Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Am64uTqNJYw0eta95V-vruGdfRE.roa
File: Am64uTqNJYw0eta95V-vruGdfRE.roa (raw, json)
Hash identifier: KKy2IHtWPbBYtBF9IUVQCuaBRl7gJEtRra5Y0EjuOz4=
Subject key identifier: 02:6E:B8:B9:3A:8D:25:8C:34:7A:D6:BD:E5:5F:AF:AE:E1:9D:7D:11
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018571032281214A92912F00888D48173A88
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Am64uTqNJYw0eta95V-vruGdfRE.roa
Signing time: Mon 02 Jan 2023 05:45:08 +0000
ROA not before: Mon 02 Jan 2023 05:45:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 263824
IP address blocks: 178.238.12.0/22 maxlen: 24
80.67.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:22:81:21:4a:92:91:2f:00:88:8d:48:17:3a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=026eb8b93a8d258c347ad6bde55fafaee19d7d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9a:96:e3:bb:d6:dc:56:6c:a1:ab:e3:7b:12:
62:ca:15:de:0e:44:ce:6a:27:24:d2:5a:9c:ad:3d:
ab:31:be:09:1c:d6:30:e2:3d:61:78:74:7f:1d:c3:
2a:62:24:57:b0:5d:d3:7e:91:ce:31:9a:d3:d3:80:
f9:36:5f:de:fe:25:97:85:71:68:14:1b:2a:20:6e:
72:91:a9:66:46:db:f1:0c:3b:35:b4:c8:53:50:31:
75:b4:1b:d7:15:36:ea:c1:17:dc:4b:68:05:8b:3d:
22:72:91:5e:2e:00:88:d7:19:b5:5c:4c:bd:46:5c:
c2:5c:d1:1f:a0:0c:dc:a3:cf:55:ae:a7:3b:c8:55:
f1:ff:ee:1c:fa:0a:83:d5:d4:b4:3e:96:ce:ef:11:
2d:b5:a4:94:c3:de:e4:a0:f4:f9:06:00:bb:8e:37:
15:c8:fa:bb:f9:14:19:92:c2:8e:ba:52:fb:11:b5:
af:bd:38:a4:62:4b:25:e0:d0:71:9b:8d:97:1d:f3:
bd:93:f2:de:be:c6:fc:4b:01:0a:f6:bc:01:92:c8:
c4:0f:23:8b:ae:76:fd:dc:18:b0:23:cf:91:e4:a3:
39:8d:1e:b6:93:a4:00:56:73:ba:60:ec:35:53:4f:
a6:34:d2:af:03:a9:ca:e1:95:8b:ee:f0:26:41:be:
77:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6E:B8:B9:3A:8D:25:8C:34:7A:D6:BD:E5:5F:AF:AE:E1:9D:7D:11
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Am64uTqNJYw0eta95V-vruGdfRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.32.0/22
178.238.12.0/22
Signature Algorithm: sha256WithRSAEncryption
85:6e:29:a5:04:4f:bf:f4:cb:87:5a:dc:76:f0:05:bc:58:7e:
ef:a9:f0:71:4e:1c:14:42:bb:6e:95:94:ad:71:2f:7e:2c:41:
db:8c:02:79:43:d0:b2:4c:e1:61:f3:1e:d2:65:46:00:96:9a:
79:87:d7:e5:5d:01:28:67:20:5d:24:da:ac:66:20:6b:7d:bd:
df:11:01:c7:95:44:a9:b2:a0:cc:b3:88:5d:83:85:ec:3d:f1:
09:97:c3:20:b9:18:e1:47:1d:82:62:8d:f5:ff:3d:1e:ad:8a:
ae:1f:b5:6b:97:65:44:4b:d1:dd:cc:f8:05:1f:1f:6a:49:e7:
bf:4e:1a:2d:4e:ed:fe:85:3c:ae:a1:75:07:70:5d:33:2b:e5:
73:65:c3:3a:54:8e:55:ac:d4:c9:5a:9a:6d:8e:0b:5b:33:cc:
6b:6f:b5:ca:8f:ea:1c:3e:e4:d3:c3:87:5c:48:6d:ad:67:63:
39:6c:08:a5:66:22:b9:25:b9:0e:15:30:49:42:64:24:90:6f:
f3:c8:28:4e:8a:87:4d:ea:01:a1:3a:fd:10:1a:07:e6:fc:a8:
9f:8e:b2:57:c5:4d:8a:cc:3f:d9:f1:d1:3b:15:9c:5c:4d:56:
65:61:b6:72:6c:bf:44:36:c0:68:6e:c1:0a:0e:75:01:bc:77:
ba:15:11:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org