Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/PW-s82OCU7D0Dyr1MkxvHE-Yvuw.roa
File: PW-s82OCU7D0Dyr1MkxvHE-Yvuw.roa (raw, json)
Hash identifier: p+Z1J4Eacmy6l6BBSuhtoHTSRBC9qhzqk5UMfTkP2e4=
Subject key identifier: 3D:6F:AC:F3:63:82:53:B0:F4:0F:2A:F5:32:4C:6F:1C:4F:98:BE:EC
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0186B8C9D6A87971395B2431CEAD631B7AA3
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/PW-s82OCU7D0Dyr1MkxvHE-Yvuw.roa
Signing time: Mon 06 Mar 2023 21:18:00 +0000
ROA not before: Mon 06 Mar 2023 21:18:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 84.247.20.0/24 maxlen: 24
89.47.249.0/24 maxlen: 24
94.177.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:c9:d6:a8:79:71:39:5b:24:31:ce:ad:63:1b:7a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Mar 6 21:18:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d6facf3638253b0f40f2af5324c6f1c4f98beec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:0a:89:58:24:3d:6d:21:7c:fc:5c:b7:65:
f7:14:65:4f:d7:0d:3e:d7:7d:25:43:35:dd:60:20:
6d:be:13:fb:09:bb:97:d7:01:7e:a4:0b:03:a7:18:
a7:db:e5:3f:21:61:d8:14:3b:a9:37:96:77:99:7b:
55:74:a3:19:8c:95:62:9f:01:cd:31:f4:f4:ec:93:
b4:38:63:51:80:8c:51:4e:d9:68:d9:72:55:29:a4:
d3:d8:3b:1a:00:29:02:7f:3e:32:02:6b:d6:7b:8a:
57:65:6a:5f:f4:a5:c5:ff:0c:af:41:8c:ca:8e:68:
17:63:ab:13:fe:89:08:2c:7d:d6:10:87:1a:25:98:
b9:31:09:bd:2b:53:89:d0:fb:d1:dd:1a:b9:0b:fc:
46:a1:a8:92:bc:6e:70:55:99:93:a8:66:b3:ba:f4:
8f:78:aa:e6:32:23:d6:89:56:14:b7:b0:67:b0:b5:
bb:9f:e2:69:f2:c9:d3:99:8f:a7:1d:6f:99:63:ea:
9b:56:63:3c:6c:37:c9:07:39:03:d2:a5:bf:f4:ef:
43:a1:3c:e4:ae:cc:30:02:51:05:af:c8:31:5c:20:
ac:66:01:0b:41:43:c5:25:0b:6c:17:75:a1:49:cf:
7f:45:2e:9b:46:e8:95:49:1f:a7:db:f7:74:88:6d:
3f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6F:AC:F3:63:82:53:B0:F4:0F:2A:F5:32:4C:6F:1C:4F:98:BE:EC
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/PW-s82OCU7D0Dyr1MkxvHE-Yvuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.20.0/24
89.47.249.0/24
94.177.113.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:99:71:8a:b8:9f:a4:4e:c3:15:00:70:b8:1f:d1:74:82:10:
89:e8:af:24:b1:3d:c5:e5:65:f8:17:3f:f0:86:d2:0b:ff:7e:
0a:38:0c:65:9d:da:eb:43:d3:b7:80:09:a6:11:7a:51:85:26:
c2:ba:c7:35:21:eb:7b:d2:8d:6b:43:b7:bc:ef:c4:68:3d:1a:
a8:20:91:da:6f:10:e1:d8:9b:fb:53:9c:60:96:bc:c4:34:58:
4d:8b:c6:1e:a4:aa:b1:13:35:fc:a1:ed:67:f2:9b:94:07:51:
45:d1:78:21:c8:64:0e:d8:b9:ab:e7:23:ab:7a:cd:18:15:04:
6d:73:ed:2e:32:a2:0c:6c:e5:64:c2:75:2e:b6:6d:d0:a3:f6:
48:f3:6e:ac:c0:6f:d6:d0:a8:0b:a6:de:e9:0b:1d:43:53:43:
1b:de:7d:7b:5f:ce:fe:26:aa:d4:70:86:de:3b:d9:d4:56:41:
e0:f1:af:cc:6b:75:d0:f1:44:5c:fa:62:79:82:60:40:1f:ec:
64:05:11:b7:a6:eb:d0:60:6a:bb:95:5d:f4:a1:08:ce:b8:3f:
72:06:6c:31:cb:ae:fe:53:61:48:18:ea:54:d5:9b:7f:5e:73:
8b:b3:61:77:c0:e8:c5:5e:d4:c7:35:56:bd:12:57:56:06:60:
66:81:b9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-fra.rpki-client.org