Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2IID-9IzxmEUzuEOIXLx4Rn3utw.roa
File: 2IID-9IzxmEUzuEOIXLx4Rn3utw.roa (raw, json)
Hash identifier: DNBCiJIWWadYmNF9TAWolQxJNUdyeD+DmKvaEOFxUq4=
Subject key identifier: D8:82:03:FB:D2:33:C6:61:14:CE:E1:0E:21:72:F1:E1:19:F7:BA:DC
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186C731C75D99B537BE6BA8F3107594E0BF
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2IID-9IzxmEUzuEOIXLx4Rn3utw.roa
Signing time: Thu 09 Mar 2023 16:26:13 +0000
ROA not before: Thu 09 Mar 2023 16:26:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3507
IP address blocks: 93.114.192.0/24 maxlen: 24
89.35.154.0/24 maxlen: 24
188.212.155.0/24 maxlen: 24
93.115.109.0/24 maxlen: 24
188.240.232.0/24 maxlen: 24
188.241.214.0/24 maxlen: 24
89.37.62.0/24 maxlen: 24
193.23.130.0/24 maxlen: 24
45.156.158.0/24 maxlen: 24
89.34.127.0/24 maxlen: 24
45.156.157.0/24 maxlen: 24
89.33.84.0/24 maxlen: 24
185.255.170.0/24 maxlen: 24
188.241.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c7:31:c7:5d:99:b5:37:be:6b:a8:f3:10:75:94:e0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 9 16:26:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d88203fbd233c66114cee10e2172f1e119f7badc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:11:47:3b:23:40:8f:6f:ac:eb:1b:90:a5:
3f:67:69:b6:53:00:9b:08:32:63:15:01:44:b7:b4:
b8:45:70:d8:0f:a2:64:b5:d6:9e:8a:47:a7:02:8c:
77:25:8d:3b:d5:75:ab:be:93:bb:75:37:d5:92:ba:
48:ea:f9:f8:1b:a3:5f:28:93:aa:ee:19:be:ae:1d:
64:ff:ee:43:1d:9a:20:5c:70:48:82:5b:e9:38:b9:
f6:eb:73:c3:a2:c2:c0:e4:5d:6f:58:42:a1:bd:fc:
da:b5:d1:b9:c0:d9:24:11:84:91:6d:ed:61:5c:b1:
86:17:0e:11:70:96:0f:23:12:57:bd:e8:60:9a:f0:
ba:8d:4e:c4:f6:46:79:30:e6:0a:a7:2c:9c:3b:07:
32:37:e3:35:14:46:32:3f:fa:00:cf:3b:12:8d:03:
72:ad:1b:7d:7c:13:e4:08:03:58:22:31:2f:f7:08:
aa:26:a9:13:e9:07:1e:bd:66:2f:8b:0d:1e:e1:de:
60:c4:8e:93:12:97:96:b0:f0:43:4c:4b:19:2e:38:
97:ca:d8:ea:c2:94:8d:3a:21:4f:2f:33:a9:21:f6:
00:64:3c:ec:b9:c1:b3:11:c0:96:c3:4b:5e:35:52:
79:d6:b3:22:65:45:3e:79:a2:6b:90:1f:60:f1:7b:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:82:03:FB:D2:33:C6:61:14:CE:E1:0E:21:72:F1:E1:19:F7:BA:DC
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2IID-9IzxmEUzuEOIXLx4Rn3utw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.157.0-45.156.158.255
89.33.84.0/24
89.34.127.0/24
89.35.154.0/24
89.37.62.0/24
93.114.192.0/24
93.115.109.0/24
185.255.170.0/24
188.212.155.0/24
188.240.232.0/24
188.241.110.0/24
188.241.214.0/24
193.23.130.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:94:e0:8a:79:74:59:3b:0f:59:99:cd:3c:e2:53:38:7c:4e:
5d:da:45:a8:e2:b3:cc:a9:0c:0e:7c:5a:51:2b:6a:6b:24:87:
a1:53:b4:c1:7f:ae:ec:7b:35:4e:b6:3a:b8:cc:d9:e6:5b:79:
24:ff:45:75:8f:1e:89:29:87:41:7e:ca:bd:f9:3e:67:d1:26:
32:d7:5f:d9:54:02:c1:18:09:59:cc:00:a3:77:d6:ac:e3:4c:
93:4c:30:3a:ae:a1:ac:b3:69:47:1b:5c:83:db:1d:eb:26:75:
f3:54:0d:f3:80:64:80:93:d4:e5:33:68:e1:c9:a8:f8:6e:29:
21:5d:09:45:16:93:ef:9b:27:9b:e3:54:47:b3:ed:da:84:f3:
52:64:b3:0f:50:48:40:ab:e7:ee:62:a9:6f:5d:fb:e8:73:06:
69:1b:90:05:15:ea:85:b8:c8:25:63:6f:04:d9:2c:44:06:53:
c6:de:27:d9:d1:8f:0b:b0:53:b3:e8:07:7e:11:39:e0:6d:47:
6f:3c:18:2b:a9:a9:6d:73:78:8d:a3:35:cf:7c:3f:a5:6e:99:
5d:0c:f1:a5:8c:7a:7f:60:ef:a2:fb:ed:29:ed:4a:47:5d:43:
3d:6b:2a:3e:55:26:66:c2:c8:1a:f0:ff:76:67:67:ac:43:7b:
80:e0:fa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:53 2023 by rpki-client on console-ams.rpki-client.org