Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/PG891u-f_CKVmmky1JlEWjiHBo0.roa
File: PG891u-f_CKVmmky1JlEWjiHBo0.roa (raw, json)
Hash identifier: 16Y2k4NfLCtVOx8Gdi1JswBvti39zb3s1+B3URXiVZY=
Subject key identifier: 3C:6F:3D:D6:EF:9F:FC:22:95:9A:69:32:D4:99:44:5A:38:87:06:8D
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 01856D53FFC9A9F0FA59BC8079D1788A23D9
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/PG891u-f_CKVmmky1JlEWjiHBo0.roa
Signing time: Sun 01 Jan 2023 12:34:59 +0000
ROA not before: Sun 01 Jan 2023 12:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203377
IP address blocks: 194.147.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:ff:c9:a9:f0:fa:59:bc:80:79:d1:78:8a:23:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Jan 1 12:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c6f3dd6ef9ffc22959a6932d499445a3887068d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5a:67:4d:ca:f9:5f:8e:1d:32:97:f8:34:7b:
a4:26:ba:ad:a8:06:72:88:48:c2:c1:f4:c8:f1:62:
67:e8:dd:40:ab:72:b6:f6:1c:e9:98:57:fb:d9:05:
db:c8:e9:d5:ba:82:cc:1f:98:5c:cc:ed:bb:69:c5:
77:8c:59:92:04:c9:fd:b4:db:1b:78:76:c3:8a:64:
69:06:86:36:ff:1e:8f:b7:71:fd:35:f4:1b:27:f6:
9a:26:27:e4:13:5b:27:2a:65:36:9b:51:9b:75:de:
92:6c:3a:b0:89:86:74:76:41:d1:21:d3:6e:dd:44:
bd:c1:4c:6e:7d:e6:8c:6b:6f:41:aa:63:06:a8:28:
85:e7:87:c5:4e:22:b1:94:05:0f:05:b8:df:35:dd:
5e:04:cd:85:cd:10:b0:b5:89:83:2a:f3:cb:2f:f4:
26:4d:2f:b1:bb:a5:c3:ed:90:93:e7:cd:54:c7:3a:
5d:5c:6c:ee:b2:00:45:94:65:64:ab:ad:e8:e0:1e:
52:76:a0:0a:66:52:13:8a:c6:30:4b:45:19:97:f7:
f5:22:ee:e8:dd:ab:86:82:64:7c:89:4a:73:38:14:
b2:1f:1d:13:bd:97:b5:44:d3:29:05:52:ea:04:4b:
ee:48:44:6a:1b:1e:02:b3:c6:d3:2e:1e:8c:dd:8e:
62:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6F:3D:D6:EF:9F:FC:22:95:9A:69:32:D4:99:44:5A:38:87:06:8D
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/PG891u-f_CKVmmky1JlEWjiHBo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.216.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:ac:b6:4a:ed:df:2a:2a:19:6c:8d:06:4f:f9:75:a1:3b:d5:
c6:34:2d:a0:15:03:8e:96:58:7f:7f:0d:01:99:0d:6a:4c:e7:
27:dd:9e:93:73:46:2f:87:3e:4d:98:de:bd:69:af:fb:ac:24:
f7:11:67:f1:dd:0e:18:43:0a:0e:e2:de:38:90:c1:8a:1d:39:
4d:25:ed:41:9f:40:02:8a:21:b8:f6:5d:44:7d:88:6b:29:ad:
c8:19:5d:dd:c7:0b:55:49:5e:8b:d7:fe:ae:fa:75:35:ea:5a:
d5:cd:5d:9f:8d:86:55:18:83:0b:f5:31:1c:83:bb:4a:bc:b2:
43:cf:92:7a:4e:1c:76:7a:4b:27:97:b9:bb:61:a7:85:1b:3c:
48:ed:88:75:93:75:6b:72:67:59:1d:98:a3:32:22:8f:0a:d9:
e0:7a:e3:67:9f:2f:8f:3b:a8:72:58:7d:7c:92:2a:a7:ad:c6:
fb:1d:23:28:c6:db:5f:e3:8b:db:84:7b:bd:b8:36:b3:d1:7e:
c5:08:a6:14:e3:89:ba:a3:87:ba:cc:03:67:73:a5:31:2a:30:
ab:e5:ca:83:e9:2f:e0:ca:03:0b:03:1e:8d:38:66:a0:23:46:
36:4d:3a:2a:fa:ad:8f:60:4f:f1:43:66:08:16:60:77:b0:d4:
eb:eb:99:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:14 2023 by rpki-client on console-fra.rpki-client.org