Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/PCCAC2R-HQveTpIfhiMe4A46AOs.roa
File: PCCAC2R-HQveTpIfhiMe4A46AOs.roa (raw, json)
Hash identifier: tP5qx4lQ3E54fwFDkT07RlPIvzqIF1lRpQV5qHnUFkg=
Subject key identifier: 3C:20:80:0B:64:7E:1D:0B:DE:4E:92:1F:86:23:1E:E0:0E:3A:00:EB
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 01856E2669F0E1CC3810660883B18D752BA1
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/PCCAC2R-HQveTpIfhiMe4A46AOs.roa
Signing time: Sun 01 Jan 2023 16:24:49 +0000
ROA not before: Sun 01 Jan 2023 16:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43685
IP address blocks: 185.183.244.0/22 maxlen: 24
2a0b:2280::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:69:f0:e1:cc:38:10:66:08:83:b1:8d:75:2b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Jan 1 16:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c20800b647e1d0bde4e921f86231ee00e3a00eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:30:c7:d0:85:79:4e:52:38:6b:a7:b5:d4:
28:35:7c:91:e3:da:24:03:be:25:64:90:e4:72:28:
9d:c5:b2:f6:f3:f8:11:02:a7:15:5a:f7:39:36:f7:
39:27:5f:3b:d0:e7:4e:43:8d:fa:83:e9:d0:7b:87:
6e:67:27:bd:f6:e8:91:75:27:40:70:40:45:30:d9:
4d:b0:a0:75:06:6d:d3:be:be:b8:59:57:b8:b7:6f:
8f:5f:c2:79:c3:ed:03:13:66:7e:15:29:02:0d:09:
d6:5c:77:42:13:b4:f1:fc:c6:fa:39:d2:e9:04:77:
37:44:e6:18:a6:a0:2c:38:00:99:43:ab:b3:af:9a:
bf:34:b4:c5:a0:a8:d9:a9:e7:53:c0:0a:3a:9e:bb:
dc:40:da:57:52:0c:2a:87:d4:74:89:9e:fd:70:fc:
7f:2a:c6:f1:21:d4:aa:a3:b4:ea:b7:49:cc:33:63:
ee:65:e7:96:f3:cb:d9:11:61:11:b2:29:4f:29:af:
a6:6e:80:50:c9:72:b9:03:dd:78:06:40:63:36:88:
88:5a:5c:6f:6e:99:00:45:b7:ee:3d:1d:19:d2:d1:
01:be:9b:26:00:eb:d6:34:4f:c7:ee:0b:c7:b7:da:
4f:42:c3:37:39:46:d8:29:c0:02:93:fa:83:da:be:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:20:80:0B:64:7E:1D:0B:DE:4E:92:1F:86:23:1E:E0:0E:3A:00:EB
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/PCCAC2R-HQveTpIfhiMe4A46AOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.244.0/22
IPv6:
2a0b:2280::/29
Signature Algorithm: sha256WithRSAEncryption
13:f8:af:f9:0b:16:9f:d7:e1:f3:63:b0:74:4f:42:85:27:fd:
37:1b:ef:3a:d2:cd:e7:13:f8:e6:8a:ba:cc:80:07:1d:60:e0:
42:50:01:f9:87:10:14:c0:50:d7:99:0e:94:08:c6:4a:50:4a:
a3:b9:ef:cf:c7:82:15:bb:1a:8c:7e:0e:f0:30:b1:f5:1a:61:
88:2f:79:89:93:6d:69:57:fc:d6:fc:77:5e:ab:c3:47:ae:72:
a4:82:9d:b7:2a:63:41:d8:e2:2f:55:01:35:50:b1:4d:69:af:
d1:de:62:08:92:fb:73:cc:4c:50:dd:a5:63:3e:8d:9e:38:a7:
85:23:97:5b:0b:6d:99:e6:79:09:b7:9c:81:1f:3f:1e:d5:39:
23:3c:f1:30:b4:25:5c:c2:49:7b:c9:ab:56:89:3d:43:f0:68:
c9:96:4f:0a:a8:81:8a:f5:04:9a:74:cc:1e:6d:40:dd:36:5e:
3b:b3:ef:78:8e:c8:2f:e4:b7:ac:e9:53:e0:47:ff:d8:18:42:
b9:bb:95:80:37:7a:93:8f:33:a0:51:43:1d:43:15:f0:b4:73:
3a:7a:e1:19:f1:13:f7:73:7d:d1:b1:59:2f:a6:4b:39:6b:aa:
4e:62:99:9f:59:39:85:98:f6:e8:59:9a:0e:1b:c2:f1:49:3c:
1b:07:43:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:54 2024 by rpki-client on console-ams.rpki-client.org