Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3zLoolabktjd3khgVMCc69QZtA0.roa
File: 3zLoolabktjd3khgVMCc69QZtA0.roa (raw, json)
Hash identifier: J7sX85qOez4rLcaIFcM+od6U31VZJHoxAt6RkvdGuF8=
Subject key identifier: DF:32:E8:A2:56:9B:92:D8:DD:DE:48:60:54:C0:9C:EB:D4:19:B4:0D
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01857103243758AA13144509D5C8D8ED0198
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3zLoolabktjd3khgVMCc69QZtA0.roa
Signing time: Mon 02 Jan 2023 05:45:09 +0000
ROA not before: Mon 02 Jan 2023 05:45:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 2.56.56.0/22 maxlen: 24
37.46.150.0/24 maxlen: 24
185.239.243.0/24 maxlen: 24
185.239.242.0/24 maxlen: 24
2.58.148.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:24:37:58:aa:13:14:45:09:d5:c8:d8:ed:01:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df32e8a2569b92d8ddde486054c09cebd419b40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dc:e8:df:09:d5:8b:0c:ed:f0:e4:99:e5:52:
5e:d7:89:d0:d5:2b:b2:59:2d:d5:8a:cd:fb:d1:7a:
3b:ff:a6:01:bd:62:aa:0e:3a:32:f1:58:ae:5e:ee:
87:94:62:9e:47:20:35:ab:4f:b2:70:33:45:6a:06:
4f:1c:d3:ad:cf:4f:77:17:c2:ba:82:b0:df:9a:9a:
67:ed:e1:93:74:8a:09:08:15:de:f0:c9:fd:88:b6:
45:9e:23:4a:a6:20:62:77:25:68:c2:8f:27:ae:24:
66:7b:5f:29:45:fa:14:34:e4:f2:a6:90:21:32:c6:
91:18:2b:ca:f9:ab:25:32:e2:db:40:68:c2:0e:a2:
77:d2:f3:48:9c:f8:0f:83:11:31:01:21:bd:16:b3:
b1:08:43:4e:f9:ab:61:15:90:0f:37:40:8f:05:af:
20:eb:eb:1a:cb:12:20:a2:25:3b:5b:ff:8c:76:87:
82:51:fe:1d:f8:48:10:94:44:d0:5c:d8:be:ca:1d:
5a:59:8d:91:e4:a0:e8:6c:22:dd:ea:f9:d9:90:82:
a8:c5:13:e0:b1:f9:0e:20:c6:07:3e:0c:f1:53:4d:
28:8e:58:dc:01:12:99:ac:c2:c2:03:7b:55:3c:0d:
11:9a:b0:bd:27:8b:ac:50:22:bd:7c:58:73:e8:30:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:32:E8:A2:56:9B:92:D8:DD:DE:48:60:54:C0:9C:EB:D4:19:B4:0D
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3zLoolabktjd3khgVMCc69QZtA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.56.0/22
2.58.148.0/22
37.46.150.0/24
185.239.242.0/23
Signature Algorithm: sha256WithRSAEncryption
95:89:52:04:67:5b:6d:56:98:00:a5:d5:a2:32:cc:f2:c1:15:
00:a4:5f:68:b5:c0:55:fe:be:c8:57:91:f6:cb:2f:c0:09:f3:
49:24:9d:f6:08:b6:bb:e7:46:df:32:6e:99:63:6e:d8:71:55:
32:49:2f:c2:05:2a:b3:ec:a2:c2:97:d9:8c:c8:02:21:06:62:
5d:d9:36:b4:39:48:d7:14:77:ac:6d:2d:66:40:fc:ee:1a:fd:
48:6a:e6:ac:8e:5d:8d:bb:92:fe:8a:90:21:24:d0:8e:a1:42:
e8:ed:3c:ef:be:bd:44:88:0b:06:97:a7:86:e7:93:e9:f6:75:
e3:e4:1e:ba:01:f5:2d:1a:47:f2:e5:c8:e3:e5:49:5c:5a:f1:
e7:7d:90:05:74:ca:68:dd:0f:9e:eb:0a:2e:91:e2:a2:37:64:
70:22:ff:3a:5b:db:43:55:ff:c1:ba:b2:12:98:01:c3:e7:90:
21:0b:2f:e5:d4:1e:f1:19:88:05:69:05:c9:d7:f4:53:32:bc:
bc:93:96:9b:b0:58:9d:76:b5:00:a3:5a:b7:dd:19:cc:78:7e:
83:da:39:d9:b9:8a:77:7c:df:9d:92:64:8b:71:14:da:9e:ad:
ec:ee:49:cd:6e:48:e1:b3:8d:f2:80:3d:7c:d2:73:da:b1:dd:
1b:d7:24:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:57 2023 by rpki-client on console-fra.rpki-client.org