9d:
fc:d8:8e:5d:e9:b6:80:2f:74:53:fb:07:2d:95:53:
39:47:f2:d7:6a:f8:af:7e:d3:ce:9d:51:b5:51:00:
ae:00:bf:9f:07:5d:9d:89:b6:c3:1d:18:d7:4c:0b:
f9:69:2a:c6:72:9e:e9:ae:f5:c5:5d:32:99:54:55:
56:71:be:9d:25:ef:dd:df:97:9f:66:db:80:a9:9c:
78:89:74:7a:6d:66:bd:27:60:75:3a:ca:49:07:05:
b6:52:fd:e5:71:1a:dc:26:d4:1e:2c:1c:64:b9:e7:
04:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:28:30:4F:FA:E3:49:5C:44:E1:50:C1:F3:B1:F5:96:38:A4:D0:08
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/PigwT_rjSVxE4VDB87H1ljik0Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.127.36.0/24
185.249.100.0/22
IPv6:
2a14:3200::/32
Signature Algorithm: sha256WithRSAEncryption
39:d6:f6:1b:c4:f5:98:c1:c2:f7:1c:5f:57:a4:b2:e6:26:ce:
6a:75:b8:bc:ce:bb:6c:01:a6:67:d2:cf:13:c8:50:e2:1d:4a:
b4:0a:75:f9:d1:ed:25:11:5f:e1:93:f9:4c:4f:ba:91:b8:24:
c4:35:cc:bf:50:2b:ed:43:22:1b:e0:7c:1c:98:d2:48:50:1a:
76:41:6f:c9:03:de:41:fb:a5:64:37:4a:ed:a2:6b:6f:db:7d:
29:5f:4f:78:fd:0e:62:a1:09:91:83:7c:b4:b7:60:91:c9:6a:
2a:0d:41:26:f8:5b:ce:26:29:9c:dd:1b:dc:6c:92:f8:6e:25:
02:fb:f8:c1:90:7e:f0:17:57:4b:b5:87:4b:0e:37:b4:bf:d4:
2e:2a:e0:78:5d:ec:18:ff:c8:18:02:50:5f:39:42:2d:f0:24:
88:1d:4e:d9:13:26:7a:3f:64:5b:4a:4a:2f:99:55:5f:8d:2e:
e1:b7:c6:ce:68:90:c0:20:bf:ac:ac:a7:83:14:37:9d:83:26:
b3:3f:c7:62:89:ec:97:82:1e:a4:72:ed:85:64:f5:15:ed:b1:
2c:40:0d:50:4a:61:ce:5f:b7:e4:97:ef:d1:9a:8b:16:0f:bc:
7f:dd:d2:e3:c5:07:ed:c6:dd:7b:0d:d4:83:07:d0:75:12:1d:
ce:8c:18:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 22:50:20 2023 by rpki-client on console-ams.rpki-client.org