Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AkaD-aTj80xN0Y6jOmYfPNxBcbI.roa
File: AkaD-aTj80xN0Y6jOmYfPNxBcbI.roa (raw, json)
Hash identifier: B8w/F8NoGYmcaa8YSGYqg0yGP2oAaF2oO5kIy5BarFo=
Subject key identifier: 02:46:83:F9:A4:E3:F3:4C:4D:D1:8E:A3:3A:66:1F:3C:DC:41:71:B2
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018775EFC9D9F350BA26929CDB666DA54F6E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AkaD-aTj80xN0Y6jOmYfPNxBcbI.roa
Signing time: Wed 12 Apr 2023 14:47:41 +0000
ROA not before: Wed 12 Apr 2023 14:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 188.241.243.0/24 maxlen: 24
188.212.155.0/24 maxlen: 24
87.247.149.0/24 maxlen: 24
87.247.151.0/24 maxlen: 24
188.241.182.0/24 maxlen: 24
91.188.204.0/24 maxlen: 24
89.37.62.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
213.232.94.0/23 maxlen: 24
185.135.141.0/24 maxlen: 24
185.135.143.0/24 maxlen: 24
45.156.159.0/24 maxlen: 24
185.255.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:ef:c9:d9:f3:50:ba:26:92:9c:db:66:6d:a5:4f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 12 14:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=024683f9a4e3f34c4dd18ea33a661f3cdc4171b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b4:4c:e3:56:ca:07:41:32:d6:79:37:f7:29:
6c:17:8f:54:a7:26:a5:5c:d3:ac:c5:e1:5a:40:a1:
ec:35:03:e9:d1:06:a9:39:43:73:a0:a7:8a:df:96:
13:14:12:0d:55:40:d0:64:b2:e2:8d:9c:68:04:c7:
43:a5:4f:17:e4:d0:93:20:7c:12:9a:e9:ce:48:34:
25:ff:e9:77:a0:23:88:bd:49:cb:b2:61:09:ec:91:
74:a4:f0:39:be:5b:69:3a:c0:9c:6a:63:7f:2d:b5:
2f:d8:73:ca:6c:cb:50:68:20:36:33:d8:1e:08:3b:
a2:a4:6f:90:e8:14:18:53:82:3a:c8:ff:19:b8:07:
3e:21:83:fb:97:b9:e7:75:7d:e4:6f:03:76:df:cd:
c7:d5:69:6b:e8:1d:8d:86:6e:76:e1:31:ec:8b:6d:
f1:d2:18:ca:ae:ad:bc:4b:9d:a4:37:c2:48:51:2f:
a8:f8:ed:d1:d5:62:63:bd:9c:16:ee:02:c1:a3:53:
de:d9:e5:58:fc:68:d8:ed:c8:13:18:c0:fe:b8:ff:
6f:bb:c8:64:5b:2b:44:ea:a1:53:07:60:47:6a:3b:
68:de:64:69:a6:ca:57:c5:2c:43:67:bc:c8:85:a1:
64:35:ee:87:b3:be:29:bc:17:32:c7:ef:96:ba:21:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:46:83:F9:A4:E3:F3:4C:4D:D1:8E:A3:3A:66:1F:3C:DC:41:71:B2
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AkaD-aTj80xN0Y6jOmYfPNxBcbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.159.0/24
87.247.149.0/24
87.247.151.0/24
89.37.62.0/23
91.188.204.0/24
185.135.141.0/24
185.135.143.0/24
185.255.169.0/24
188.212.155.0/24
188.241.182.0/24
188.241.243.0/24
213.232.94.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:0e:3a:54:39:19:01:f0:ef:65:56:96:26:2a:85:ce:57:d2:
24:b3:11:fa:e6:83:b2:02:98:4b:d7:13:31:d5:93:ca:f6:42:
06:80:a8:cb:86:64:b8:6d:5e:24:3f:c6:37:37:a3:74:e3:03:
34:0d:63:5a:79:9f:49:09:ee:8d:17:7b:45:67:59:df:ac:fe:
cb:0b:05:50:8d:ef:a9:f0:cb:ee:2d:fe:91:47:60:10:87:5c:
55:b6:2a:89:93:fe:8d:da:8b:d2:e3:24:8c:c9:c3:c1:68:0e:
4a:66:fd:ca:b3:de:f7:37:02:ea:73:7a:55:ea:21:54:1c:74:
c4:2e:8e:d5:af:c0:a3:68:e8:6c:d8:be:e4:68:de:12:e3:d4:
8f:91:53:5b:97:50:f0:c3:8d:e0:a0:6d:7a:78:fc:fa:c2:16:
07:f1:a6:21:6b:02:77:50:55:37:8f:e8:bd:ed:2b:b5:a6:43:
b2:e1:fa:e0:20:4e:17:9f:68:22:a3:4c:3a:94:d3:f6:de:80:
a3:6a:82:ff:06:da:20:5d:6c:f9:eb:a4:ad:5b:a1:81:b7:e1:
db:e3:e6:10:fd:48:b2:58:e8:5c:89:13:74:74:7e:8e:c7:a5:
02:67:3a:95:6c:5e:69:0b:ef:6c:9f:99:bd:9d:06:11:a3:ea:
62:2d:f4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:57 2023 by rpki-client on console-fra.rpki-client.org