Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/25WdS7AOtkuLB88ZetMbPNTvpLo.roa
File: 25WdS7AOtkuLB88ZetMbPNTvpLo.roa (raw, json)
Hash identifier: b2+MRHCifeT+OUz7vfBZNZj0zz6Apzd5Fl69kr3bs8g=
Subject key identifier: DB:95:9D:4B:B0:0E:B6:4B:8B:07:CF:19:7A:D3:1B:3C:D4:EF:A4:BA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0188AF1D30FFE3A96DAC472928B58043DCA8
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/25WdS7AOtkuLB88ZetMbPNTvpLo.roa
Signing time: Mon 12 Jun 2023 10:18:25 +0000
ROA not before: Mon 12 Jun 2023 10:18:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 89.35.155.0/24 maxlen: 24
188.212.132.0/24 maxlen: 24
188.212.133.0/24 maxlen: 24
188.212.158.0/24 maxlen: 24
87.247.148.0/24 maxlen: 24
87.247.150.0/24 maxlen: 24
87.247.149.0/24 maxlen: 24
87.247.151.0/24 maxlen: 24
188.240.230.0/24 maxlen: 24
188.240.232.0/24 maxlen: 24
185.241.210.0/23 maxlen: 24
188.241.214.0/24 maxlen: 24
91.188.204.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
93.115.254.0/23 maxlen: 24
188.213.203.0/24 maxlen: 24
45.156.159.0/24 maxlen: 24
45.156.157.0/24 maxlen: 24
185.135.143.0/24 maxlen: 24
89.33.85.0/24 maxlen: 24
185.255.169.0/24 maxlen: 24
185.255.170.0/24 maxlen: 24
185.103.72.0/24 maxlen: 24
185.238.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:1d:30:ff:e3:a9:6d:ac:47:29:28:b5:80:43:dc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 12 10:18:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db959d4bb00eb64b8b07cf197ad31b3cd4efa4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4d:50:91:97:55:90:9d:55:be:56:61:06:eb:
f2:16:0e:3e:36:5a:48:95:6a:29:e2:c3:6c:bf:fa:
a9:9b:2a:e0:b8:60:ec:39:16:ba:66:54:c7:c7:5a:
bf:89:5e:21:72:d3:11:b5:9a:05:0d:ec:83:ac:de:
81:e3:b2:db:af:84:80:ee:42:c8:27:59:c3:88:81:
ea:30:22:33:e7:53:32:1a:22:a0:85:59:1b:56:15:
4e:32:54:ce:1a:a0:aa:52:0f:dd:cc:78:12:2d:34:
00:d8:8d:1f:78:e7:5d:76:8a:54:a0:23:da:e0:5c:
de:0c:d8:b0:37:7b:75:f9:3d:3e:4b:f8:b9:50:5f:
e8:22:ec:bb:2f:b8:90:81:94:66:67:4c:8e:05:06:
29:e5:03:01:d0:7c:bf:a8:d5:1b:f6:f6:8c:97:85:
8a:c6:94:bf:1f:f0:5e:4b:21:58:7f:bd:d0:12:d8:
5c:f8:f9:f7:1b:ec:6f:a4:b2:7a:27:09:51:2a:f6:
6f:8d:ca:35:f1:64:33:90:a1:47:12:3a:17:26:83:
1f:14:96:b0:d1:a1:e5:a7:a6:65:a8:a7:55:e1:ea:
05:f5:20:45:76:0b:e1:db:4f:3a:28:07:dc:de:9e:
68:3e:6b:5d:23:34:0d:94:ba:b9:a7:7c:60:e5:e5:
9d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:95:9D:4B:B0:0E:B6:4B:8B:07:CF:19:7A:D3:1B:3C:D4:EF:A4:BA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/25WdS7AOtkuLB88ZetMbPNTvpLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.157.0/24
45.156.159.0/24
87.247.148.0/22
89.33.85.0/24
89.35.155.0/24
89.37.63.0/24
91.188.204.0/24
93.115.254.0/23
185.103.72.0/24
185.135.143.0/24
185.238.10.0/24
185.241.210.0/23
185.255.169.0-185.255.170.255
188.212.132.0/23
188.212.158.0/24
188.213.203.0/24
188.240.230.0/24
188.240.232.0/24
188.241.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:fb:44:a5:2d:86:ad:e5:ee:ef:df:6e:dc:85:13:2e:15:62:
e3:42:7c:7f:cc:5e:54:3f:97:59:0b:40:3e:e1:09:61:b3:ef:
c4:04:cd:d9:00:7b:94:8b:97:04:c8:82:2d:f5:c0:c0:19:ce:
35:45:56:9a:41:fc:6c:e8:f2:48:45:87:b4:2c:2b:44:24:42:
c0:b8:3f:70:6e:0d:9e:67:b4:9b:4f:aa:88:f4:86:d8:f7:f3:
73:94:36:8a:ed:3f:0a:67:4b:7d:42:f7:b6:26:de:10:2f:8f:
47:dc:54:41:62:2e:e4:46:89:35:a1:24:c3:5a:00:65:68:af:
44:df:e2:0c:28:38:25:46:2f:c6:a4:68:ff:66:67:fe:b0:f2:
b0:b6:99:58:04:1a:90:18:f2:0b:4a:d1:53:2e:9f:c1:7b:9a:
21:d1:ad:e2:ad:45:f4:93:80:0e:d9:2f:99:c9:27:9f:51:ef:
74:5d:b7:bd:f2:c5:a9:67:95:16:9d:c9:4a:ce:6d:9e:c4:ff:
ed:40:d9:c3:5d:2f:27:ad:b0:c5:34:bf:13:18:2c:b3:78:6c:
7c:b8:5d:4a:46:a1:79:fe:5c:55:e6:2b:29:c8:ab:b7:96:b2:
28:2d:fa:5f:bf:40:18:95:e2:a7:8d:76:76:fd:31:47:3b:2b:
ef:fd:81:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:53 2023 by rpki-client on console-ams.rpki-client.org