Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/BNjkNh3vf5prKTx3P0VGu6-uLE4.roa
File: BNjkNh3vf5prKTx3P0VGu6-uLE4.roa (raw, json)
Hash identifier: W1CW0Aw8V8lnK6MLI2pcYUD3y2PgUPjqfau8qPGRPis=
Subject key identifier: 04:D8:E4:36:1D:EF:7F:9A:6B:29:3C:77:3F:45:46:BB:AF:AE:2C:4E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018A61641ADEECA43D29F807E6BBF2EFBEE7
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/BNjkNh3vf5prKTx3P0VGu6-uLE4.roa
Signing time: Mon 04 Sep 2023 18:11:04 +0000
ROA not before: Mon 04 Sep 2023 18:11:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 93.114.192.0/24 maxlen: 24
188.241.243.0/24 maxlen: 24
188.241.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:61:64:1a:de:ec:a4:3d:29:f8:07:e6:bb:f2:ef:be:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 4 18:11:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04d8e4361def7f9a6b293c773f4546bbafae2c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ca:1e:f0:21:55:1b:53:23:87:d8:a9:f9:61:
4d:9b:2a:46:bd:1b:af:72:20:88:ea:9c:a1:df:06:
bf:30:18:cf:ea:b4:3c:33:97:fe:5d:69:2c:b8:16:
e8:d3:6e:45:0e:33:2a:f4:fc:0a:c4:bf:4e:b7:38:
4f:fb:e1:07:51:f2:7a:45:58:84:6c:8d:df:45:54:
4b:d6:df:26:e4:73:9a:b0:a3:8b:1b:2d:1a:95:f4:
3c:42:ff:eb:4c:b3:1a:75:c0:37:3b:1c:4d:23:6a:
32:d0:79:a4:0b:b3:94:73:77:20:27:3a:b9:78:c5:
86:12:46:af:14:2b:03:a3:c3:16:a1:6c:4c:19:dc:
18:d9:29:6b:73:98:1b:b5:eb:d3:09:3e:fe:5c:73:
da:9c:0e:1d:5d:2b:c7:23:c5:ab:30:ed:bf:31:5f:
5b:99:3e:ac:47:ed:ec:73:df:38:71:cf:49:7d:63:
74:8c:04:33:9c:8d:1d:c4:fb:5f:66:2c:92:07:b7:
2b:a3:28:63:31:77:e6:fe:0e:0a:66:70:30:af:df:
8a:35:73:25:2f:db:81:4a:cd:f6:9f:e4:bf:d8:53:
0b:80:17:4c:36:6e:c0:25:37:89:17:89:48:c1:43:
62:57:54:cf:b0:17:8a:5e:4a:1e:98:2b:18:12:7f:
1c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D8:E4:36:1D:EF:7F:9A:6B:29:3C:77:3F:45:46:BB:AF:AE:2C:4E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/BNjkNh3vf5prKTx3P0VGu6-uLE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.192.0/24
188.241.214.0/24
188.241.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d5:8c:52:a7:48:d7:56:7a:bc:d6:8c:0f:38:ee:32:db:cd:
5b:7e:15:2e:34:b6:a6:1b:55:66:c3:ef:3e:d5:dc:04:6c:fd:
c0:3e:e1:61:c8:04:16:e8:a2:b2:f4:b9:32:20:e3:25:ec:d1:
45:b9:67:e1:1b:65:09:fc:73:97:c7:a7:02:36:57:62:85:b4:
f5:82:28:cf:2a:c6:16:6b:7a:92:dc:56:f1:27:4d:0d:72:78:
f8:62:81:88:06:9f:3e:24:8b:ce:cd:e5:fa:5c:79:14:6e:53:
1e:a3:98:e1:68:34:94:5e:94:a8:15:c4:c4:29:ad:63:31:8d:
93:8a:d3:85:53:50:fe:00:70:df:8f:f7:78:a9:b6:59:01:ec:
67:f6:83:5d:56:54:ff:41:0b:df:14:44:ef:4f:4d:d8:64:42:
88:ab:d3:03:fa:ed:db:ca:7e:72:ab:12:a9:a4:82:23:08:60:
d1:3e:91:de:c9:73:fa:1b:bb:f8:76:dc:1d:f0:4c:c6:8b:a9:
b4:36:38:ff:c2:70:25:8d:87:69:e6:27:83:42:9e:75:4a:09:
3e:a0:9b:22:26:e8:35:23:1b:71:76:34:fa:b4:3e:a9:b4:5d:
93:22:d2:dd:94:da:34:9e:94:07:a1:7f:0a:c0:f6:7c:24:d0:
88:7d:d4:c6
-----BEGIN CERTIFICATE-----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 at Wed Dec 27 21:12:57 2023 by rpki-client on console-fra.rpki-client.org