Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/C0toVMZZPUEeKAgiCOT0EBPNNKU.roa
File: C0toVMZZPUEeKAgiCOT0EBPNNKU.roa (raw, json)
Hash identifier: nEuFceTuShtMHGSX9wMwtdygmvBr+VLGaVQqcEj9XyQ=
Subject key identifier: 0B:4B:68:54:C6:59:3D:41:1E:28:08:22:08:E4:F4:10:13:CD:34:A5
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01875FD22DBC60500423724A44BA1CF5E19B
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/C0toVMZZPUEeKAgiCOT0EBPNNKU.roa
Signing time: Sat 08 Apr 2023 07:43:42 +0000
ROA not before: Sat 08 Apr 2023 07:43:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 203.0.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5f:d2:2d:bc:60:50:04:23:72:4a:44:ba:1c:f5:e1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 8 07:43:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b4b6854c6593d411e28082208e4f41013cd34a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b1:4a:ca:5d:be:4c:46:da:77:8b:43:e2:22:
d5:07:e2:92:d3:49:eb:e3:57:2a:62:d4:17:33:45:
83:0b:e0:c0:1d:fb:48:e9:8f:cb:f2:ca:eb:60:62:
31:03:75:57:bc:0c:d9:bc:8c:8a:87:e4:92:32:bd:
a0:0c:b6:bf:5e:f6:76:5d:c2:32:82:e3:2f:14:39:
ec:de:df:bb:7e:6e:2c:d3:1c:b5:60:ff:5c:76:f5:
e0:72:4b:4a:c2:6e:e7:ea:cc:61:90:72:16:c1:04:
2c:97:5d:85:c8:67:cc:b8:7b:48:8c:88:ca:a4:9f:
3b:08:b2:3e:0a:18:8f:ab:39:2e:b5:7d:1a:4e:63:
99:4c:7c:ec:e9:60:fa:9e:9d:f9:92:82:b2:8f:53:
3c:d6:71:40:da:60:9e:21:46:03:a1:e9:e7:eb:ec:
38:6b:20:52:94:02:35:af:28:a6:6e:58:0f:6f:e6:
07:5a:ea:1f:6f:d8:a1:3d:7f:3e:4f:5e:4a:4e:73:
1d:ce:eb:0b:98:a7:13:d2:f7:25:89:6a:4c:d8:71:
25:a3:74:f3:75:4f:fb:ff:fc:d3:d2:dc:c6:2c:24:
ac:e0:db:73:da:ab:93:d0:4d:f8:f1:ee:e2:d4:27:
8d:be:bc:aa:0e:b9:49:b8:02:c1:d9:55:ea:b6:f9:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4B:68:54:C6:59:3D:41:1E:28:08:22:08:E4:F4:10:13:CD:34:A5
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/C0toVMZZPUEeKAgiCOT0EBPNNKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.0.8.0/24
Signature Algorithm: sha256WithRSAEncryption
66:fd:19:46:3c:05:f6:7d:92:79:f2:5a:7b:5a:18:6e:62:00:
85:9d:03:d4:6e:b1:cf:08:72:fb:36:98:18:a7:47:d4:82:9d:
5a:da:9d:31:ab:f5:e8:73:dc:d5:c3:1e:5a:3d:fd:39:c4:b4:
2e:58:de:b9:3d:fb:82:88:30:b8:dc:06:31:d2:9f:71:5a:e9:
ef:20:50:32:4e:fa:c5:22:fa:ad:5e:b0:3b:d9:f4:2b:54:0d:
9a:af:9e:b3:c0:7b:0e:43:29:a2:5d:e1:bb:56:68:dc:e2:bf:
c8:2b:b7:d8:eb:67:e6:c7:56:c7:21:55:74:a2:d6:e1:b7:b7:
60:f5:bd:52:a9:06:8a:5d:ec:cc:18:60:f4:6b:75:ba:49:30:
cf:ef:5d:58:ef:34:a4:5c:e3:db:39:e1:9a:bc:f9:82:eb:8b:
4c:76:c0:0e:81:77:27:08:86:cc:98:b1:aa:28:84:bb:e5:d5:
7f:d7:d8:21:21:47:c3:91:3c:c7:f0:92:be:90:5d:95:fb:e2:
40:3c:a5:2b:35:28:35:0e:c9:51:b7:9d:5d:46:cb:e4:54:60:
b5:2d:70:0a:de:13:43:d9:44:7a:62:14:05:fb:bf:1f:7d:a5:
7d:50:d7:3e:2a:37:6c:c1:59:9f:ad:ac:b8:fc:42:6d:42:e1:
4c:ed:48:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:57 2023 by rpki-client on console-fra.rpki-client.org