Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2kpSevS7FlPWlktaytXGoCiXl6Y.roa
File: 2kpSevS7FlPWlktaytXGoCiXl6Y.roa (raw, json)
Hash identifier: I37n1kyoO1tOoAGmTmUFG7qpwJ1OTkwcJWzSxW6rf8c=
Subject key identifier: DA:4A:52:7A:F4:BB:16:53:D6:96:4B:5A:CA:D5:C6:A0:28:97:97:A6
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018B93FC703FAA11ABE2652D0C12C8E92291
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2kpSevS7FlPWlktaytXGoCiXl6Y.roa
Signing time: Fri 03 Nov 2023 07:01:16 +0000
ROA not before: Fri 03 Nov 2023 07:01:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 185.121.120.0/24 maxlen: 24
2.56.56.0/22 maxlen: 24
185.239.243.0/24 maxlen: 24
185.239.242.0/24 maxlen: 24
2.58.148.0/22 maxlen: 24
89.37.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:fc:70:3f:aa:11:ab:e2:65:2d:0c:12:c8:e9:22:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Nov 3 07:01:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da4a527af4bb1653d6964b5acad5c6a0289797a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:77:fb:a5:6a:fb:8e:27:b2:f4:e3:d5:4e:
1f:80:0c:b0:14:e3:6e:a2:1b:e9:ca:6e:9b:7f:9b:
6e:7a:e1:3a:3d:c9:9c:6d:cd:a5:0e:c5:98:34:54:
fb:4d:c8:63:1d:4e:02:ba:19:7f:32:45:0d:34:9d:
e7:bb:a1:27:be:88:10:6f:b7:2a:46:9f:6f:7c:aa:
2c:cc:2d:c0:6b:63:d4:5f:11:c5:fe:3a:c9:07:de:
d5:7a:e4:0b:c5:b3:da:ac:64:3c:97:33:fb:73:a1:
3a:88:3d:c7:fa:44:ef:26:52:82:78:b2:c0:67:c8:
9b:07:9b:fd:a2:9c:d0:bd:36:de:87:5e:d4:a8:86:
64:8e:1e:6b:a5:0e:3f:87:86:2f:03:f8:88:bb:a8:
c0:78:21:7a:6b:8e:e9:f7:f1:f1:50:72:b6:46:32:
72:e2:af:05:0e:3d:ad:0c:b9:33:a9:18:ae:4a:b1:
57:ed:57:f4:e3:fe:c9:f4:27:e4:b9:88:99:87:ce:
da:12:de:74:4d:52:e6:61:ca:2a:86:35:7e:6f:f6:
da:5a:9e:40:c2:49:29:ee:24:fa:db:1c:b2:de:47:
ed:8d:58:50:f9:eb:39:52:ea:9a:11:e4:87:d7:d9:
1c:a4:7b:5f:45:b3:e0:4b:75:05:7d:5a:59:50:99:
4b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4A:52:7A:F4:BB:16:53:D6:96:4B:5A:CA:D5:C6:A0:28:97:97:A6
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2kpSevS7FlPWlktaytXGoCiXl6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.56.0/22
2.58.148.0/22
89.37.63.0/24
185.121.120.0/24
185.239.242.0/23
Signature Algorithm: sha256WithRSAEncryption
73:c1:2f:a1:a9:c1:85:fa:a9:66:a4:99:bb:cc:02:9b:3a:fa:
08:05:60:50:38:ea:25:0d:79:3d:37:05:79:a7:67:a8:dc:c4:
cb:6b:9a:c4:04:1a:92:81:31:69:cb:68:c0:c9:4a:33:8c:8c:
e5:98:c2:fc:9b:dc:4c:9f:9e:c1:e1:8b:11:cd:c8:ff:ac:35:
03:c7:57:96:f5:8f:43:22:05:44:ff:ec:34:39:d4:7e:53:9d:
c6:7f:0a:eb:18:80:76:d2:2e:b9:07:f6:ac:6e:71:66:26:24:
08:af:e9:d6:f2:42:2c:b8:f5:24:8d:fd:49:15:66:17:0e:f5:
1f:31:a5:ae:f1:55:39:b9:4b:0e:86:6e:d3:c0:fb:2f:7e:25:
5e:bb:79:9f:f5:f9:fd:97:89:56:10:4f:a7:c8:85:9d:46:06:
2b:50:52:47:37:e2:91:da:52:31:b3:78:94:85:9f:c3:c1:dd:
f2:0d:a7:d5:b8:67:2a:8b:50:dc:71:f6:82:fb:e3:f7:a3:04:
3d:40:e7:3d:60:4a:97:fa:7b:01:fa:5d:06:56:d8:93:64:19:
f3:f5:36:be:0d:6e:c1:8b:40:8e:15:1c:99:bc:17:6a:ea:53:
73:1c:a5:34:76:e1:09:61:6e:2b:53:6f:36:34:84:f2:a3:0d:
2e:86:6d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 17:53:03 2023 by rpki-client on console-ams.rpki-client.org