Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/7JY2NMDlTzfw7WUQ4ppmmE2AjAw.roa
File: 7JY2NMDlTzfw7WUQ4ppmmE2AjAw.roa (raw, json)
Hash identifier: yivfi1jY3dSV2LOTRs9EwPpdgUKOhTSeGrNQ6x8mj4o=
Subject key identifier: EC:96:36:34:C0:E5:4F:37:F0:ED:65:10:E2:9A:66:98:4D:80:8C:0C
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018A170254CD8197CFB4255DE7A4F95ADB2E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/7JY2NMDlTzfw7WUQ4ppmmE2AjAw.roa
Signing time: Mon 21 Aug 2023 07:32:23 +0000
ROA not before: Mon 21 Aug 2023 07:32:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 84.54.33.0/24 maxlen: 24
193.218.34.0/24 maxlen: 24
45.83.28.0/24 maxlen: 24
2a0b:64c5::/32 maxlen: 48
2a0b:64c7::/32 maxlen: 32
2a0b:64c6::/32 maxlen: 32
2a0b:64c4::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:02:54:cd:81:97:cf:b4:25:5d:e7:a4:f9:5a:db:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 21 07:32:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec963634c0e54f37f0ed6510e29a66984d808c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bb:9e:b4:a1:6a:af:0b:df:3f:b5:f5:b3:2e:
b4:3a:a0:d0:66:0c:c5:97:c5:f1:93:6c:4c:4d:87:
ed:ef:19:1e:9b:ea:e4:e9:63:94:ef:03:aa:93:e3:
ea:d2:92:c4:93:69:06:64:7e:94:8d:ab:c1:a2:41:
e8:ce:cf:b4:fe:19:8a:bc:6c:b6:65:71:c6:ec:8d:
48:9e:bf:c2:c5:46:43:b6:e9:86:f1:13:2b:40:bd:
cc:57:c6:0b:8b:2f:f3:56:31:39:29:f7:eb:b7:25:
f5:3c:4c:20:3c:b9:16:c3:08:dc:63:5f:b1:01:d0:
c9:e2:8f:cd:de:cd:87:0f:fd:5a:22:df:db:3a:0a:
25:09:18:90:7f:70:58:2e:e7:00:cd:77:af:25:b9:
6c:ac:9b:91:21:d7:11:fa:0b:f1:6a:1e:dd:20:ce:
e0:86:03:8e:e5:7f:7b:26:57:f7:d6:e2:d5:ba:38:
64:75:dd:de:59:6b:f0:59:d5:cb:68:82:89:38:c4:
85:ce:49:b6:0d:e0:53:2f:b4:ba:97:a9:ef:52:3e:
b2:43:77:4e:3e:bc:90:eb:84:3f:99:a5:01:88:5a:
13:35:0d:ec:9b:89:9c:2b:b1:d0:77:9e:6a:65:72:
a8:70:5d:2e:b5:6a:d7:20:39:b1:7e:6f:87:14:4c:
0c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:96:36:34:C0:E5:4F:37:F0:ED:65:10:E2:9A:66:98:4D:80:8C:0C
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/7JY2NMDlTzfw7WUQ4ppmmE2AjAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.28.0/24
84.54.33.0/24
193.218.34.0/24
IPv6:
2a0b:64c4::/30
Signature Algorithm: sha256WithRSAEncryption
09:56:32:a0:53:18:dc:b4:70:fd:6e:54:f4:ee:1a:16:bc:bf:
18:fb:6e:b6:59:a6:0f:9f:de:b5:dc:c9:df:80:df:46:a3:d1:
f3:5f:39:4c:1f:d0:18:39:fb:42:eb:3e:ab:60:f3:e4:e7:ac:
41:e7:bb:b2:4d:36:5e:ba:52:40:bc:90:5e:71:16:2f:42:dd:
e8:75:b3:17:33:a8:1b:4b:8f:49:26:12:cf:90:96:a0:d8:8a:
72:cd:bd:5a:5c:10:aa:93:de:7b:e4:28:c8:52:07:6a:f0:3e:
48:74:7f:b5:3f:3b:9f:20:f3:f1:20:96:a1:43:dd:b2:5e:64:
d8:94:4d:5a:4c:a1:21:73:9d:dd:f2:d6:7d:08:89:ea:e0:45:
4e:e9:ba:55:7c:e2:ba:22:61:c2:65:f1:86:9c:99:8a:2e:a7:
ab:ac:88:ec:d5:de:2b:0b:30:2d:48:e8:cd:3a:7e:d5:ca:96:
a6:fa:24:d9:7b:7b:65:d7:39:ab:0b:f4:de:ec:cc:66:d3:df:
49:6e:4c:ae:7b:6f:55:61:b2:d2:ae:2b:b9:fc:60:ea:92:b4:
61:e8:32:b4:13:a9:00:a8:62:b9:b3:bb:f8:76:ce:8a:28:54:
97:c6:2b:54:ce:e3:f4:e5:40:79:c7:db:26:b5:ae:33:72:6f:
87:9a:21:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 10:01:23 2023 by rpki-client on console-fra.rpki-client.org