Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4OAZOxdxTBRRk8c-ZVp9tjKvKyg.roa
File: 4OAZOxdxTBRRk8c-ZVp9tjKvKyg.roa (raw, json)
Hash identifier: uo7IPrxgGI4QcX0lu0K0lnWqmHCNHSPMk9xVDjsr/zE=
Subject key identifier: E0:E0:19:3B:17:71:4C:14:51:93:C7:3E:65:5A:7D:B6:32:AF:2B:28
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018B13E26F5BAE59DAFE2B56CAED7B0F3DF4
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4OAZOxdxTBRRk8c-ZVp9tjKvKyg.roa
Signing time: Mon 09 Oct 2023 10:01:28 +0000
ROA not before: Mon 09 Oct 2023 10:01:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199760
IP address blocks: 188.212.132.0/24 maxlen: 24
188.241.182.0/24 maxlen: 24
93.115.109.0/24 maxlen: 24
89.37.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:13:e2:6f:5b:ae:59:da:fe:2b:56:ca:ed:7b:0f:3d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 9 10:01:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0e0193b17714c145193c73e655a7db632af2b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:01:d6:91:e2:c4:b7:70:a9:5c:9b:68:72:
8d:52:22:1f:78:9e:84:18:f6:58:4f:75:5f:30:bd:
82:59:bd:7e:43:62:cf:46:b6:1e:14:0c:0e:17:cf:
b7:e7:64:e0:07:b7:2c:2a:a2:4f:58:a7:15:ec:9a:
6c:a2:8f:f3:e4:28:1d:c3:13:03:c6:2f:32:66:35:
87:3b:22:c5:16:b9:d5:01:27:4a:a5:cf:02:84:47:
57:97:06:fd:6a:5f:d8:0e:74:16:1d:8c:03:e8:fe:
b8:a0:53:d4:18:0f:6f:1f:18:26:91:38:f8:6b:8b:
b1:bc:92:1e:51:d0:04:d7:a1:a4:20:15:33:26:42:
7e:3b:82:8f:35:cf:08:1a:11:25:09:e7:a0:30:ae:
65:8c:7c:18:10:91:3d:6a:4c:5e:5b:34:33:e2:c5:
73:7e:9a:78:ce:43:a0:1e:c7:10:75:3a:6f:57:83:
5e:ec:11:09:f0:af:a0:02:8d:b6:72:c6:23:06:eb:
d8:90:03:02:68:e7:a8:e4:ff:89:19:e7:f3:eb:36:
b7:0e:42:64:d4:3e:7b:07:9d:66:ea:0b:f9:e7:96:
12:f2:73:3e:bd:a0:63:b8:2a:91:dc:2f:26:63:70:
f3:8a:a6:6b:70:5c:fa:59:cc:33:64:1b:32:78:a1:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E0:19:3B:17:71:4C:14:51:93:C7:3E:65:5A:7D:B6:32:AF:2B:28
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4OAZOxdxTBRRk8c-ZVp9tjKvKyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.62.0/24
93.115.109.0/24
188.212.132.0/24
188.241.182.0/24
Signature Algorithm: sha256WithRSAEncryption
38:0a:77:a8:ad:5f:b4:9c:cf:83:06:a4:56:d2:e4:06:82:cf:
b5:c6:49:7f:b5:11:f0:98:be:70:41:d7:03:39:5b:b0:b5:78:
6a:28:3e:aa:02:15:d2:b9:e4:c3:07:9b:51:0a:65:4b:dc:9a:
2d:56:48:34:9c:7a:50:99:a0:79:64:f9:2b:30:0b:8c:78:9b:
11:bf:04:0e:6f:9a:2c:17:92:c1:79:3a:07:cc:a5:d9:b2:26:
29:96:01:80:b4:8d:a2:f5:09:e6:e0:2e:9d:c3:e5:cf:d4:5f:
de:5e:f2:36:8b:3a:a0:42:06:9b:b6:9d:84:71:90:d3:cc:3f:
17:ae:1b:69:9d:27:90:a6:12:20:55:40:c5:94:f1:64:4e:53:
e4:01:2b:eb:70:71:b2:71:9b:08:85:3a:4c:2d:08:11:f0:66:
30:20:51:84:a6:d1:ae:6f:7f:fb:3c:1b:4a:d9:7f:80:9b:d1:
47:ab:3f:fb:e5:bc:5c:f1:2d:85:4c:96:0a:aa:ba:7b:a3:27:
f3:af:41:41:88:9e:ed:22:07:1f:28:72:91:41:5c:46:f6:0a:
b3:92:40:8c:d1:10:0c:f4:10:e2:99:0c:89:b3:b6:3d:40:bb:
7f:b8:b3:7e:86:02:9b:94:24:94:de:52:81:7c:a0:db:2d:d2:
d2:db:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 10:55:24 2023 by rpki-client on console-ams.rpki-client.org