Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6a7KqcEm_eQ9zRr3IaVK0-gLsA4.roa
File: 6a7KqcEm_eQ9zRr3IaVK0-gLsA4.roa (raw, json)
Hash identifier: MONPXOuY6beil+Eh38Gv0RoL5jI1AHz7OM36QrY1Ig0=
Subject key identifier: E9:AE:CA:A9:C1:26:FD:E4:3D:CD:1A:F7:21:A5:4A:D3:E8:0B:B0:0E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018B947D8859317ED2F36961777016280FB9
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6a7KqcEm_eQ9zRr3IaVK0-gLsA4.roa
Signing time: Fri 03 Nov 2023 09:22:16 +0000
ROA not before: Fri 03 Nov 2023 09:22:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211826
IP address blocks: 194.32.123.0/24 maxlen: 24
45.135.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:7d:88:59:31:7e:d2:f3:69:61:77:70:16:28:0f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Nov 3 09:22:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9aecaa9c126fde43dcd1af721a54ad3e80bb00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:84:e1:2d:06:93:5f:ab:f7:bb:03:b0:ab:
63:dd:8e:9d:df:b5:9e:be:bb:2e:3e:fa:64:ba:73:
82:d8:18:90:1a:73:ec:33:3d:ab:7a:15:69:4d:6b:
de:85:15:1d:88:a4:90:12:98:1a:65:f1:8e:7a:d6:
88:4b:33:62:64:1f:b0:2e:d5:f2:9b:16:f4:2e:49:
d3:51:36:12:d0:8f:4e:8a:ed:9d:c9:c1:f7:48:b8:
21:48:9a:79:f6:d5:b0:d5:e7:dd:2e:37:87:73:1a:
72:68:6e:a5:9a:a3:8c:ea:99:50:85:d1:da:5a:b7:
de:b1:a3:42:c3:f1:90:d3:ff:0b:fd:01:ae:56:82:
94:5a:f6:89:ba:35:e6:b3:75:eb:5e:c6:35:3f:40:
53:fd:46:15:f1:0e:cf:2b:be:73:d0:2a:7d:58:25:
75:66:d9:7c:d1:0c:d7:34:20:e4:02:d0:58:29:b0:
f7:c8:a1:ff:a6:03:62:bc:f6:a3:ad:95:97:e3:47:
33:c0:df:ea:dc:59:f0:75:fd:c5:a7:74:e4:1c:7f:
a5:70:bc:65:5a:0d:fc:b5:db:47:36:ac:01:09:c8:
37:4e:7c:20:23:f1:9f:f5:28:4f:77:55:8b:67:30:
b9:c9:48:03:5e:a8:ee:ca:a6:66:a2:81:74:7a:5a:
e1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AE:CA:A9:C1:26:FD:E4:3D:CD:1A:F7:21:A5:4A:D3:E8:0B:B0:0E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6a7KqcEm_eQ9zRr3IaVK0-gLsA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.185.0/24
194.32.123.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b8:b9:2c:e0:4e:33:ce:bf:32:bb:e9:e8:0b:dd:f2:b5:c1:
7c:f3:aa:1c:0d:45:26:72:50:a8:59:c1:74:a2:f7:79:b3:42:
77:a9:c9:9e:1d:bf:92:42:a4:6a:e1:a5:b4:ce:82:0a:c2:05:
31:ee:7a:51:9a:b4:cc:81:61:46:eb:33:a1:4b:98:8a:e8:88:
eb:44:ad:46:54:b0:fe:de:c3:77:5f:13:d8:b4:6f:bf:a8:52:
32:13:41:82:c3:3d:5f:63:e9:a2:3b:34:89:88:e8:4a:56:a4:
68:01:2e:4b:0d:97:43:79:e2:3a:14:8f:59:da:54:47:c0:78:
40:1c:b8:b2:a0:85:44:71:4c:d8:ba:14:46:30:01:02:ff:d1:
b8:9e:56:60:74:77:63:28:f4:c4:b0:97:f7:5a:d2:12:99:df:
e9:13:d1:97:c7:1d:8c:34:3d:ee:9c:b3:e2:bd:d7:68:2c:1c:
b2:96:81:bf:c2:5c:3c:55:11:85:1d:c8:b9:07:ba:c4:e9:98:
a7:c5:6e:3e:e2:0b:8d:0a:f5:a5:a0:fe:d9:9e:8f:c5:65:9f:
1e:f7:0b:78:f9:d7:d5:4a:93:86:29:06:75:da:21:d1:70:e2:
4e:98:2c:51:7d:06:95:4c:c1:78:27:49:53:ac:83:50:91:1f:
7e:c8:91:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:17 2024 by rpki-client on console-ams.rpki-client.org