Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ErrEFHn1L1EMKjFG3SXsFsIOOkw.roa
File: ErrEFHn1L1EMKjFG3SXsFsIOOkw.roa (raw, json)
Hash identifier: MhnZEKtYvCNMrHsA8UkYnKzrwpst2BN8gA7eQlUB0gk=
Subject key identifier: 12:BA:C4:14:79:F5:2F:51:0C:2A:31:46:DD:25:EC:16:C2:0E:3A:4C
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01874FB32B46F8F09C07E4D33C0DCA42F485
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ErrEFHn1L1EMKjFG3SXsFsIOOkw.roa
Signing time: Wed 05 Apr 2023 04:35:54 +0000
ROA not before: Wed 05 Apr 2023 04:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 188.240.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4f:b3:2b:46:f8:f0:9c:07:e4:d3:3c:0d:ca:42:f4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 5 04:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12bac41479f52f510c2a3146dd25ec16c20e3a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:da:9d:db:59:23:a1:61:a3:07:28:f7:35:
fe:33:00:80:3d:fe:89:58:4b:d4:86:82:33:3d:5a:
cb:1b:f5:d1:16:d8:23:64:d8:ed:3b:15:cd:e9:8f:
00:9f:17:26:7e:03:3b:c9:44:4f:42:13:78:ba:16:
c3:c5:1f:f9:49:fd:8e:d0:a6:4b:c3:71:c3:8d:08:
7b:66:f4:35:fe:67:8e:1f:cb:60:0a:13:28:74:d3:
97:4d:02:c7:42:3e:79:ec:8a:cb:ed:b4:03:99:16:
0c:bd:4a:3e:c0:0b:57:f9:4b:e8:c6:17:a9:f2:d0:
73:0f:cd:47:7d:11:41:49:db:da:fc:72:25:5c:f7:
b9:e3:5a:70:24:51:e2:b4:28:59:7f:2d:2c:b9:08:
a1:2d:eb:ac:e6:3d:a4:d5:b1:10:d2:65:c3:c7:a0:
e1:d2:c3:b2:50:5b:d5:69:64:59:12:0d:dc:c7:18:
72:2c:12:e9:61:cb:ff:01:95:7b:30:73:82:ac:74:
71:54:18:a0:62:a8:2e:0a:ec:79:be:99:80:ca:a5:
bf:2a:f6:ba:a2:b1:3b:27:18:e0:48:26:b4:82:b2:
ef:f8:ec:90:2d:35:42:3b:b8:47:00:45:82:0f:62:
07:aa:b8:34:4c:bc:68:5e:5a:2b:bb:6a:01:6e:af:
be:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BA:C4:14:79:F5:2F:51:0C:2A:31:46:DD:25:EC:16:C2:0E:3A:4C
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ErrEFHn1L1EMKjFG3SXsFsIOOkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.240.225.0/24
Signature Algorithm: sha256WithRSAEncryption
23:47:6f:19:61:59:0d:c5:9c:62:12:76:4b:a7:80:bc:a9:69:
69:a8:90:9a:de:1d:48:55:a6:67:61:fb:34:40:ec:ce:75:48:
34:9f:a3:f4:88:5a:c6:7a:00:d3:12:10:b0:74:15:79:fe:76:
2f:e9:0e:f4:d6:1e:52:41:30:24:e2:90:e1:43:d5:fe:79:61:
66:d2:f7:ee:1c:4e:3f:25:26:79:39:4c:53:2e:8b:5a:35:4d:
44:88:8e:fa:47:87:c3:9d:aa:90:c2:b6:07:f1:e3:94:20:fe:
6e:f9:29:91:bb:79:a9:5d:6d:33:20:f2:fb:02:3d:5e:8d:c8:
01:8f:8b:84:6d:d4:8e:b9:19:2d:c2:3d:f4:0a:8b:8d:f4:26:
53:cf:c7:16:41:39:1c:97:df:de:27:ab:bf:9a:5a:08:e5:1a:
7c:88:73:92:00:64:24:21:a3:88:7b:4b:f4:d6:7f:fa:94:09:
c6:21:17:8c:3d:71:ac:98:48:89:f3:27:cf:2d:b9:6d:8f:5e:
b9:3b:21:2d:cf:f0:91:87:cf:86:98:21:27:a7:ec:dc:46:b7:
7a:21:61:18:f5:64:5f:f4:ec:7b:99:b5:e8:24:20:77:e4:a5:
b5:7b:0d:35:e7:77:f4:ba:63:7f:03:a3:27:28:9e:fe:7e:6e:
29:ac:f0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-ams.rpki-client.org