Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Go0Jkz5h4kKR7cGbC0BYLzK1EKc.roa
File: Go0Jkz5h4kKR7cGbC0BYLzK1EKc.roa (raw, json)
Hash identifier: VTPx2x1gLwCpvMczj15YKKIEXW7BcGJmROY3IfEYFwM=
Subject key identifier: 1A:8D:09:93:3E:61:E2:42:91:ED:C1:9B:0B:40:58:2F:32:B5:10:A7
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01889F01733FC6C542AA0FB0A457F5EEB11A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Go0Jkz5h4kKR7cGbC0BYLzK1EKc.roa
Signing time: Fri 09 Jun 2023 07:14:12 +0000
ROA not before: Fri 09 Jun 2023 07:14:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 188.214.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:01:73:3f:c6:c5:42:aa:0f:b0:a4:57:f5:ee:b1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 9 07:14:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a8d09933e61e24291edc19b0b40582f32b510a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:e9:cc:e9:56:97:7d:27:24:5f:cb:b0:20:
af:30:c9:0e:15:56:6a:fd:f5:ee:34:6d:87:40:67:
28:30:21:43:fe:6e:5f:49:1b:40:6c:fb:53:6d:af:
a4:36:3a:1d:3a:f6:74:86:5b:1b:da:f1:72:bd:5b:
cc:70:c7:ca:e0:b1:57:db:99:4e:26:52:e6:5d:62:
74:c6:c5:3c:69:73:32:2b:80:23:6a:46:7c:b6:e6:
3f:16:3f:62:f9:57:bb:68:78:23:30:2d:e5:d4:f9:
83:cc:5f:28:3f:0f:1e:82:dd:60:c5:c9:cc:17:04:
a3:14:3b:5d:77:d6:39:ec:b7:f1:ee:fd:ac:d8:08:
c2:a6:bb:4a:8d:c6:dd:ca:a7:44:4c:3c:83:49:03:
f0:57:d4:d5:e8:0b:22:fb:90:e1:f3:17:b9:e7:47:
7b:e9:66:bd:b9:4a:d5:2f:86:f5:bf:68:62:94:66:
87:2b:49:f1:9e:40:21:28:5e:2d:52:45:9e:73:fa:
4c:74:8b:dd:17:e9:d8:07:bc:82:35:fc:01:f5:6a:
d3:ed:9b:54:81:d8:fc:f3:e1:34:db:4f:e3:e2:3c:
04:16:33:d0:2c:b5:be:9c:f6:05:38:f5:b7:3c:9e:
db:da:8a:a9:35:a5:b0:58:57:8c:a8:f5:c9:e9:f7:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8D:09:93:3E:61:E2:42:91:ED:C1:9B:0B:40:58:2F:32:B5:10:A7
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Go0Jkz5h4kKR7cGbC0BYLzK1EKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.27.0/24
Signature Algorithm: sha256WithRSAEncryption
42:15:35:a0:3a:bf:ec:7f:66:ca:8c:12:e9:74:ae:45:1c:1e:
df:ba:ba:38:a2:70:13:42:1b:94:fb:7d:79:99:2a:ed:ae:f4:
63:89:bd:3b:d3:b5:17:05:44:55:51:3a:e7:ea:67:c1:8f:0b:
15:11:04:d7:d9:4f:54:36:db:95:a0:19:8c:98:47:42:24:32:
21:fa:f9:c6:97:d2:f7:f9:e4:35:4d:d9:9f:55:9c:fc:a2:dc:
2c:3c:e9:0d:fd:2f:79:c4:a7:bb:5d:1c:27:fe:03:1d:36:23:
69:bd:e9:50:21:86:2c:00:0b:98:71:61:39:86:5b:9f:50:e2:
23:a3:a6:7d:10:55:3c:a6:b4:f6:06:d6:1f:30:5f:6f:dc:16:
71:5b:fa:37:cd:7c:32:af:ce:41:f0:76:7b:e7:5c:8d:84:cf:
dd:92:3f:f9:4b:54:fb:d5:7d:dc:c3:d6:d4:be:53:7c:db:34:
1c:13:90:92:71:ab:77:78:ab:d2:e8:e3:45:65:18:1c:4a:00:
2c:5e:30:59:36:4d:ae:55:44:ec:76:a1:e5:99:bf:f0:8c:b2:
a2:d9:1a:43:fa:32:78:d5:a4:a3:15:11:e0:aa:fa:13:59:6f:
b0:50:1b:ec:5f:c4:3f:a2:2e:c3:5f:fb:27:c3:f8:da:f9:a6:
05:8f:cf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-ams.rpki-client.org