Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3VuB4KbwVteIMn7c6BlsAa2QiIY.roa
File: 3VuB4KbwVteIMn7c6BlsAa2QiIY.roa (raw, json)
Hash identifier: ktBj9oXj8aN97gJi3GdGVGOIdLOImgq1967xmA1GyUM=
Subject key identifier: DD:5B:81:E0:A6:F0:56:D7:88:32:7E:DC:E8:19:6C:01:AD:90:88:86
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018B19076250B0F6DDC7705184D5306F9878
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3VuB4KbwVteIMn7c6BlsAa2QiIY.roa
Signing time: Tue 10 Oct 2023 09:59:56 +0000
ROA not before: Tue 10 Oct 2023 09:59:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199760
IP address blocks: 188.212.132.0/24 maxlen: 24
188.241.182.0/24 maxlen: 24
89.33.84.0/24 maxlen: 24
93.115.109.0/24 maxlen: 24
89.37.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:07:62:50:b0:f6:dd:c7:70:51:84:d5:30:6f:98:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 10 09:59:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd5b81e0a6f056d788327edce8196c01ad908886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:15:0b:95:39:f7:41:57:22:b3:a5:d0:93:fd:
e1:88:fa:d6:7a:55:c5:e0:36:f4:7a:21:39:ed:50:
98:e9:6d:3b:64:12:c3:55:de:6c:97:ac:c8:b8:62:
de:3b:17:59:bc:b9:b7:c4:37:ca:c9:a8:fa:b3:f1:
b1:8d:f9:e6:ee:1c:a5:11:b6:1f:c6:9f:1b:a7:5f:
3c:b5:e1:f7:8c:02:0c:bf:af:eb:2a:74:3a:8f:3d:
fe:e9:60:f3:16:50:20:d7:4c:b3:93:ab:bc:e1:d6:
db:23:fb:4c:fb:b1:e0:07:18:80:98:40:71:03:0a:
5c:4a:fe:fe:35:d1:27:29:e2:4f:a2:91:49:1a:2c:
90:9c:88:6b:fb:b5:57:f6:51:01:16:a5:c3:5d:23:
7f:2d:ed:aa:be:40:a2:7f:66:10:25:00:8d:59:49:
89:71:fa:3a:1e:9c:f4:03:4e:f5:9b:38:56:fb:f0:
42:cc:ac:d6:6d:2a:dd:4e:11:49:79:39:e7:a3:a3:
cf:da:9a:7b:1a:2c:ba:b1:5b:4a:a2:ce:09:f1:21:
e9:1f:47:06:39:06:de:90:52:20:9a:b0:a3:40:ea:
ec:60:12:b1:31:05:5e:21:9e:83:56:11:72:97:b6:
87:d8:e1:ba:87:92:c8:85:e8:01:b0:8f:e1:ac:54:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5B:81:E0:A6:F0:56:D7:88:32:7E:DC:E8:19:6C:01:AD:90:88:86
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3VuB4KbwVteIMn7c6BlsAa2QiIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.84.0/24
89.37.62.0/24
93.115.109.0/24
188.212.132.0/24
188.241.182.0/24
Signature Algorithm: sha256WithRSAEncryption
64:4b:25:1d:46:ca:27:59:bd:c2:8d:b1:3d:eb:dc:dd:14:de:
81:e0:ac:20:fb:83:a0:52:cc:e8:e6:bd:d0:53:aa:2c:40:58:
3f:c1:e3:66:81:b4:5a:ae:90:af:87:b6:e0:04:30:b8:a3:b3:
64:56:c7:3a:86:cf:40:6e:26:ff:aa:14:86:cf:88:a7:a7:39:
e0:46:fc:a3:9f:f9:85:37:45:2a:bf:19:40:42:a9:23:38:4f:
62:30:dd:43:d8:a5:2a:b6:2e:10:ac:90:13:d8:3a:7e:91:e9:
c6:4f:75:a3:9a:fb:ce:fa:49:01:24:41:57:be:d3:3d:12:d3:
10:17:56:9d:a1:d9:af:e4:38:ff:c7:51:38:e0:cf:5d:7b:9e:
8d:48:4f:92:65:ce:c1:41:b8:ae:78:72:b3:fb:48:d8:05:66:
7e:ab:13:c7:f7:09:f4:b5:d5:d4:ce:d6:45:6d:37:1e:9f:6d:
77:55:5a:18:6a:8e:08:62:18:e6:d4:f3:a7:e9:5f:ee:55:4b:
0f:7f:e7:22:46:c8:fe:2c:af:18:90:0a:f8:09:b3:ec:10:b0:
0f:12:5a:13:17:f0:92:7b:1a:ca:ca:2e:e2:e2:b9:e4:3f:8c:
d7:bd:4f:63:9d:fd:64:65:e9:18:9c:fd:10:f4:59:03:cf:5f:
42:73:6a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 23:14:07 2023 by rpki-client on console-ams.rpki-client.org