Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/94IP6fL9ljelOJc16trnzQI2r8M.roa
File: 94IP6fL9ljelOJc16trnzQI2r8M.roa (raw, json)
Hash identifier: v56s7grmKScj6G8WK0BJNVsvJRsvso1oseoYW9e7OUg=
Subject key identifier: F7:82:0F:E9:F2:FD:96:37:A5:38:97:35:EA:DA:E7:CD:02:36:AF:C3
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018B8EA84CDA582049B28792D3BF9148FD79
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/94IP6fL9ljelOJc16trnzQI2r8M.roa
Signing time: Thu 02 Nov 2023 06:11:16 +0000
ROA not before: Thu 02 Nov 2023 06:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 62.106.89.0/24 maxlen: 24
45.130.201.0/24 maxlen: 24
185.244.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8e:a8:4c:da:58:20:49:b2:87:92:d3:bf:91:48:fd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Nov 2 06:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7820fe9f2fd9637a5389735eadae7cd0236afc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4f:e5:ba:a3:94:f9:1b:6c:b4:3d:05:4c:27:
53:f4:aa:c7:09:1d:8d:be:f3:cc:76:8a:da:20:bb:
3e:fd:34:42:c9:a2:6b:0b:b8:7c:b4:79:cc:d3:8e:
cc:d8:1d:88:a2:09:26:30:de:f2:c2:7c:ae:90:0a:
0b:5a:35:79:ae:01:47:2d:25:c8:3a:20:20:9a:7e:
f9:6b:16:c4:ef:8f:d6:2d:63:d3:21:29:92:3e:68:
81:7c:b6:ab:38:92:3e:66:22:e1:6d:9f:e7:25:29:
3d:a4:0c:89:1c:d5:9c:45:e4:b7:e4:14:33:70:ad:
3b:6e:48:23:9b:18:1f:52:ab:03:d5:06:f8:9a:71:
85:87:b8:29:8e:b8:6e:61:09:d9:25:c5:7a:c8:e1:
03:7c:fe:1b:2c:44:77:d3:2d:9a:20:b5:68:d9:a4:
7f:42:99:b3:4f:fa:19:2f:4b:23:60:5c:aa:32:f0:
ce:3c:14:f4:11:8d:c8:b8:f1:3b:ac:57:81:d6:62:
51:ee:67:e1:27:91:5d:3c:1d:18:80:75:f9:3a:24:
82:93:99:63:a8:8a:fb:fb:1c:74:95:03:f9:39:07:
f8:3f:b0:0a:b1:8a:7f:6c:2c:b0:15:fc:f1:43:79:
ec:92:8b:07:98:20:73:5a:40:a1:8b:02:2d:2a:de:
ac:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:82:0F:E9:F2:FD:96:37:A5:38:97:35:EA:DA:E7:CD:02:36:AF:C3
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/94IP6fL9ljelOJc16trnzQI2r8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.201.0/24
62.106.89.0/24
185.244.138.0/24
Signature Algorithm: sha256WithRSAEncryption
70:22:52:82:f4:8c:ce:5a:87:e1:b8:53:ea:cc:e7:62:fc:63:
41:37:e4:2d:92:cc:78:a0:2b:77:01:56:6b:eb:2e:b8:b9:8c:
86:b7:0d:fd:49:88:bc:bc:83:71:20:6e:5f:08:04:bb:da:af:
95:f9:b5:f5:b0:bc:ba:cd:78:87:e4:fb:6c:2f:40:fc:fb:98:
4b:08:47:0b:a7:55:f6:77:a0:ec:27:d2:8e:02:94:75:bb:c0:
d2:5d:17:64:2c:48:2a:ba:77:f7:47:ad:9d:6d:af:41:e6:5b:
1f:72:1b:83:30:8b:ad:5e:34:d5:ae:28:75:eb:da:b0:09:e3:
cd:20:36:75:a0:b9:6f:fd:76:99:7e:c8:f8:c1:40:de:40:aa:
de:28:24:86:b7:3a:54:83:29:c1:50:d1:5f:5a:06:d9:5a:36:
31:26:d2:f4:65:a2:d7:65:42:54:1f:73:9b:5e:6d:76:d3:d7:
29:6d:c9:0f:6e:df:6b:a5:69:ac:1e:06:48:18:58:28:a3:c8:
15:0a:89:c0:d0:19:5a:54:53:d9:cc:d0:b8:5d:c6:f6:2a:00:
ff:57:75:ea:5b:f5:f3:0c:b7:2a:99:dc:8f:af:9a:30:24:a8:
81:d2:80:43:a5:b5:7f:35:8a:33:29:e6:64:e6:ec:5e:36:0d:
26:22:21:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 13:26:13 2023 by rpki-client on console-ams.rpki-client.org