Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/B_m7yiddzx9jrHJaWxjQOCeBCqI.roa
File: B_m7yiddzx9jrHJaWxjQOCeBCqI.roa (raw, json)
Hash identifier: zBIdVk1Oxa80XNrCQaXSuvU2gj/WfZAmeeOk1mu6kD8=
Subject key identifier: 07:F9:BB:CA:27:5D:CF:1F:63:AC:72:5A:5B:18:D0:38:27:81:0A:A2
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01869C92B67960C52D29CAAEC88E7865C0B4
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/B_m7yiddzx9jrHJaWxjQOCeBCqI.roa
Signing time: Wed 01 Mar 2023 09:48:25 +0000
ROA not before: Wed 01 Mar 2023 09:48:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 188.241.243.0/24 maxlen: 24
185.135.141.0/24 maxlen: 24
87.247.149.0/24 maxlen: 24
87.247.151.0/24 maxlen: 24
188.241.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:92:b6:79:60:c5:2d:29:ca:ae:c8:8e:78:65:c0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 1 09:48:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07f9bbca275dcf1f63ac725a5b18d03827810aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:25:84:76:e8:81:17:a4:6e:5c:20:7c:d6:ea:
94:d3:81:cf:4e:53:6c:dc:59:15:10:0c:ff:98:6b:
d5:cc:12:77:90:8a:c3:08:9d:4b:0e:9b:0b:50:18:
45:4a:85:eb:67:90:6b:c4:46:bb:3f:85:a2:42:f6:
69:b5:5c:0f:6a:8a:24:78:9b:26:f6:78:c2:b3:dc:
84:38:0e:d7:50:df:5c:07:f2:93:a9:c7:f6:b7:3c:
0b:c8:1f:f5:4c:be:96:df:11:f6:5b:b3:c1:c1:b9:
cc:31:a3:d7:2f:bf:0a:07:5c:d5:74:13:3f:8c:a4:
23:4d:f6:90:62:0a:8b:70:5c:b2:a7:f3:0a:5d:7a:
5f:da:c6:f5:41:1f:d1:c5:c9:07:27:33:ef:31:97:
3f:13:2a:09:c6:a8:02:d0:35:51:f8:f9:4e:d4:4f:
b9:78:b3:a8:0a:89:80:ce:62:6d:f1:52:ce:93:15:
cf:a6:6d:3b:81:0d:d3:8f:0b:87:ba:9e:16:9e:af:
bd:83:49:83:0e:36:fc:27:0f:04:31:24:d2:39:c4:
77:90:ae:a9:94:7a:49:ba:be:f7:2a:e5:2e:58:e1:
a7:22:5e:54:7f:81:72:62:00:3d:41:e7:19:18:46:
4a:63:a9:a5:ee:69:9e:6d:2e:ac:f2:6a:12:91:50:
02:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F9:BB:CA:27:5D:CF:1F:63:AC:72:5A:5B:18:D0:38:27:81:0A:A2
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/B_m7yiddzx9jrHJaWxjQOCeBCqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.149.0/24
87.247.151.0/24
185.135.141.0/24
188.241.182.0/24
188.241.243.0/24
Signature Algorithm: sha256WithRSAEncryption
95:11:a6:ff:62:f0:72:c9:4d:35:2d:5b:a3:1c:24:34:ac:17:
2c:be:fa:6c:c4:ca:be:d0:93:0e:44:33:84:23:70:62:a8:f5:
43:af:d0:c7:7c:c9:e5:6d:67:5e:fe:8f:19:df:5f:39:1e:8a:
4d:e0:32:8a:09:c2:4d:5a:c8:56:b1:c9:ec:ca:67:41:8d:5f:
d1:ee:91:3f:ea:40:c9:dc:f2:63:91:30:a2:da:eb:a6:b3:8d:
db:89:e7:61:65:ad:42:57:b4:e5:c6:fa:c8:8f:96:20:a5:84:
d2:96:33:a7:63:04:5f:b5:23:fc:e8:ac:66:f0:f8:4b:ef:1e:
0e:f0:1d:0d:93:42:90:a6:c5:52:93:6f:b4:99:f7:a9:41:80:
52:88:9c:c6:89:53:d7:5f:8b:d6:9f:ed:4c:ec:4b:45:9b:25:
1e:ca:2d:14:59:d4:67:a8:ad:c8:9a:ca:dd:e7:e1:27:7c:e9:
81:a2:b8:e5:8f:10:ec:97:7d:85:04:02:48:86:b8:b8:91:2f:
39:93:1f:1d:a2:78:2b:30:c6:64:db:cb:b1:93:e0:7e:9e:9b:
fd:f3:0e:1a:09:62:94:20:78:72:18:f2:14:7c:73:64:d2:3d:
df:1a:01:ec:c8:fd:01:f0:89:04:57:fb:05:36:c0:cd:bf:1d:
0b:33:67:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:53 2023 by rpki-client on console-ams.rpki-client.org