Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3xojDi8GrYqTzo8FBpzPdQub1t0.roa
File: 3xojDi8GrYqTzo8FBpzPdQub1t0.roa (raw, json)
Hash identifier: 4vIHtfaMe0UPn5C3vUhjWzNr1ARdaFT+FniWVdHTvUE=
Subject key identifier: DF:1A:23:0E:2F:06:AD:8A:93:CE:8F:05:06:9C:CF:75:0B:9B:D6:DD
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018B13E36CAEB443AA06C6C343FE911F74E9
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3xojDi8GrYqTzo8FBpzPdQub1t0.roa
Signing time: Mon 09 Oct 2023 10:02:33 +0000
ROA not before: Mon 09 Oct 2023 10:02:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 89.35.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:13:e3:6c:ae:b4:43:aa:06:c6:c3:43:fe:91:1f:74:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 9 10:02:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df1a230e2f06ad8a93ce8f05069ccf750b9bd6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:30:ea:f3:42:a4:52:99:66:c7:57:02:59:
2b:5c:dd:b6:e5:d6:ef:21:02:73:89:bf:f3:ad:00:
7f:41:f0:4d:41:22:71:06:41:e1:04:48:f5:05:e0:
70:5e:a3:84:ca:67:6e:19:e7:6c:90:b4:ec:66:d8:
7a:0c:3d:8c:73:1b:53:a4:99:3c:47:f0:b5:b8:72:
dc:f8:24:65:1a:9e:4a:78:0f:9b:86:ef:6f:82:7a:
69:f3:3f:ef:a8:fe:c9:6c:f2:8c:92:5d:f6:38:cb:
3a:99:4f:19:54:4a:61:99:65:cb:3d:30:88:22:ec:
32:94:34:df:f2:9e:2d:d2:a3:3a:8b:8c:ae:d4:81:
98:6d:f8:66:a8:07:09:9f:35:03:99:eb:ff:27:f1:
06:dd:f8:7c:93:f2:76:ef:4d:30:3e:0c:ca:55:a2:
3f:79:ee:05:15:2b:8c:f2:1e:45:a0:d8:0e:df:49:
90:4f:91:d2:1d:f7:d3:27:44:b1:13:db:03:78:68:
48:12:a4:aa:0a:ea:e8:5c:58:ef:39:e3:91:a4:0e:
f5:92:88:71:c9:d9:2d:3b:f5:7b:38:70:16:8f:0b:
4a:d2:0d:13:5e:2b:0c:6b:3e:63:75:44:42:67:80:
9a:45:d0:d2:74:16:0f:22:34:10:97:9c:0f:4b:e8:
58:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1A:23:0E:2F:06:AD:8A:93:CE:8F:05:06:9C:CF:75:0B:9B:D6:DD
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3xojDi8GrYqTzo8FBpzPdQub1t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.155.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0b:53:3d:c7:cb:c5:b8:ed:78:9d:f5:99:b7:3d:fe:68:7f:
19:20:76:29:72:fd:0b:c5:6e:d6:f3:56:f6:5f:d4:36:73:91:
de:55:96:32:2f:79:56:d9:48:ac:72:4d:f2:4b:9b:47:10:d7:
07:34:20:2f:5c:ab:8d:d6:90:5b:a5:9d:49:8e:bf:cc:05:5f:
fc:1b:24:cd:15:59:4d:61:fa:09:45:b2:87:7e:30:65:f9:00:
df:42:25:29:74:2a:26:bd:bd:6b:ec:4b:bb:08:f6:42:63:43:
db:ea:c7:25:8a:9c:14:d3:45:38:b5:19:bd:74:9d:b7:1f:c6:
b3:f9:77:37:35:7b:13:b4:56:89:63:d7:7d:7c:88:9b:db:46:
c8:fd:26:ce:ac:e4:8d:c3:00:0a:02:3e:60:3a:5f:7c:ee:13:
8c:b7:e5:8c:a0:75:cf:c1:3e:35:68:73:5f:f7:1e:33:27:6d:
de:ad:f4:08:4b:25:f0:89:2d:c7:2c:bf:68:7b:3b:3c:b7:65:
4b:26:f8:c8:64:8c:ff:8b:c0:19:6a:51:b9:eb:c2:07:ac:91:
48:a1:de:b5:01:25:53:e5:21:be:bd:6d:88:7f:b4:ed:37:f0:
c4:a4:2b:c4:da:41:3d:3d:06:58:86:7e:d3:26:33:b8:8d:4f:
96:bf:96:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 9 07:48:53 2023 by rpki-client on console-ams.rpki-client.org