Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/CbIsKRWPgNgWt1XvdGNV2AVMCxw.roa
File: CbIsKRWPgNgWt1XvdGNV2AVMCxw.roa (raw, json)
Hash identifier: cBkZBFM0gnzaHRxBaRBObmFFFnDX1y8erpuSkrGYX1U=
Subject key identifier: 09:B2:2C:29:15:8F:80:D8:16:B7:55:EF:74:63:55:D8:05:4C:0B:1C
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01860BFA3609EB28D3C5B26B169B1A1F63D5
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/CbIsKRWPgNgWt1XvdGNV2AVMCxw.roa
Signing time: Wed 01 Feb 2023 07:56:32 +0000
ROA not before: Wed 01 Feb 2023 07:56:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201814
IP address blocks: 185.241.208.0/24 maxlen: 24
45.80.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0b:fa:36:09:eb:28:d3:c5:b2:6b:16:9b:1a:1f:63:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 1 07:56:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09b22c29158f80d816b755ef746355d8054c0b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cf:00:ae:aa:95:e3:cf:ba:b5:ba:1b:a5:7a:
3e:25:e9:ac:c9:f5:c3:33:cf:f2:a9:91:fb:58:63:
3e:ff:17:35:c8:0f:d0:2a:8f:7f:a0:fd:38:c0:7e:
5f:47:84:dc:a7:6c:30:24:72:01:d0:5f:b4:78:8b:
32:30:62:fa:9a:0a:52:d0:93:df:f1:c6:8b:33:50:
9f:92:9b:e8:4a:e0:b7:ba:17:1f:85:dd:fa:69:29:
9c:0c:e8:16:87:34:9c:74:c3:31:03:24:12:77:5e:
ac:da:90:25:d0:7d:ef:5f:57:52:f8:98:e2:f3:97:
eb:97:9a:75:a8:cc:81:b6:4f:b2:b7:54:c1:dd:1d:
ab:73:16:ef:21:48:e6:45:4d:5f:ab:81:76:4c:77:
b1:91:29:a0:2e:c6:f1:6c:d1:48:f5:d4:b0:14:b7:
4e:59:9b:30:72:98:5f:3f:75:94:cc:01:a1:2c:69:
3b:1c:2b:da:be:cb:ba:45:b2:eb:ef:3c:64:37:2a:
6d:d8:17:06:8e:a8:0d:01:6c:a0:13:1f:aa:c0:b6:
ba:8f:2f:fb:84:0f:e2:d5:25:02:23:22:12:e6:3f:
98:ba:de:75:f4:3b:c4:c2:b7:22:28:8a:8b:db:a0:
4a:e3:b0:4c:93:cb:5b:40:85:b3:28:c2:18:0c:bf:
02:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B2:2C:29:15:8F:80:D8:16:B7:55:EF:74:63:55:D8:05:4C:0B:1C
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/CbIsKRWPgNgWt1XvdGNV2AVMCxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.158.0/24
185.241.208.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:07:7b:ba:b0:05:bc:7d:d5:5e:6e:7d:c6:0d:3d:f4:90:2f:
5a:28:c2:f9:25:d2:c7:1f:36:bb:9c:a3:1e:f0:ea:42:cd:c6:
6b:eb:47:83:55:8f:03:0a:c7:57:c4:cd:04:9b:ce:87:cf:8c:
51:4c:3e:d7:5b:05:de:5b:d5:70:88:db:b3:66:8b:ce:91:22:
60:65:84:ff:83:4a:0c:9e:9e:4c:6f:11:0e:64:c1:9a:8c:87:
ed:01:c6:4c:75:54:e6:51:3e:d9:f4:50:ae:4f:9e:de:fd:26:
7c:32:9c:5f:69:d5:7c:d5:7b:74:24:17:45:a2:ec:55:f3:19:
bf:00:fa:ff:ac:8d:86:6b:96:a9:d7:f2:37:a4:30:22:ac:e8:
81:22:ec:df:8a:c8:15:3d:b4:af:16:b4:82:3e:c8:8c:d0:a8:
50:01:9c:54:81:4e:f9:08:01:04:6c:ec:fb:47:e8:1e:46:c1:
6d:bc:28:60:ad:da:c3:9c:83:d9:0b:23:1d:fd:c7:ed:36:da:
cf:37:98:03:28:c6:6f:d3:f3:02:d5:6c:24:80:29:b1:e8:a9:
cc:dc:b8:9a:aa:bf:ca:2a:a0:87:8d:4b:90:de:a7:9d:9b:2a:
09:a0:2d:bb:20:e9:61:9d:8b:5c:ab:13:4e:fe:95:db:9d:e4:
5d:bd:34:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:09 2024 by rpki-client on console-ams.rpki-client.org