Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/PwiykeURgZEvjN5l-TR5M9fe2GY.roa
File: PwiykeURgZEvjN5l-TR5M9fe2GY.roa (raw, json)
Hash identifier: IB386CYznIeKwimmEfZKOE3xOZelINb0hR0e3N8/myM=
Subject key identifier: 3F:08:B2:91:E5:11:81:91:2F:8C:DE:65:F9:34:79:33:D7:DE:D8:66
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01856EA6B79540791A5EB8E7132487772C5A
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/PwiykeURgZEvjN5l-TR5M9fe2GY.roa
Signing time: Sun 01 Jan 2023 18:44:57 +0000
ROA not before: Sun 01 Jan 2023 18:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35267
IP address blocks: 86.105.253.0/24 maxlen: 24
93.114.232.0/23 maxlen: 24
89.36.150.0/23 maxlen: 24
188.212.192.0/21 maxlen: 24
89.35.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:b7:95:40:79:1a:5e:b8:e7:13:24:87:77:2c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 18:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f08b291e51181912f8cde65f9347933d7ded866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:77:58:88:81:8c:b0:d3:c0:3d:a5:3e:56:5d:
62:fe:aa:3f:7d:8e:7d:1d:e2:35:3e:76:2f:02:ca:
1e:91:fd:84:09:43:5f:87:4c:d0:99:46:5a:a2:af:
6b:5b:ad:2d:46:cc:6f:c7:22:8e:70:6a:92:a4:28:
ee:a2:dd:f1:6e:ca:9f:08:bd:ad:c5:e2:20:0f:ec:
dc:12:bc:b8:6c:a7:15:fa:22:ee:72:13:74:be:e1:
91:ab:b1:6b:bd:a0:29:b4:09:fe:d5:61:5c:ee:81:
50:70:b9:43:26:ff:d6:a2:1f:46:4d:70:b7:10:db:
eb:88:45:b0:14:11:2d:a6:e8:4e:66:da:df:20:7b:
0b:0e:dd:5c:45:c8:1e:9e:a7:5c:67:0b:1e:4b:33:
89:44:91:ff:61:21:90:6e:b2:e2:6c:99:ba:b4:cf:
26:f7:fc:ee:34:d6:40:5e:94:48:3c:54:e5:5e:fe:
9d:50:37:3a:f1:2e:36:7b:13:2e:3d:ed:e3:33:66:
df:ea:10:4e:c9:bc:57:c2:17:72:e7:9d:6b:9e:36:
95:ff:5c:89:91:d9:fe:40:94:d1:91:db:4e:b2:65:
ec:a5:ed:98:a4:bd:d1:70:4c:96:8c:2a:4f:1e:c0:
bf:0d:0b:89:b3:12:1b:b3:c2:1f:78:02:bb:88:48:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:08:B2:91:E5:11:81:91:2F:8C:DE:65:F9:34:79:33:D7:DE:D8:66
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/PwiykeURgZEvjN5l-TR5M9fe2GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.253.0/24
89.35.38.0/24
89.36.150.0/23
93.114.232.0/23
188.212.192.0/21
Signature Algorithm: sha256WithRSAEncryption
29:9a:30:6c:b9:9f:7b:46:eb:b7:48:83:27:85:68:e1:4a:dc:
60:45:07:84:9c:c7:d8:b9:8f:03:c7:bc:91:7b:21:04:56:97:
38:97:93:86:5a:6d:ab:40:dc:57:d9:7f:a9:e1:7b:a2:8b:a7:
6a:0f:e1:f1:ac:df:74:57:67:07:a1:b6:77:08:29:4e:49:19:
d8:f9:11:99:f4:41:39:b6:48:eb:ce:a0:60:92:16:39:7e:89:
87:dd:e2:4e:f4:43:34:c8:17:c0:be:4e:9a:eb:04:ac:05:d6:
05:4c:cf:95:1d:08:d0:38:e6:26:c4:29:e7:91:96:d1:bb:d7:
86:db:88:5b:d6:e1:7d:0f:4f:c1:08:27:ab:d7:b9:a4:9d:1e:
42:c3:f5:47:a2:ef:d0:2e:6b:4b:c3:01:00:1f:fe:66:b5:e8:
39:34:9d:e7:fa:4b:ee:be:37:9f:0d:d4:bc:59:ef:75:b6:97:
1d:dc:b8:90:12:40:bc:dc:cf:87:28:84:44:dd:39:7e:0b:4f:
64:15:3c:c7:0b:5b:42:d4:d0:f8:66:e4:11:3a:b7:bc:4b:05:
ac:3a:a7:24:81:57:ea:d6:d6:5b:10:74:29:07:e8:00:bc:5e:
12:f7:e8:89:cf:4a:ff:ab:4a:10:07:9e:4b:86:d9:a2:5d:74:
46:dc:c6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:39 2024 by rpki-client on console-ams.rpki-client.org