Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/G0anugTJzhVcaIdlO7oGi7pJe0k.roa
File: G0anugTJzhVcaIdlO7oGi7pJe0k.roa (raw, json)
Hash identifier: jtdxAKewUzGg4z6pNY4HfT4yFRZyU35O1BOs8lh8SLU=
Subject key identifier: 1B:46:A7:BA:04:C9:CE:15:5C:68:87:65:3B:BA:06:8B:BA:49:7B:49
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0189D3A25808CCA293E7EC2EEA6C01EAC038
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/G0anugTJzhVcaIdlO7oGi7pJe0k.roa
Signing time: Tue 08 Aug 2023 05:32:59 +0000
ROA not before: Tue 08 Aug 2023 05:32:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 93.114.192.0/24 maxlen: 24
188.241.243.0/24 maxlen: 24
89.37.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:a2:58:08:cc:a2:93:e7:ec:2e:ea:6c:01:ea:c0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 8 05:32:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b46a7ba04c9ce155c6887653bba068bba497b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:2d:6c:d0:50:93:a7:e0:0b:c6:57:66:84:
b3:b9:70:ad:63:1c:fa:71:c4:a7:69:fb:ea:73:99:
9f:70:e1:9b:b4:fe:7e:ca:a3:0f:26:41:bd:70:be:
64:85:ec:f4:71:09:a2:17:a7:3f:b2:01:a7:7d:b2:
28:4d:15:dd:3d:f3:dc:39:b9:f2:ff:fb:d8:ac:96:
be:ad:89:ea:86:de:4e:1b:d7:53:35:9e:d7:74:e2:
27:de:b2:f0:db:08:91:42:40:92:9c:c2:71:89:34:
22:b7:a2:1b:85:b4:1d:80:6f:0e:ae:8b:82:09:da:
18:ec:9f:45:bb:df:67:b5:a6:5e:b9:45:61:4b:35:
cb:b8:8c:b8:e5:fe:5f:18:db:03:f3:05:86:e3:53:
30:37:43:5e:11:c0:8e:c5:d5:b2:4e:1b:1b:96:87:
35:6c:62:f6:ff:10:27:d2:d1:3f:ce:26:b2:19:1f:
66:32:01:db:71:19:23:04:bf:81:16:15:14:69:2f:
83:2d:24:b7:dc:83:69:29:3a:b1:03:bb:e0:aa:e0:
ea:2d:27:2d:32:a4:19:48:27:21:37:9e:12:a2:4a:
90:c0:0f:64:da:d2:de:9f:30:02:2f:5d:90:c5:aa:
2d:45:ba:e3:a0:ca:e4:4a:e6:75:27:b0:ad:f4:85:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:46:A7:BA:04:C9:CE:15:5C:68:87:65:3B:BA:06:8B:BA:49:7B:49
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/G0anugTJzhVcaIdlO7oGi7pJe0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.62.0/24
93.114.192.0/24
188.241.243.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ea:12:39:97:e8:d6:79:f2:3c:8b:0c:cd:43:2c:75:c9:28:
39:a1:d0:c7:40:04:06:3a:9c:e3:ba:57:32:b6:10:55:2f:27:
49:94:05:cf:61:18:4d:0c:26:e9:49:39:a8:60:00:fb:d9:7c:
84:97:d0:a1:62:b5:e5:31:a4:4f:df:a1:c8:ee:73:bb:ce:0a:
32:b7:27:20:0c:4d:41:6f:7d:27:70:c7:f9:74:45:5b:43:ed:
6a:94:e5:42:3b:74:c8:16:cd:76:8f:c1:79:31:ee:50:b5:60:
4c:df:0e:01:35:df:f9:e0:a3:0b:87:90:5e:3d:bc:bd:ca:b1:
85:e4:80:7a:40:56:a3:9f:e3:68:19:88:3c:d9:fe:e9:97:a0:
9f:93:c2:48:63:c5:85:4b:1f:18:2f:c6:bf:97:85:47:04:c2:
f6:a9:9c:17:e9:2f:b8:14:85:6d:08:b9:e0:ae:e9:5c:85:d6:
e0:b4:d5:18:62:f0:6b:b0:14:ef:3f:e9:ff:75:fa:30:96:18:
78:5b:f7:d6:66:4e:e7:17:e0:84:c6:cc:6d:0d:47:c0:a8:3b:
25:74:f2:b9:17:aa:78:a0:4b:2a:4d:78:49:de:f7:e0:9d:98:
6a:da:73:ab:ee:13:20:fd:03:9e:6d:c5:00:3f:e8:50:51:d0:
ee:cc:89:7d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYnTolgIzKKT5+wu6mwB6sA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwODA4MDUzMjU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjQ2YTdiYTA0YzljZTE1NWM2ODg3NjUzYmJhMDY4YmJhNDk3YjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS0tbNBQk6fgC8ZXZoSzuXCtYxz6
ccSnafvqc5mfcOGbtP5+yqMPJkG9cL5khez0cQmiF6c/sgGnfbIoTRXdPfPcObny
//vYrJa+rYnqht5OG9dTNZ7XdOIn3rLw2wiRQkCSnMJxiTQit6IbhbQdgG8OrouC
CdoY7J9Fu99ntaZeuUVhSzXLuIy45f5fGNsD8wWG41MwN0NeEcCOxdWyThsbloc1
bGL2/xAn0tE/ziayGR9mMgHbcRkjBL+BFhUUaS+DLSS33INpKTqxA7vgquDqLSct
MqQZSCchN54SokqQwA9k2tLenzACL12QxaotRbrjoMrkSuZ1J7Ct9IVueQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBtGp7oEyc4VXGiHZTu6Bou6SXtJMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvRzBhbnVnVEp6aFZjYUlkbE83b0dpN3BKZTBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSU+AwQA
XXLAAwQAvPHzMA0GCSqGSIb3DQEBCwUAA4IBAQBG6hI5l+jWefI8iwzNQyx1ySg5
odDHQAQGOpzjulcythBVLydJlAXPYRhNDCbpSTmoYAD72XyEl9ChYrXlMaRP36HI
7nO7zgoytycgDE1Bb30ncMf5dEVbQ+1qlOVCO3TIFs12j8F5Me5QtWBM3w4BNd/5
4KMLh5BePby9yrGF5IB6QFajn+NoGYg82f7pl6Cfk8JIY8WFSx8YL8a/l4VHBML2
qZwX6S+4FIVtCLngrulchdbgtNUYYvBrsBTvP+n/dfowlhh4W/fWZk7nF+CExsxt
DUfAqDsldPK5F6p4oEsqTXhJ3vfgnZhq2nOr7hMg/QOebcUAP+hQUdDuzIl9
-----END CERTIFICATE-----
Generated at Thu Aug 10 12:34:25 2023 by rpki-client on console-fra.rpki-client.org