Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/0k4kiwZvzXdMAi-5Wmp9Key6qZU.roa
File: 0k4kiwZvzXdMAi-5Wmp9Key6qZU.roa (raw, json)
Hash identifier: KGgQDok0WTDAe3Hg0mNh6MhK6r6LVG1AxLAoVXrhDyc=
Subject key identifier: D2:4E:24:8B:06:6F:CD:77:4C:02:2F:B9:5A:6A:7D:29:EC:BA:A9:95
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186C4EF292152E5D4DF43DD119672BC862F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/0k4kiwZvzXdMAi-5Wmp9Key6qZU.roa
Signing time: Thu 09 Mar 2023 05:54:13 +0000
ROA not before: Thu 09 Mar 2023 05:54:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 92.114.84.0/24 maxlen: 24
89.36.22.0/24 maxlen: 24
89.33.85.0/24 maxlen: 24
188.240.232.0/24 maxlen: 24
188.240.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c4:ef:29:21:52:e5:d4:df:43:dd:11:96:72:bc:86:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 9 05:54:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d24e248b066fcd774c022fb95a6a7d29ecbaa995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:49:fc:38:51:d1:6e:c3:d6:80:73:60:44:
eb:1f:cc:f7:b9:b2:38:e1:31:37:ea:05:d7:84:5d:
6d:a7:c0:0e:7b:d6:e9:95:50:1e:65:b0:fd:9b:38:
4f:07:de:b3:89:f1:a7:c4:d1:ee:d4:8f:80:99:1f:
07:b7:89:8e:36:4c:c1:29:3d:80:c0:e4:24:cc:75:
85:45:5a:c2:4c:fa:b0:04:b4:15:14:a3:84:b5:3e:
5c:2e:5b:c9:c7:be:dc:4a:f7:67:96:6d:df:eb:a3:
5b:59:32:ad:8d:30:34:f4:91:2f:01:41:05:ac:53:
8f:52:09:d2:6c:3e:4a:33:db:9c:98:1e:69:52:d0:
78:4a:77:d0:50:d8:0f:d0:22:1d:ee:b9:36:18:da:
30:9d:c4:43:97:99:cb:8b:fe:8a:4b:4f:af:f3:b8:
7d:58:1d:32:90:c4:33:9e:69:66:ac:d6:2a:d1:d5:
60:16:c1:10:b1:88:42:6e:60:20:e7:e5:72:8b:84:
d3:19:40:ea:5e:5a:55:67:06:b5:bc:13:d1:37:a8:
dd:24:3a:8b:32:6e:f6:36:6a:25:62:a1:80:8e:25:
17:9e:cc:fc:87:91:fb:17:29:30:f7:44:2e:e2:71:
d0:c2:ed:97:65:3f:e2:d8:3b:fd:00:f0:e2:65:59:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4E:24:8B:06:6F:CD:77:4C:02:2F:B9:5A:6A:7D:29:EC:BA:A9:95
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/0k4kiwZvzXdMAi-5Wmp9Key6qZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.85.0/24
89.36.22.0/24
92.114.84.0/24
188.240.232.0/23
Signature Algorithm: sha256WithRSAEncryption
11:83:6b:ef:44:5b:e0:29:d4:6e:c7:37:20:c4:0b:e1:ce:51:
a0:0f:bf:30:9f:09:5b:af:a1:25:ac:c2:6f:ac:93:46:e4:62:
55:f1:28:1a:61:58:9e:45:08:a2:c2:d5:98:60:e5:9e:19:08:
69:97:a1:e9:53:ff:b4:d8:6b:32:14:4b:4a:8f:83:f6:3f:2a:
3d:83:60:28:90:f2:40:c5:c2:10:5f:62:32:cd:a1:e1:f8:ec:
b5:1d:1e:24:c8:7f:02:7b:80:11:c2:51:da:a7:37:78:d4:80:
91:7d:02:3a:ca:98:8f:95:90:f6:93:89:e5:05:c1:94:d9:cf:
70:80:df:7b:37:9c:72:bb:36:ef:1e:0e:b2:09:a1:f7:75:44:
2e:07:e8:33:cd:6e:79:7f:5a:a3:b6:7a:95:42:5e:c3:4f:dd:
22:22:60:8b:5f:fe:93:3e:e7:c8:c5:12:8a:1c:94:d9:bf:a1:
1f:6d:fc:af:3e:e7:e3:3c:90:b4:50:6d:94:ba:44:9b:e1:64:
0d:ca:5f:83:14:7e:51:f8:08:10:09:db:8c:3e:7d:72:e6:fa:
6f:77:7d:70:ca:db:af:8b:c1:a8:fc:78:3f:5f:90:e8:16:b3:
93:fd:bf:80:6b:5f:12:2a:39:66:a5:69:c0:3d:27:92:c4:53:
e8:43:d4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:57 2023 by rpki-client on console-fra.rpki-client.org