Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/7WhKiOQ2p7TQCXUpvr1le5fwcmQ.roa
File: 7WhKiOQ2p7TQCXUpvr1le5fwcmQ.roa (raw, json)
Hash identifier: N0lVa8S5ighkmc/TuZYg2i+yenGb/7dYfT3MqM+21S4=
Subject key identifier: ED:68:4A:88:E4:36:A7:B4:D0:09:75:29:BE:BD:65:7B:97:F0:72:64
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018B900D5AA4A0127EE9F40F48A428E26E5E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/7WhKiOQ2p7TQCXUpvr1le5fwcmQ.roa
Signing time: Thu 02 Nov 2023 12:41:16 +0000
ROA not before: Thu 02 Nov 2023 12:41:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 185.244.139.0/24 maxlen: 24
212.119.32.0/23 maxlen: 24
212.119.34.0/24 maxlen: 24
194.169.168.0/22 maxlen: 24
193.218.35.0/24 maxlen: 24
45.144.227.0/24 maxlen: 24
91.190.101.0/24 maxlen: 24
62.197.144.0/20 maxlen: 24
213.109.151.0/24 maxlen: 24
45.135.184.0/24 maxlen: 24
92.62.120.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:0d:5a:a4:a0:12:7e:e9:f4:0f:48:a4:28:e2:6e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Nov 2 12:41:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed684a88e436a7b4d0097529bebd657b97f07264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:29:f6:79:a6:06:f4:e9:c9:b3:bc:89:15:ea:
34:d7:34:f9:0d:8f:ca:da:55:d2:4a:cd:15:54:5e:
d2:0b:4c:27:d6:98:6f:65:d9:99:6c:60:4a:a6:67:
07:93:16:b8:98:f0:f5:57:7a:3d:e7:71:ad:c4:21:
a0:1d:94:0a:3c:b9:80:13:7c:10:27:ac:84:78:9b:
b2:14:1d:23:c3:d3:fa:65:56:ed:44:42:d0:4d:99:
83:28:f0:e8:8a:5f:71:94:03:91:13:05:15:1c:5b:
57:3c:86:3d:90:52:53:b8:40:33:4e:0b:a8:d3:8d:
14:6e:5b:00:b5:7d:12:ce:70:b2:9c:ea:2d:57:63:
30:f9:01:46:e8:2f:b9:ad:74:3a:c4:46:6d:b1:a6:
98:0e:13:6b:33:2a:2c:ff:fb:42:dd:4f:a3:f5:ab:
0c:df:e1:e7:7e:89:83:cb:7e:98:4a:80:d5:08:0f:
c9:cd:55:f8:45:f9:01:37:a8:97:9f:2e:46:11:84:
95:eb:36:3a:86:33:26:1f:fb:c4:27:29:dd:d5:de:
42:45:10:67:51:c4:ab:92:03:6f:01:3d:53:82:90:
27:32:23:b8:61:57:99:d9:ca:dd:c3:5e:b0:b2:41:
b6:d6:66:56:64:df:e6:74:71:af:0e:37:ed:24:c1:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:68:4A:88:E4:36:A7:B4:D0:09:75:29:BE:BD:65:7B:97:F0:72:64
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/7WhKiOQ2p7TQCXUpvr1le5fwcmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.184.0/24
45.144.227.0/24
62.197.144.0/20
91.190.101.0/24
92.62.120.0/22
185.244.139.0/24
193.218.35.0/24
194.169.168.0/22
212.119.32.0-212.119.34.255
213.109.151.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:9d:1a:96:9d:87:98:c9:96:b6:dc:bd:2f:48:35:c2:af:e8:
97:84:91:36:be:31:7b:2a:6a:83:3f:b1:64:b3:87:3b:6b:df:
17:8f:19:34:77:b8:ec:29:76:65:b5:3e:41:75:09:e5:be:a8:
87:8b:42:db:a8:9d:0d:ce:ec:d6:69:d3:06:7a:e6:06:1f:5b:
49:35:7a:c9:14:d3:62:59:6d:33:44:93:de:36:c2:69:d9:78:
ac:d7:9c:2d:55:b0:48:36:0e:02:70:85:68:a9:24:f2:a7:0d:
5c:88:82:0c:2b:40:c4:b3:4f:00:6a:7d:84:eb:cd:e5:9a:17:
0e:56:f7:6b:be:1b:d5:d9:fd:03:c3:72:00:a1:d3:f9:33:d9:
f7:12:08:2f:84:ec:ef:9c:89:cf:46:70:bd:55:6e:ed:63:05:
7b:de:86:d8:c9:87:1d:a0:da:37:db:73:f2:4e:c0:ed:16:3c:
b0:3a:49:1c:56:31:a0:eb:8b:84:8c:3e:11:87:11:18:90:b9:
0b:ea:b7:2b:85:64:7a:5c:9b:af:18:59:57:82:56:eb:21:aa:
ec:15:8a:81:86:c9:e4:ea:9f:07:66:32:41:c2:c3:a4:cf:0a:
bd:d0:6e:0d:8b:3e:a5:08:45:19:53:b5:bf:3f:1a:ab:f0:f2:
f6:17:be:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org