Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Cr1jjKM9Klg99Bid44kSSZEDSp0.roa
File: Cr1jjKM9Klg99Bid44kSSZEDSp0.roa (raw, json)
Hash identifier: BEv2gwlJgd3NhvgT8MtV4jPAyIWrACK954jWFhnyYAs=
Subject key identifier: 0A:BD:63:8C:A3:3D:2A:58:3D:F4:18:9D:E3:89:12:49:91:03:4A:9D
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01892A50E17735E515A329279BFDCF56392C
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Cr1jjKM9Klg99Bid44kSSZEDSp0.roa
Signing time: Thu 06 Jul 2023 08:28:10 +0000
ROA not before: Thu 06 Jul 2023 08:28:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3507
IP address blocks: 193.23.130.0/24 maxlen: 24
188.240.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:50:e1:77:35:e5:15:a3:29:27:9b:fd:cf:56:39:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 6 08:28:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0abd638ca33d2a583df4189de389124991034a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:8a:75:5f:d8:0c:59:0a:ca:90:b3:06:29:
f4:02:32:6a:f4:a9:16:53:ff:4d:53:1f:48:0f:69:
85:1d:b4:79:a0:69:fa:51:38:cf:57:42:ae:a5:bd:
cd:ce:d2:38:67:8e:10:b8:e6:d1:4a:e9:50:62:4a:
6a:4e:91:50:d9:e8:f0:ff:35:9e:b9:73:3e:2a:86:
cd:e6:19:d0:a3:9a:51:bf:98:bc:86:45:56:ed:ab:
5e:7b:5a:7c:be:b5:ee:2d:dc:8e:b9:ae:2d:8e:11:
40:01:f8:93:9b:10:86:73:95:65:8b:e5:d8:43:30:
74:6b:34:a1:01:ea:1b:a2:43:81:73:8a:c5:8b:50:
93:7d:04:4f:85:42:3d:0c:ce:69:07:a9:27:39:9f:
84:40:01:80:e7:d7:ed:37:68:fb:93:70:60:5b:ff:
90:58:6d:fe:7f:42:07:13:07:e2:7f:4c:1e:e0:9b:
21:c0:8e:78:68:e3:7c:ec:90:17:78:61:12:40:c1:
a8:5b:9d:b3:10:51:50:8f:0e:1d:44:91:83:fc:7d:
66:e9:22:aa:4c:9a:d4:27:60:6f:f8:30:d5:03:97:
96:6c:ab:91:38:90:fb:b4:3c:30:0c:9e:0a:fc:15:
c9:c4:1d:13:6c:5d:87:d4:9d:28:85:0b:ca:88:67:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BD:63:8C:A3:3D:2A:58:3D:F4:18:9D:E3:89:12:49:91:03:4A:9D
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Cr1jjKM9Klg99Bid44kSSZEDSp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.240.232.0/24
193.23.130.0/24
Signature Algorithm: sha256WithRSAEncryption
43:03:61:0c:f6:1d:c6:b9:23:6e:7c:fd:13:74:d4:32:88:36:
fc:43:66:1c:a7:cb:14:0d:97:f7:8f:d1:f8:bd:87:c5:21:c9:
aa:b5:ad:50:a4:b1:d5:29:bb:44:da:f4:5f:3f:74:73:09:2d:
fc:9f:38:76:e0:3b:61:59:64:f5:f1:d4:11:18:9d:1e:5f:de:
9f:83:05:5f:be:22:f6:21:60:a0:5f:8d:c2:7d:ea:ad:cf:0d:
ce:6e:0f:d5:55:84:cb:38:a0:f5:90:f1:58:51:49:d5:73:e3:
51:c1:14:de:dd:4f:e2:7f:5c:93:10:18:0c:2d:49:a2:b2:84:
ff:48:84:88:0d:18:8c:b4:73:50:88:9c:86:64:41:68:cf:db:
17:87:2c:60:06:b5:7d:9a:f0:3f:8b:71:29:96:bf:35:d7:84:
15:62:6b:d0:41:20:9b:03:36:ef:98:12:2d:72:2a:cc:a4:4f:
fa:37:a6:77:97:22:3b:39:43:1e:54:4c:6a:54:ed:dc:c7:f3:
6b:3b:d8:b4:c4:3f:d7:3d:e3:41:1c:65:b2:45:e6:ea:f0:f6:
0a:45:7e:cc:2e:59:ee:27:42:9a:99:d4:b9:66:bb:71:f6:4b:
d9:92:1f:19:c1:9b:f6:31:4f:e3:e9:9f:9d:96:d2:a3:77:e2:
13:e2:e7:15
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYkqUOF3NeUVoyknm/3PVjksMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwNzA2MDgyODEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWJkNjM4Y2EzM2QyYTU4M2RmNDE4OWRlMzg5MTI0OTkxMDM0YTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqseKdV/YDFkKypCzBin0AjJq9KkW
U/9NUx9ID2mFHbR5oGn6UTjPV0Kupb3NztI4Z44QuObRSulQYkpqTpFQ2ejw/zWe
uXM+KobN5hnQo5pRv5i8hkVW7atee1p8vrXuLdyOua4tjhFAAfiTmxCGc5Vli+XY
QzB0azShAeobokOBc4rFi1CTfQRPhUI9DM5pB6knOZ+EQAGA59ftN2j7k3BgW/+Q
WG3+f0IHEwfif0we4JshwI54aON87JAXeGESQMGoW52zEFFQjw4dRJGD/H1m6SKq
TJrUJ2Bv+DDVA5eWbKuROJD7tDwwDJ4K/BXJxB0TbF2H1J0ohQvKiGemtwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAq9Y4yjPSpYPfQYneOJEkmRA0qdMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvQ3IxampLTTlLbGc5OUJpZDQ0a1NTWkVEU3AwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvPDoAwQA
wReCMA0GCSqGSIb3DQEBCwUAA4IBAQBDA2EM9h3GuSNufP0TdNQyiDb8Q2Ycp8sU
DZf3j9H4vYfFIcmqta1QpLHVKbtE2vRfP3RzCS38nzh24DthWWT18dQRGJ0eX96f
gwVfviL2IWCgX43Cfeqtzw3Obg/VVYTLOKD1kPFYUUnVc+NRwRTe3U/if1yTEBgM
LUmisoT/SISIDRiMtHNQiJyGZEFoz9sXhyxgBrV9mvA/i3Eplr8114QVYmvQQSCb
AzbvmBItcirMpE/6N6Z3lyI7OUMeVExqVO3cx/NrO9i0xD/XPeNBHGWyRebq8PYK
RX7MLlnuJ0KamdS5Zrtx9kvZkh8ZwZv2MU/j6Z+dltKjd+IT4ucV
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:53 2023 by rpki-client on console-ams.rpki-client.org