Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5WyMm0HBFSKG6Psg1EwC_fLotBA.roa
File: 5WyMm0HBFSKG6Psg1EwC_fLotBA.roa (raw, json)
Hash identifier: ocNHL7usQPsczJzA0aZ5EYwi4PaIDiPbLu0vl9zyKrE=
Subject key identifier: E5:6C:8C:9B:41:C1:15:22:86:E8:FB:20:D4:4C:02:FD:F2:E8:B4:10
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018B81F717C20163E0ECC9CBB21FB10EA7F6
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5WyMm0HBFSKG6Psg1EwC_fLotBA.roa
Signing time: Mon 30 Oct 2023 19:02:16 +0000
ROA not before: Mon 30 Oct 2023 19:02:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199760
IP address blocks: 188.241.242.0/24 maxlen: 24
188.212.158.0/24 maxlen: 24
188.241.182.0/24 maxlen: 24
89.33.84.0/24 maxlen: 24
93.115.109.0/24 maxlen: 24
89.37.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:f7:17:c2:01:63:e0:ec:c9:cb:b2:1f:b1:0e:a7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 30 19:02:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e56c8c9b41c1152286e8fb20d44c02fdf2e8b410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9f:6a:69:93:f2:ad:23:49:98:72:eb:ea:76:
d4:2a:8a:6c:5d:21:e4:5b:a0:9c:10:20:cc:1a:79:
68:62:ab:8f:f9:a4:c4:54:db:6e:96:5a:05:31:54:
a8:8f:67:ca:ab:f8:5d:51:b1:30:4d:ad:1e:e9:f2:
f2:d6:f6:0a:f8:1e:df:ba:4d:9c:99:a1:93:7f:f3:
dc:e4:64:2a:40:8b:b8:96:eb:9f:68:c8:59:e9:43:
80:53:7d:dc:fc:05:1b:69:f5:81:d2:0f:8f:0f:89:
9a:ea:69:70:06:0c:14:3b:01:c5:c7:a3:fe:20:40:
f7:26:d8:ab:76:bf:9c:d5:c7:cb:57:43:d2:06:38:
ec:6b:80:ce:84:3f:4c:36:3b:ac:06:17:55:5f:1c:
c6:0a:9c:ab:82:19:34:8d:30:a2:42:1f:ae:c7:f0:
ef:dd:43:a3:95:98:f6:d4:20:f0:a9:a5:9d:b9:c9:
b4:ce:24:1c:d5:a2:5d:7b:a1:9e:ef:3d:6f:40:1b:
9c:27:f4:bf:b9:20:7d:4b:c2:52:2f:2c:b1:fb:58:
7d:89:c1:a2:3b:15:94:a5:25:70:ca:57:29:46:b0:
a5:80:42:b0:5d:71:40:9f:d4:71:43:ea:db:75:e8:
ff:a5:03:85:f7:42:21:b3:21:87:33:37:39:d5:38:
b2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6C:8C:9B:41:C1:15:22:86:E8:FB:20:D4:4C:02:FD:F2:E8:B4:10
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5WyMm0HBFSKG6Psg1EwC_fLotBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.84.0/24
89.37.62.0/24
93.115.109.0/24
188.212.158.0/24
188.241.182.0/24
188.241.242.0/24
Signature Algorithm: sha256WithRSAEncryption
97:eb:fd:d8:1c:98:e5:48:19:fe:65:07:ce:5b:f2:99:6e:a8:
b3:e7:f2:a0:70:38:03:e4:88:c3:7b:91:1e:b3:f0:01:ac:e9:
dc:a3:e5:44:db:00:06:39:d9:f7:6d:80:d2:87:88:82:65:6f:
7c:52:92:cb:04:09:89:50:bb:9e:cb:0d:d3:c2:62:55:ed:79:
81:43:eb:de:1a:a3:55:de:42:b8:e4:ce:9f:a1:5c:bf:61:52:
f6:73:88:a4:4d:83:8c:76:63:26:6e:5d:8a:d6:bf:1e:8e:6f:
3e:7d:f5:9d:d3:c2:b8:62:7f:5f:6a:bf:b6:29:fd:e9:5a:d5:
d1:f9:4e:44:b3:08:69:a3:2f:3f:09:e2:bf:93:22:64:91:2d:
a4:72:df:86:13:e5:8d:b6:a0:da:f6:12:12:10:79:c3:79:dc:
ce:3d:75:52:8c:84:8b:53:2c:48:5a:d1:51:e8:65:b0:7b:91:
c5:d6:3b:1f:f0:c7:55:6e:38:19:d0:ff:24:39:22:a9:6f:c2:
18:b4:f5:7a:74:2a:e1:87:6f:cc:8e:d5:85:bb:16:06:66:08:
26:8b:95:a7:65:64:f0:1c:02:31:1d:6a:47:b6:89:f1:11:b1:
67:80:40:98:01:ac:13:cb:9c:30:11:f0:ea:da:21:13:bf:9c:
a7:e1:71:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 08:50:46 2023 by rpki-client on console-ams.rpki-client.org