Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4ShI4EP_VGz5OQB0czbOuHP9vxE.roa
File: 4ShI4EP_VGz5OQB0czbOuHP9vxE.roa (raw, json)
Hash identifier: SR0QO+HeGCDtZbpoP5k9BmZAUxvhaahTJPFhWRiTxlY=
Subject key identifier: E1:28:48:E0:43:FF:54:6C:F9:39:00:74:73:36:CE:B8:73:FD:BF:11
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018ABE14530FC99B1F5CBE3E3A6AC047439F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4ShI4EP_VGz5OQB0czbOuHP9vxE.roa
Signing time: Fri 22 Sep 2023 18:08:37 +0000
ROA not before: Fri 22 Sep 2023 18:08:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31863
IP address blocks: 188.212.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:be:14:53:0f:c9:9b:1f:5c:be:3e:3a:6a:c0:47:43:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 22 18:08:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e12848e043ff546cf93900747336ceb873fdbf11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:08:9b:13:86:5c:9b:74:7d:0d:d3:de:fc:
b5:82:be:e2:26:01:14:a5:b3:30:3c:64:b7:d0:e0:
06:7d:32:92:4d:67:49:5c:2f:39:2b:f2:f5:26:07:
0f:61:8b:b0:18:81:10:62:2e:12:7a:14:39:c2:39:
5e:e0:2d:50:6c:23:4b:2f:f9:68:10:11:80:db:7c:
ee:23:4c:2c:c8:e4:da:12:7d:07:bb:50:33:e3:f2:
a8:af:6a:a6:86:07:5b:4b:15:cd:62:b2:a0:17:01:
79:8b:b7:3d:f6:3a:fc:e4:82:03:51:45:95:32:2c:
32:70:b7:57:00:af:e1:2f:2a:75:be:42:ed:1c:60:
0e:b2:49:7e:96:d2:2e:bc:49:75:21:76:cb:e4:84:
49:54:2c:07:13:74:62:52:5f:d2:23:d4:72:02:06:
60:35:d7:c3:40:b6:3c:4f:d7:22:36:aa:f0:d6:cd:
83:61:b0:1b:1e:0d:d7:6a:98:c4:e7:2a:70:8d:92:
6a:87:00:68:2e:d6:9e:d6:ab:61:f2:dd:a7:15:1c:
50:0f:c0:7f:3b:a1:0f:44:23:74:09:a8:f4:59:f0:
e7:39:f3:67:3e:a6:e2:76:d3:14:29:eb:9a:b9:df:
d7:d1:92:98:ca:97:41:bd:65:85:41:4f:bd:a7:11:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:28:48:E0:43:FF:54:6C:F9:39:00:74:73:36:CE:B8:73:FD:BF:11
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4ShI4EP_VGz5OQB0czbOuHP9vxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.159.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e0:9d:e5:8b:f0:5d:c3:48:16:6f:d1:00:ac:c6:1e:85:0e:
c8:00:3d:50:f2:d7:91:4d:21:20:eb:1c:33:21:bf:ed:01:cc:
2b:73:98:80:a1:44:0a:5d:29:0a:92:79:d6:98:71:17:f7:be:
16:48:ea:cb:2b:6b:02:b4:36:61:ec:4f:42:2b:a6:6d:70:41:
24:5e:72:9f:91:3b:63:41:b5:e2:27:93:51:ed:17:62:72:6e:
fb:1e:5a:0c:6b:fb:88:93:77:4b:3d:3b:b0:99:22:03:90:7b:
3a:ed:6d:8f:39:8c:79:aa:a2:66:09:90:b8:aa:fe:7d:a4:2a:
26:56:b2:d8:4a:81:4b:a2:5d:7c:bd:94:b3:a2:23:43:4f:1a:
ac:25:4e:bc:48:5e:b0:a1:ac:25:f2:a9:44:ba:bd:5f:13:9d:
2d:2d:d7:9d:1d:78:4c:f4:bc:d2:7b:42:ad:01:c3:1d:1a:a8:
a1:69:93:94:79:10:55:c8:d5:67:26:0b:8b:b7:2e:d3:b6:4c:
f4:7f:e8:9d:9b:6c:08:76:a0:5c:90:bb:df:f4:df:df:ba:bc:
bf:65:85:9c:79:79:87:d4:be:10:f0:5c:a0:cd:43:a3:fc:98:
58:84:0f:eb:79:51:48:b2:37:f0:2d:62:67:6e:9d:f3:56:88:
34:15:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 14:29:59 2023 by rpki-client on console-fra.rpki-client.org